Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          aLO1tmbX6GiVUeUFmDiQIN8izvSkA2zCKtek2YnZ7cE=
Subject key identifier:   20:6A:75:12:72:B0:C7:21:5E:10:E9:21:22:AD:43:38:0A:F5:35:69
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       09C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          0994
Signing time:             Sun 20 Sep 2026 19:55:47 +0000
Manifest this update:     Sun 20 Sep 2026 19:55:46 +0000
Manifest next update:     Sun 27 Sep 2026 19:55:46 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: 1H1B24DHAjL4mRfOtQY6Fm6EjNQLkqUyhICxoJgE3aw=)
                          2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: mH/kM+3rqWh6tWSsikS5qDnxx87ieq8dd2YHV0YNADM=)
                          3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: zsuR744HDeiJUJylgCdTayAjz/Y4ffc8R/05GsGBd50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 19:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496 (0x9c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep 20 19:55:46 2026 GMT
            Not After : Sep 27 19:55:46 2026 GMT
        Subject: CN=6ab03a42-2f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:ac:8f:36:79:bf:76:80:f7:b4:af:fa:85:
                    83:57:e0:fc:a0:d7:a2:87:d3:d8:52:25:69:27:ce:
                    58:c9:3e:49:7e:50:39:ab:89:0b:c3:de:97:df:ba:
                    14:61:70:f5:21:71:ce:5e:b5:39:d2:15:fa:f1:e4:
                    f1:d8:3d:72:bf:e3:5f:87:3c:7c:03:93:a1:27:fc:
                    c2:80:48:96:03:e9:64:a6:ae:0c:13:4b:b4:cd:fc:
                    c5:4d:05:c8:62:27:a9:4a:de:73:41:c3:de:e0:40:
                    56:49:ca:df:14:5c:df:55:3f:2d:8d:5c:b7:7f:25:
                    77:b2:9e:77:c4:0d:59:0a:9a:b5:70:5d:b3:83:36:
                    48:fa:63:bf:6a:f5:40:97:cf:d2:07:89:7a:38:9e:
                    19:e8:8b:e9:ab:01:1a:97:8b:29:c1:61:5c:01:be:
                    86:42:3f:bb:31:d5:24:64:b9:24:92:01:88:a9:35:
                    21:e2:9f:5e:ed:91:af:66:5d:f3:75:76:b7:21:ee:
                    07:e7:98:0d:1a:73:2b:91:99:51:46:e9:93:34:46:
                    94:1b:e5:e0:fd:41:7c:ed:d5:6c:b4:86:72:a6:e0:
                    2d:3a:b4:ec:57:31:4f:00:af:de:88:1d:f1:3b:d3:
                    85:56:29:86:11:22:7b:a2:33:9d:d6:61:72:fd:41:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6A:75:12:72:B0:C7:21:5E:10:E9:21:22:AD:43:38:0A:F5:35:69
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:74:d8:e6:54:38:8c:75:a1:99:c8:65:f9:f6:8b:55:d0:54:
         a5:a9:84:9e:76:e1:6f:e0:16:a3:be:ba:1f:65:47:06:b0:0b:
         4c:65:e6:e7:14:e1:38:3d:f8:fd:b9:20:df:3e:4a:76:ed:2c:
         cc:79:a5:17:9b:78:07:32:84:c2:eb:c5:35:0f:10:81:21:49:
         12:1f:c9:03:7d:86:85:7f:13:b0:11:b4:c9:a1:11:49:40:01:
         7d:c9:58:28:91:28:31:c3:48:36:07:55:b3:1c:e6:44:2a:9e:
         53:c6:e3:ca:1d:ea:b7:be:8f:69:a2:46:b7:37:89:6d:e9:eb:
         ad:1c:b6:2d:2c:c2:80:9b:7e:1b:59:9c:7c:c7:a3:47:b4:35:
         15:28:27:53:66:a4:05:41:91:d4:b8:6b:df:56:b2:65:4b:82:
         a8:13:3b:28:2b:46:75:a8:55:17:f5:b0:d7:78:0f:a5:fe:04:
         d6:20:0e:46:1e:13:83:46:e6:06:44:55:be:30:cc:ed:68:b6:
         8c:d9:79:b9:84:2d:72:ce:7d:69:b4:3f:48:0c:75:a1:61:1c:
         0d:8d:f9:fc:0f:95:33:a2:43:c9:56:31:85:2f:9e:32:b2:be:
         7a:e7:5a:dc:2e:f9:6b:1d:fe:bd:fa:a6:7d:22:44:18:e6:d5:
         56:f6:cb:03
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExQjQxMTAvBgNVBAUTKDFDMEQyREJBNUFCMzZDMkY5NjcyQzE0REQ4NzdCOUVF
QTA2Q0NBQzcwHhcNMjYwOTIwMTk1NTQ2WhcNMjYwOTI3MTk1NTQ2WjAYMRYwFAYD
VQQDEw02YWIwM2E0Mi0yZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt2KsjzZ5v3aA97Sv+oWDV+D8oNeih9PYUiVpJ85YyT5JflA5q4kLw96X37oU
YXD1IXHOXrU50hX68eTx2D1yv+Nfhzx8A5OhJ/zCgEiWA+lkpq4ME0u0zfzFTQXI
YiepSt5zQcPe4EBWScrfFFzfVT8tjVy3fyV3sp53xA1ZCpq1cF2zgzZI+mO/avVA
l8/SB4l6OJ4Z6IvpqwEal4spwWFcAb6GQj+7MdUkZLkkkgGIqTUh4p9e7ZGvZl3z
dXa3Ie4H55gNGnMrkZlRRumTNEaUG+Xg/UF87dVstIZypuAtOrTsVzFPAK/eiB3x
O9OFVimGESJ7ojOd1mFy/UEDEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCBqdRJy
sMchXhDpISKtQzgK9TVpMB8GA1UdIwQYMBaAFBwNLbpas2wvlnLBTdh3ue6gbMrH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFCNC9CMTk5M0M0MEJD
MkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJDLVdjc0ZOMkhlNTdxQnN5
c2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBMHR1bHF6YkMtV2NzRk4ySGU1N3FCc3lzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFCNC9CMTk5M0M0MEJDMkIxMUVBODJCNjg3NEFDNEY5QUUwMi9IQTB0dWxxemJD
LVdjc0ZOMkhlNTdxQnN5c2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmXTY5lQ4jHWhmchl+faLVdBUpamEnnbhb+AWo766H2VHBrALTGXm5xThOD34
/bkg3z5Kdu0szHmlF5t4BzKEwuvFNQ8QgSFJEh/JA32GhX8TsBG0yaERSUABfclY
KJEoMcNINgdVsxzmRCqeU8bjyh3qt76PaaJGtzeJbenrrRy2LSzCgJt+G1mcfMej
R7Q1FSgnU2akBUGR1Lhr31ayZUuCqBM7KCtGdahVF/Ww13gPpf4E1iAORh4Tg0bm
BkRVvjDM7Wi2jNl5uYQtcs59abQ/SAx1oWEcDY35/A+VM6JDyVYxhS+eMrK+euda
3C75ax3+vfqmfSJEGObVVvbLAw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:56:53 2026 by rpki-client