Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File:                     hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier:          vi/JtScaz1Y56c54Aoxh3HCKBGDkqX2eBjdAaToUNrQ=
Subject key identifier:   63:FF:5A:B8:B1:6C:40:1C:74:97:39:17:27:09:DA:83:8E:93:FF:D4
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer:       /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number:          01C5
Signing time:             Sun 11 Oct 2026 04:24:36 +0000
Manifest this update:     Sun 11 Oct 2026 04:24:36 +0000
Manifest next update:     Sun 18 Oct 2026 04:24:36 +0000
Files and hashes:         1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: KPb1dYa/D4f6P/E1NpbC0E83yMWQ7F42GaXq9k9YGrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 04:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
        Validity
            Not Before: Oct 11 04:24:36 2026 GMT
            Not After : Oct 18 04:24:36 2026 GMT
        Subject: CN=6acb0f84-977c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:b9:9d:23:11:e4:3a:14:f4:ba:91:fb:2b:
                    bd:24:ed:b4:61:f6:1b:f6:c7:f5:02:d3:7e:9a:62:
                    54:3d:ed:71:5a:4c:32:26:44:ce:60:73:4a:1c:22:
                    c1:2c:3d:18:6e:62:82:90:74:52:76:3e:4c:dd:aa:
                    b9:94:42:8c:2a:a3:f9:f3:bb:e2:22:3b:b8:e4:2c:
                    b3:1a:4c:3c:a5:0d:c5:04:69:6a:d2:1b:26:cd:77:
                    59:59:49:d8:77:d8:08:ac:3c:9b:48:3f:41:d9:af:
                    54:08:78:79:19:76:de:23:0d:7a:b7:0f:0e:15:c9:
                    e6:84:ad:ad:b1:6d:da:de:f9:7e:b4:64:58:cd:a6:
                    db:78:89:c8:1d:cf:9a:e2:35:fb:af:00:2d:bf:82:
                    16:e5:32:9c:e6:d9:b7:85:46:31:85:17:46:f8:9f:
                    f5:cc:a6:fe:b4:4f:93:eb:05:5d:c1:91:b1:e8:94:
                    e0:41:5f:24:35:75:3b:01:a2:0c:7e:ca:ff:6c:1c:
                    58:10:25:41:43:6e:14:7b:f7:eb:de:b1:02:a0:a6:
                    7e:26:b5:a2:d1:1a:73:85:31:09:46:6f:f2:c5:78:
                    7e:e5:35:cb:78:06:80:b1:bf:68:e9:98:b3:49:5b:
                    af:96:96:c7:97:32:8a:b8:46:50:b8:8e:78:c7:7e:
                    2f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:5A:B8:B1:6C:40:1C:74:97:39:17:27:09:DA:83:8E:93:FF:D4
            X509v3 Authority Key Identifier:
                keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1d:8a:17:14:f1:1c:d0:0d:26:62:59:d8:68:32:79:db:23:
         13:8d:35:35:e1:68:0f:56:ef:aa:64:dc:86:2a:0d:f0:5b:e7:
         55:7d:f0:93:29:cd:be:bf:97:40:0c:c0:bf:7d:68:7b:ce:99:
         52:4e:9a:11:d2:a8:cd:20:81:80:9d:63:37:04:b2:0e:4a:e9:
         02:5f:7d:2d:51:b3:30:5a:56:a7:fb:92:1c:96:33:3d:ad:b1:
         6a:a3:d7:50:a9:a0:17:3c:ba:32:d9:23:6f:3f:37:0f:73:7c:
         a7:83:8c:ad:74:a8:95:ed:d4:50:62:a3:98:04:8f:49:8b:92:
         f0:5e:6d:a0:87:bc:99:d0:ac:66:56:34:19:ed:b8:82:1a:de:
         4e:c4:b8:f9:db:4f:c4:d3:7d:92:32:7f:16:80:f0:61:12:18:
         c6:4b:81:85:8a:a7:9e:85:c8:03:ae:eb:3a:cb:b7:e4:77:59:
         f3:fd:e7:0a:b3:96:66:13:e8:1d:48:f8:f1:18:1f:3c:54:5e:
         83:9a:99:9c:63:3a:f0:5c:fd:36:10:33:c2:1c:69:30:41:42:
         71:f3:1a:89:6e:16:b8:32:a6:6f:99:07:32:9f:12:1b:59:7f:
         49:4e:4a:6c:1f:b6:8c:5d:88:7f:e4:c7:d7:ff:47:8c:70:e7:
         2c:14:bf:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:50:03 2026 by rpki-client