Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File:                     hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier:          OOkGUSnnrX8rsqKImrSCxRbc7FKvh5GcVzPjcOEx6io=
Subject key identifier:   4E:27:B2:B5:6D:70:3D:84:E7:C5:F3:5C:43:5E:65:1F:D6:77:24:3D
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer:       /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number:          6F
Signing time:             Tue 13 Oct 2026 08:42:33 +0000
Manifest this update:     Tue 13 Oct 2026 08:42:32 +0000
Manifest next update:     Tue 20 Oct 2026 08:42:32 +0000
Files and hashes:         1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: f5wDr1N38jb7a1gK+DLzDPTKpq4D29OPeWQGzNEVI1E=)
                          2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: 6esaAykmvMcM9nd5KOv3yAwbdE8H9oSkUnwpS/MXy7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 08:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
        Validity
            Not Before: Oct 13 08:42:32 2026 GMT
            Not After : Oct 20 08:42:32 2026 GMT
        Subject: CN=6acdeef8-4d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:bd:a0:5a:b7:31:ce:6e:3a:15:ec:72:5b:
                    b7:3a:07:c0:82:26:db:03:4c:1c:13:8b:b7:45:14:
                    25:77:bc:14:73:9f:72:bf:01:79:ec:42:3f:c9:8e:
                    35:69:34:0e:45:55:cf:43:4f:27:b8:b5:b1:5c:80:
                    f7:50:f8:93:ba:82:93:0a:ca:58:38:de:ad:94:ac:
                    e6:9c:b3:51:e6:2e:4d:1a:3a:da:72:a8:b4:1c:4c:
                    1a:1f:9c:7b:98:1e:da:6a:27:68:3c:b4:fb:29:1d:
                    bb:b6:5e:7a:9f:ea:ba:ad:e3:18:a9:6e:d4:a4:af:
                    4b:c9:04:02:cc:f0:a6:a8:58:c1:2f:17:c5:ae:9f:
                    a4:aa:6e:e8:58:64:60:52:17:f6:83:1e:74:75:cf:
                    b7:f8:cb:71:14:84:c9:8a:39:15:be:0e:da:14:28:
                    4b:95:ac:ca:f6:16:63:44:fd:d7:cb:ed:f3:49:25:
                    1d:6c:26:aa:1a:9e:22:60:0d:78:46:e1:5e:7e:6f:
                    b4:9d:c1:0a:4d:fb:86:bf:10:bc:2e:66:9e:72:54:
                    68:53:63:d7:52:00:06:47:6c:24:df:74:86:9e:26:
                    a2:66:de:f7:94:4f:fe:59:bb:dd:a9:b6:18:b4:6a:
                    91:68:71:50:0f:f9:4f:e3:77:dd:83:c0:68:cf:69:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:27:B2:B5:6D:70:3D:84:E7:C5:F3:5C:43:5E:65:1F:D6:77:24:3D
            X509v3 Authority Key Identifier:
                keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e8:0a:95:23:8e:c5:eb:fa:01:e9:80:bd:4c:60:0d:e2:31:
         ae:ae:5b:a6:45:9e:8c:78:7a:36:ed:fa:e7:45:47:1a:fa:61:
         61:28:74:dd:fa:07:46:7c:53:f5:d2:f7:e9:3c:40:a2:36:9f:
         21:d6:14:9e:df:af:2a:a3:5b:85:3d:29:d2:9d:5a:17:bf:05:
         65:15:33:25:30:ec:75:94:61:42:58:a1:a4:19:ef:82:a9:99:
         fa:ae:d8:f4:fb:0a:e9:81:be:94:ad:ea:bf:cf:ac:13:9b:5e:
         79:db:7c:9f:b6:c8:55:9e:f2:6a:37:f3:be:c0:b8:bf:e5:bb:
         38:9f:61:04:4e:ca:3e:41:0c:15:16:27:c2:0f:9f:e5:50:06:
         7b:74:cc:c5:3f:96:3d:4e:03:e3:5b:2a:5f:89:53:f1:64:a1:
         57:1e:35:4c:ed:e4:f8:4b:68:73:9c:3a:d2:28:75:a3:28:a3:
         dd:e2:32:70:0f:d0:1f:1e:e9:f3:6f:42:c9:70:18:49:d1:fa:
         b7:42:77:aa:85:13:4e:5a:34:a2:23:38:43:f8:0c:10:6e:1a:
         64:85:4d:fa:db:c9:4f:e8:88:8b:3a:ec:a0:de:a6:a5:5f:35:
         e9:4a:15:7a:1b:13:ba:a6:7f:94:2e:f1:9b:3d:02:bb:98:76:
         16:83:26:0e
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
QzBCQjExMC8GA1UEBRMoODY1OUUwRkVEQUNEQjY5MDEzOUVENUQzMzU1ODc0NzYy
RDdBMTg5RDAeFw0yNjEwMTMwODQyMzJaFw0yNjEwMjAwODQyMzJaMBgxFjAUBgNV
BAMTDTZhY2RlZWY4LTRkOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDE5L2gWrcxzm46FexyW7c6B8CCJtsDTBwTi7dFFCV3vBRzn3K/AXnsQj/JjjVp
NA5FVc9DTye4tbFcgPdQ+JO6gpMKylg43q2UrOacs1HmLk0aOtpyqLQcTBofnHuY
HtpqJ2g8tPspHbu2Xnqf6rqt4xipbtSkr0vJBALM8KaoWMEvF8Wun6SqbuhYZGBS
F/aDHnR1z7f4y3EUhMmKORW+DtoUKEuVrMr2FmNE/dfL7fNJJR1sJqoaniJgDXhG
4V5+b7SdwQpN+4a/ELwuZp5yVGhTY9dSAAZHbCTfdIaeJqJm3veUT/5Zu92pthi0
apFocVAP+U/jd92DwGjPaZ+tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTieytW1w
PYTnxfNcQ15lH9Z3JD0wHwYDVR0jBBgwFoAUhlng/trNtpATntXTNVh0di16GJ0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMEJCLzA5OTEyNzI4MjRE
MTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBBVG50WFROVmgwZGkxNkdK
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGxuZ190ck50cEFUbnRYVE5WaDBkaTE2R0owLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD
MEJCLzA5OTEyNzI4MjREMTExRjE4QkNFMTJFMEE5ODMzNzczL2hsbmdfdHJOdHBB
VG50WFROVmgwZGkxNkdKMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBK6AqVI47F6/oB6YC9TGAN4jGurlumRZ6MeHo27frnRUca+mFhKHTd+gdGfFP1
0vfpPECiNp8h1hSe368qo1uFPSnSnVoXvwVlFTMlMOx1lGFCWKGkGe+CqZn6rtj0
+wrpgb6Ureq/z6wTm15523yftshVnvJqN/O+wLi/5bs4n2EETso+QQwVFifCD5/l
UAZ7dMzFP5Y9TgPjWypfiVPxZKFXHjVM7eT4S2hznDrSKHWjKKPd4jJwD9AfHunz
b0LJcBhJ0fq3QneqhRNOWjSiIzhD+AwQbhpkhU3628lP6IiLOuyg3qalXzXpShV6
GxO6pn+ULvGbPQK7mHYWgyYO
-----END CERTIFICATE-----
Generated at Wed Oct 14 00:46:44 2026 by rpki-client