Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File:                     HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier:          ifRCKsrZkF0OjjRdjMzY+qRml8UTi/kos9/v7dpPDZU=
Subject key identifier:   3B:4C:61:15:D7:58:D7:1F:36:94:05:F7:AD:3D:89:02:0F:1E:35:7F
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer:       /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial:       0B55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number:          0B4B
Signing time:             Thu 08 Oct 2026 19:22:13 +0000
Manifest this update:     Thu 08 Oct 2026 19:22:13 +0000
Manifest next update:     Thu 15 Oct 2026 19:22:13 +0000
Files and hashes:         1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: 7pYC590BRMQMpePUsaee/UcSwaPBUoNbO09PavErUcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 19:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2901 (0xb55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
        Validity
            Not Before: Oct  8 19:22:13 2026 GMT
            Not After : Oct 15 19:22:13 2026 GMT
        Subject: CN=6ac7ed65-c194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:04:aa:6b:aa:38:e0:a6:2d:2b:76:f6:d6:
                    3c:40:58:db:51:fc:59:91:eb:01:90:05:89:f6:08:
                    07:a0:f3:16:24:12:33:8d:6b:63:c5:8a:65:60:db:
                    eb:6a:f2:c1:3f:a6:a8:e8:2f:c9:57:5d:15:ee:fd:
                    83:7b:29:b6:bc:59:ad:09:9d:a7:65:88:38:34:8a:
                    78:c3:cf:b7:54:f1:ef:ec:76:ed:a4:99:63:4a:75:
                    05:ad:b3:6c:9e:29:5d:de:04:f6:28:bc:37:f1:1c:
                    1f:2b:d6:c4:ea:d9:5a:20:e3:a0:3b:42:97:2a:f8:
                    09:5f:5c:40:f3:06:6a:19:da:f3:48:24:0a:a1:65:
                    0c:50:eb:03:36:df:ab:b1:4d:88:df:6c:47:3d:23:
                    02:4a:3a:57:7a:0a:86:e0:70:10:16:5b:e5:08:5a:
                    63:c7:3f:3c:66:97:fe:14:e0:33:79:d5:ac:db:d2:
                    43:cf:e0:8f:5f:13:04:cd:ff:95:fa:25:5a:13:9e:
                    28:3f:42:bc:90:4f:6a:fc:34:f9:8d:c0:71:ea:9e:
                    5d:4f:8d:1e:92:76:a2:f6:98:f0:13:2b:70:85:20:
                    ae:08:b5:be:27:63:b3:6f:b1:26:d3:8f:7c:ce:68:
                    fc:73:0f:7a:61:73:22:8e:c5:67:59:24:c1:36:ca:
                    9e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:61:15:D7:58:D7:1F:36:94:05:F7:AD:3D:89:02:0F:1E:35:7F
            X509v3 Authority Key Identifier:
                keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0a:1f:07:61:a7:9c:6e:f2:6d:68:2b:a1:fe:fb:bd:a3:d6:
         73:b5:d9:4c:44:d3:31:6f:4c:85:f5:84:40:50:7d:10:83:20:
         69:0d:82:5c:f1:c1:41:ba:cc:23:3a:0b:45:7b:c7:40:e1:ba:
         e4:b0:8f:1d:c4:b4:ab:77:55:c1:8b:db:49:30:04:9b:99:70:
         8b:bf:f4:be:bb:a3:93:36:a6:2e:f5:70:97:2a:30:e1:73:14:
         5b:f6:87:89:e3:f2:27:3d:10:4d:57:7f:28:e4:90:90:4d:bf:
         6b:4d:3a:9f:ca:b5:89:b2:1c:b0:8a:cb:58:af:24:dc:db:23:
         40:a6:ce:74:28:95:ac:43:da:bc:1b:47:42:cc:23:15:cc:86:
         27:d8:76:d7:f4:9f:71:e7:8a:35:03:b1:c4:fe:12:4f:52:70:
         5d:18:75:39:47:6f:79:15:23:de:4b:88:40:c5:95:18:ac:c8:
         08:ce:63:b3:a6:54:9c:a1:fe:e8:86:c3:57:ac:a5:81:3e:d4:
         13:7e:30:51:aa:ba:b2:25:c1:3c:99:8e:e1:00:a2:27:86:37:
         3b:8d:b7:32:d3:99:82:6d:fb:21:6c:26:c8:53:79:de:21:80:
         18:92:b0:0d:e5:7f:f9:0e:64:47:92:f3:cc:2c:da:c5:dd:88:
         64:90:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:22:51 2026 by rpki-client