Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File:                     hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier:          eJ6M7bDIImlIbWRPA9KOpKJm/aCJFvSwT+HFijfPdbg=
Subject key identifier:   23:E6:13:38:1D:B7:55:6D:7F:B6:67:0B:BE:B9:D8:49:D7:55:34:BF
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number:          0181
Signing time:             Fri 25 Sep 2026 04:44:07 +0000
Manifest this update:     Fri 25 Sep 2026 04:44:06 +0000
Manifest next update:     Fri 02 Oct 2026 04:44:06 +0000
Files and hashes:         1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: whvN7TpfOF9KmBRmLkL5XJFYU89W6fT9IXb6Av/+650=)
                          2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: jDnZhDcL3845Secu0bR+V2OD0F1RLl9nEAFhwuxNGGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:44:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Sep 25 04:44:06 2026 GMT
            Not After : Oct  2 04:44:06 2026 GMT
        Subject: CN=6ab5fc17-ed8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:8a:70:cc:18:b2:51:8a:83:0a:58:82:dc:
                    cd:c2:e9:61:c5:be:5f:52:d5:85:c3:93:75:b9:ef:
                    72:83:ef:6e:d1:f0:1f:57:de:07:6e:7b:31:7d:63:
                    da:f0:36:fb:62:c9:17:52:58:37:4a:d5:44:bd:4d:
                    ca:12:03:01:44:96:02:cc:31:55:82:14:5f:f9:dc:
                    97:0d:2a:d7:30:a1:95:92:aa:89:b2:73:83:80:eb:
                    d6:0a:61:8f:79:a5:25:46:d9:8e:e8:24:49:38:81:
                    46:76:c3:a8:0a:d1:27:84:75:b3:12:f6:30:80:9c:
                    02:65:52:61:fc:52:14:df:9d:6a:27:0b:fb:e9:7b:
                    8a:9c:ec:92:24:78:30:78:1a:e8:25:d9:79:a2:c6:
                    47:ce:c8:32:a4:ba:82:c5:6d:77:1c:0f:c0:ce:d7:
                    ab:33:3d:fe:c8:34:6e:fb:56:58:53:fb:31:60:95:
                    91:eb:a8:bc:5a:81:11:d1:c2:42:a6:2d:50:29:97:
                    b5:6e:51:26:76:b2:6f:e1:b3:36:e2:a1:9e:ce:6b:
                    8c:c5:1a:a6:2b:ac:97:28:38:a6:ca:ad:8d:bb:f9:
                    b6:c3:96:ad:57:9d:3b:d5:62:0e:5f:40:00:e2:79:
                    59:ff:01:56:01:61:69:38:da:03:bf:46:fe:f9:29:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E6:13:38:1D:B7:55:6D:7F:B6:67:0B:BE:B9:D8:49:D7:55:34:BF
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:8e:a3:57:93:0f:56:fd:e6:e8:6b:da:86:5b:ac:05:04:db:
         87:a4:1c:68:5d:1d:39:e6:64:f4:57:12:72:31:c1:bd:0a:28:
         da:36:07:3c:42:73:9d:a7:59:53:0b:96:20:8b:4c:85:a5:26:
         61:d4:dd:3e:ea:00:55:23:29:b2:cc:0a:33:80:c4:0c:44:d2:
         52:35:c6:18:66:ce:53:e2:82:85:fb:93:05:fb:e0:f2:6c:12:
         30:16:95:96:cf:52:23:b3:05:08:45:29:9a:bb:c3:e6:96:ce:
         8b:f1:5d:d5:7c:95:c8:d3:11:3b:b1:9b:cf:78:52:c6:09:1e:
         a5:1b:a6:a9:b3:a1:8a:ca:09:3e:9d:cb:1b:43:8a:bf:5a:90:
         48:72:e8:51:b5:a4:40:e7:c1:89:31:9b:06:e3:99:91:6f:92:
         50:3c:08:f9:83:ef:e9:dc:70:1f:2c:06:4c:40:54:3a:94:b4:
         17:1c:1d:0e:43:f0:cd:72:c8:5a:24:45:d6:75:e6:f7:7c:39:
         11:01:71:8d:90:ef:43:d4:38:b7:c4:20:68:b2:32:6c:09:c3:
         be:6a:14:f8:7c:40:e5:e0:2c:c6:76:f6:3d:37:19:51:d1:06:
         60:d1:9c:9b:75:9a:78:bf:cf:21:70:65:1d:b0:0c:2a:05:a0:
         50:90:f5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:57:11 2026 by rpki-client