Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File:                     hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier:          GrnIWJqFMEwacrAdBBWJ7x/NvgMwsuDG/AGPGamdelU=
Subject key identifier:   8D:E3:8B:9A:33:DB:1F:CF:2C:78:C1:1A:BE:80:7E:CF:48:30:06:08
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number:          0114
Signing time:             Sun 01 Mar 2026 06:58:36 +0000
Manifest this update:     Sun 01 Mar 2026 06:58:36 +0000
Manifest next update:     Sun 08 Mar 2026 06:58:36 +0000
Files and hashes:         1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: 0sdqphblZAH1ElElySrc5kb3Z7w8V5hItJ31uPmpHhk=)
                          2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: w4Rh9NpZ/IQ60xsdouCsCPn/eRzJ06RRF4GvfzZ5uwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Mar  1 06:58:36 2026 GMT
            Not After : Mar  8 06:58:36 2026 GMT
        Subject: CN=69a3e39c-2c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:4a:64:e9:e6:ff:d8:22:cf:3e:57:4e:8f:
                    98:c9:53:e9:71:37:48:4a:71:53:b0:ea:e1:5c:d1:
                    f8:1f:fe:bc:92:c2:38:c2:2d:01:4a:fc:92:28:00:
                    b8:c9:6c:e6:14:0e:d8:cd:b8:e1:27:81:f8:b0:44:
                    61:88:e3:71:1b:99:10:66:06:be:29:5b:41:d0:8c:
                    af:5e:46:8c:a0:83:53:b5:2e:fb:5a:57:28:f5:71:
                    e1:7a:30:18:5b:ff:14:90:1c:ef:65:ac:19:d7:71:
                    ae:8f:fd:c1:78:3a:cf:c6:96:2e:23:42:7d:41:00:
                    1f:cf:1a:1a:90:d8:5e:ed:88:98:06:7c:dd:17:5f:
                    82:35:8a:39:bc:4a:cb:dd:72:c0:00:1d:39:7c:cd:
                    76:ca:56:5c:f6:90:71:34:28:8a:cf:32:16:8a:7b:
                    09:9e:d9:4f:17:c2:87:a7:db:03:20:03:0c:ec:82:
                    10:31:83:3e:33:3e:89:ec:7b:73:cb:62:66:7c:b1:
                    f5:eb:87:bf:5c:aa:cb:ea:ba:41:f6:14:2f:bd:1a:
                    38:fe:66:bb:4e:18:c2:b2:99:1f:7f:72:99:d4:68:
                    46:86:37:46:c2:38:9d:27:ca:4f:a4:1e:1d:07:5c:
                    43:71:95:52:2c:d5:74:c3:ba:85:b2:c2:b5:cc:16:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:8B:9A:33:DB:1F:CF:2C:78:C1:1A:BE:80:7E:CF:48:30:06:08
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:67:28:df:9c:24:10:69:27:4a:57:b1:c5:88:25:d5:c8:
         aa:7d:c5:ea:e6:d4:8d:bc:38:ca:c2:d6:0c:56:cb:42:20:50:
         38:4a:75:1b:a7:0f:e6:5c:70:45:1b:14:84:98:9a:6b:42:b0:
         00:4e:36:2b:0e:de:1e:21:a5:ea:34:13:ce:6a:0c:b2:ed:8c:
         87:1e:43:a5:f4:aa:98:2c:32:63:11:0d:5a:72:a3:5a:66:7a:
         18:38:73:2a:01:c5:4c:3c:66:c7:12:95:c7:1a:ab:14:71:d2:
         07:a7:1c:44:5d:57:53:71:49:b9:29:fb:3c:f4:ec:55:9f:c8:
         e2:ae:05:35:bc:ac:39:f3:e5:6d:29:b6:05:a0:78:4a:36:44:
         fc:26:98:ea:26:c8:2c:f8:1a:ea:5f:b6:c8:39:1d:29:ba:d3:
         bd:d9:33:d7:38:90:49:82:b8:3b:58:5d:6c:21:8f:41:fd:c2:
         3b:81:8a:ae:83:1a:f9:f8:b5:fe:60:6e:bd:84:6a:69:13:d5:
         e4:4a:72:dd:e4:42:d0:2c:1e:1f:50:ef:b8:09:cc:78:b5:69:
         a1:bd:25:19:cc:71:61:ae:d5:cc:f8:49:c4:2d:32:18:66:df:
         80:d1:91:cd:b8:4a:0f:aa:4a:23:be:a2:72:bf:9c:f6:c5:fc:
         26:2f:6c:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDRBQ0QxMTAvBgNVBAUTKDg2OTA0RDJEMDJEQjhBMDU5QkVEOTM4RjJGOEVBRUYz
QzQyMDZGRDAwHhcNMjYwMzAxMDY1ODM2WhcNMjYwMzA4MDY1ODM2WjAYMRYwFAYD
VQQDEw02OWEzZTM5Yy0yYzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUxKZOnm/9gizz5XTo+YyVPpcTdISnFTsOrhXNH4H/68ksI4wi0BSvySKAC4
yWzmFA7YzbjhJ4H4sERhiONxG5kQZga+KVtB0IyvXkaMoINTtS77Wlco9XHhejAY
W/8UkBzvZawZ13Guj/3BeDrPxpYuI0J9QQAfzxoakNhe7YiYBnzdF1+CNYo5vErL
3XLAAB05fM12ylZc9pBxNCiKzzIWinsJntlPF8KHp9sDIAMM7IIQMYM+Mz6J7Htz
y2JmfLH164e/XKrL6rpB9hQvvRo4/ma7ThjCspkff3KZ1GhGhjdGwjidJ8pPpB4d
B1xDcZVSLNV0w7qFssK1zBa23QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI3ji5oz
2x/PLHjBGr6Afs9IMAYIMB8GA1UdIwQYMBaAFIaQTS0C24oFm+2Tjy+OrvPEIG/Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEFDRC8xRjUzNTY5RTc1
NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmlnV2I3Wk9QTDQ2dTg4UWdi
OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hwQk5MUUxiaWdXYjdaT1BMNDZ1ODhRZ2I5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NEFDRC8xRjUzNTY5RTc1NkUxMUVGOUNBNDZFNTFDNEY5QUUwMi9ocEJOTFFMYmln
V2I3Wk9QTDQ2dTg4UWdiOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB29nKN+cJBBpJ0pXscWIJdXIqn3F6ubUjbw4ysLWDFbLQiBQOEp1G6cP5lxw
RRsUhJiaa0KwAE42Kw7eHiGl6jQTzmoMsu2Mhx5DpfSqmCwyYxENWnKjWmZ6GDhz
KgHFTDxmxxKVxxqrFHHSB6ccRF1XU3FJuSn7PPTsVZ/I4q4FNbysOfPlbSm2BaB4
SjZE/CaY6ibILPga6l+2yDkdKbrTvdkz1ziQSYK4O1hdbCGPQf3CO4GKroMa+fi1
/mBuvYRqaRPV5Epy3eRC0CweH1DvuAnMeLVpob0lGcxxYa7VzPhJxC0yGGbfgNGR
zbhKD6pKI76icr+c9sX8Ji9ssw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:00 2026 by rpki-client