Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
File:                     hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json)
Hash identifier:          NvYKM9ox4dMHUPSSNxOlYu2CSUK9gMmabGZFAdogBV0=
Subject key identifier:   DF:E9:06:88:6B:69:CE:7D:29:FA:06:C9:D9:5C:7D:37:31:21:0D:F3
Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
Certificate issuer:       /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
Manifest number:          2E
Signing time:             Sun 27 Sep 2026 09:17:46 +0000
Manifest this update:     Sun 27 Sep 2026 09:17:46 +0000
Manifest next update:     Sun 04 Oct 2026 09:17:46 +0000
Files and hashes:         1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: p/8sDF9O1rYsmkNLAThuqcK2lKGmoIybqflfAYDSu4I=)
                          2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
        Validity
            Not Before: Sep 27 09:17:46 2026 GMT
            Not After : Oct  4 09:17:46 2026 GMT
        Subject: CN=6ab8df3a-1ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:ae:f1:b0:0d:1b:5e:01:57:16:ab:dc:4f:
                    7d:65:da:cf:a4:67:dd:c1:7b:24:2f:48:90:76:58:
                    75:a2:07:49:c4:29:48:56:58:41:94:bd:7a:aa:84:
                    7d:1f:ff:e7:a0:47:a2:89:ad:76:29:6b:72:56:b3:
                    11:02:61:94:82:fd:25:07:df:dd:ff:d2:8c:06:42:
                    31:04:39:35:ce:90:15:a3:4b:7c:16:23:f2:d1:60:
                    4f:db:c1:2d:50:db:12:45:80:69:50:b6:fb:48:19:
                    5c:5f:91:02:11:ec:40:c5:b9:ae:14:96:00:40:83:
                    71:0e:5f:9c:0f:34:c8:b2:76:9a:d6:e6:2f:f9:dc:
                    f9:7b:cf:9e:a8:0e:e0:44:52:b7:9c:cd:be:2c:81:
                    a3:49:e4:3d:35:f1:4e:8a:b3:ac:1a:06:3d:22:25:
                    fb:19:04:91:ae:d1:cf:52:05:76:95:77:74:81:75:
                    2b:4c:f3:0f:45:00:95:8d:93:07:0a:89:5c:bc:3d:
                    c1:7e:5f:fe:ed:af:1e:65:47:69:70:6e:4d:74:d0:
                    72:33:9f:d8:0e:65:c8:c3:b8:1b:bf:84:8d:58:a7:
                    4d:2b:4d:97:39:2e:76:62:b9:66:3c:f3:35:03:b9:
                    b7:2a:9e:5b:c4:8f:bb:38:0d:3a:6a:08:5a:eb:08:
                    18:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E9:06:88:6B:69:CE:7D:29:FA:06:C9:D9:5C:7D:37:31:21:0D:F3
            X509v3 Authority Key Identifier:
                keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:21:01:b2:28:cd:7e:38:a1:8e:c9:22:35:c7:54:77:6e:ca:
         68:74:9e:83:45:cd:0a:6d:52:f7:15:9b:9b:52:c6:e0:e2:13:
         27:a1:95:7d:b3:72:10:93:10:f4:75:be:5b:41:a1:95:38:4e:
         0c:ba:1c:b5:06:b8:67:d7:6d:ff:f9:e4:60:19:20:50:06:9e:
         47:a9:1d:a1:2f:bf:04:ea:43:3c:ea:b2:97:f6:ed:f1:83:8e:
         c3:3f:90:a4:5d:e9:60:2e:c4:f5:80:6d:17:73:37:44:3b:a1:
         92:83:9d:90:94:b7:f2:ce:c2:d7:d3:fc:e5:92:d0:36:a9:92:
         0b:d9:35:81:6d:b9:67:88:82:89:69:5c:dd:80:62:3b:ab:fd:
         07:cb:20:61:08:46:98:52:a7:ea:4b:ae:28:e7:10:d5:82:ca:
         94:9c:ed:97:ba:89:39:51:89:b8:1d:33:f7:e2:69:e9:06:f5:
         63:c9:c4:2b:ff:1c:c4:76:e8:e8:b0:28:34:61:c0:f5:16:6f:
         94:86:a3:78:27:fb:13:8d:c8:fa:ed:f8:84:68:d5:87:97:2d:
         e7:09:d6:81:bd:e5:06:55:73:d6:77:3e:fb:76:3b:77:16:69:
         b1:c2:66:60:10:55:2b:10:50:8f:23:b2:dd:5a:d6:09:8b:0f:
         b9:b8:05:55
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NUVCOTExMC8GA1UEBRMoODVDMDc2RkQ5RUMwNjlBQTNCRUI4NzUzNEU5NDdBODlD
NDNEOTZDQTAeFw0yNjA5MjcwOTE3NDZaFw0yNjEwMDQwOTE3NDZaMBgxFjAUBgNV
BAMTDTZhYjhkZjNhLTFlYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCanK7xsA0bXgFXFqvcT31l2s+kZ93BeyQvSJB2WHWiB0nEKUhWWEGUvXqqhH0f
/+egR6KJrXYpa3JWsxECYZSC/SUH393/0owGQjEEOTXOkBWjS3wWI/LRYE/bwS1Q
2xJFgGlQtvtIGVxfkQIR7EDFua4UlgBAg3EOX5wPNMiydprW5i/53Pl7z56oDuBE
Ureczb4sgaNJ5D018U6Ks6waBj0iJfsZBJGu0c9SBXaVd3SBdStM8w9FAJWNkwcK
iVy8PcF+X/7trx5lR2lwbk100HIzn9gOZcjDuBu/hI1Yp00rTZc5LnZiuWY88zUD
ubcqnlvEj7s4DTpqCFrrCBivAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3+kGiGtp
zn0p+gbJ2Vx9NzEhDfMwHwYDVR0jBBgwFoAUhcB2/Z7Aaao764dTTpR6icQ9lsow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzlGMjVBQzBBNzUx
NzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFvNzY0ZFRUcFI2aWNROWxz
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGNCMl9aN0FhYW83NjRkVFRwUjZpY1E5bHNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
RUI5LzlGMjVBQzBBNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFv
NzY0ZFRUcFI2aWNROWxzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCLIQGyKM1+OKGOySI1x1R3bspodJ6DRc0KbVL3FZubUsbg4hMnoZV9s3IQkxD0
db5bQaGVOE4Muhy1Brhn123/+eRgGSBQBp5HqR2hL78E6kM86rKX9u3xg47DP5Ck
XelgLsT1gG0XczdEO6GSg52QlLfyzsLX0/zlktA2qZIL2TWBbblniIKJaVzdgGI7
q/0HyyBhCEaYUqfqS64o5xDVgsqUnO2Xuok5UYm4HTP34mnpBvVjycQr/xzEdujo
sCg0YcD1Fm+UhqN4J/sTjcj67fiEaNWHly3nCdaBveUGVXPWdz77djt3FmmxwmZg
EFUrEFCPI7LdWtYJiw+5uAVV
-----END CERTIFICATE-----
Generated at Mon Sep 28 04:49:45 2026 by rpki-client