Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
File:                     HQ2sEe2C41wjsMvv--4AYmOwmVc.mft (raw, json)
Hash identifier:          27z2nxoFQwV3njOLcSLDs6yGDNsoNwkLjpsmJedxcYU=
Subject key identifier:   48:D8:5B:D7:99:57:1D:D9:06:AF:9E:BF:40:5B:9F:AF:04:C9:61:13
Authority key identifier: 1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57
Certificate issuer:       /CN=A91EA9C0/serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
Manifest number:          92
Signing time:             Mon 02 Mar 2026 00:03:04 +0000
Manifest this update:     Mon 02 Mar 2026 00:03:00 +0000
Manifest next update:     Mon 09 Mar 2026 00:03:00 +0000
Files and hashes:         1: HQ2sEe2C41wjsMvv--4AYmOwmVc.crl (hash: ak1OzZKYU/Wd3UCfr0njft4xt2IcA/4kt/JHeQw2SsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=1D0DAC11ED82E35C23B0CBEFFBEE006263B09957
        Validity
            Not Before: Mar  2 00:03:00 2026 GMT
            Not After : Mar  9 00:03:00 2026 GMT
        Subject: CN=69a4d3b7-8508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:b5:3b:3b:52:7d:1a:1d:0a:4f:83:0d:50:
                    87:6b:a5:26:69:ba:fa:c7:db:d0:cf:6a:ba:14:05:
                    3c:ad:72:5f:37:36:c6:1d:8b:8c:27:dc:ae:99:15:
                    c2:f3:d9:eb:45:f5:16:54:fe:23:67:ee:67:75:da:
                    dc:6e:7f:8e:a9:a4:b5:e2:53:bf:76:ca:fc:93:46:
                    1b:25:a5:8c:21:37:25:8b:d1:55:4e:b8:01:75:2e:
                    d3:37:04:cf:3c:fe:4d:ef:74:32:ea:4d:7b:bc:45:
                    9a:9c:0e:26:a0:82:df:b0:80:d4:91:84:22:d7:cc:
                    f4:03:f0:54:41:a9:d1:c8:23:98:45:6c:e6:c0:9d:
                    4d:1a:24:8e:e6:aa:08:0c:86:dd:d1:0c:b3:51:82:
                    29:ed:f8:5a:60:72:f8:56:60:47:47:0e:2f:29:95:
                    63:a6:9d:40:46:4b:bc:06:c9:51:64:9c:45:b5:59:
                    a3:b3:06:e3:a8:c7:53:06:e5:4e:74:23:10:bd:66:
                    3e:0a:66:68:93:11:9c:d7:e2:7c:cd:f3:c9:14:a4:
                    0d:76:69:4a:0a:8a:83:bd:f2:ce:d4:51:0a:e5:38:
                    97:a2:1e:97:4a:8b:f5:7a:5d:b2:3c:83:f6:bd:84:
                    7e:9c:6d:cc:34:1c:32:80:e0:99:73:41:20:ec:46:
                    9b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:5B:D7:99:57:1D:D9:06:AF:9E:BF:40:5B:9F:AF:04:C9:61:13
            X509v3 Authority Key Identifier:
                keyid:1D:0D:AC:11:ED:82:E3:5C:23:B0:CB:EF:FB:EE:00:62:63:B0:99:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQ2sEe2C41wjsMvv--4AYmOwmVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/5AFB148E388211F08CCB1866C4F9AE02/HQ2sEe2C41wjsMvv--4AYmOwmVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c6:4a:22:a5:86:aa:7e:72:bf:73:25:35:9e:93:c9:54:91:
         16:de:68:e6:29:6f:a3:33:4a:18:fb:ae:06:aa:a5:d9:2d:23:
         9d:43:6d:fa:7c:53:82:2d:64:09:52:40:60:d0:05:49:c3:ca:
         5e:54:48:b0:9e:7f:91:f1:c7:65:c4:83:45:38:5e:82:ed:a4:
         3f:ae:4e:96:76:ac:f7:7a:6b:77:75:db:48:b5:c3:01:bb:44:
         8d:f4:15:1c:5b:b9:85:75:82:a5:40:25:32:a2:fb:45:7f:23:
         a3:0a:f6:eb:05:da:82:8c:82:0a:43:c6:b2:53:63:2e:86:71:
         57:40:15:33:60:98:72:8f:43:0b:e8:2f:74:10:f5:b2:d8:18:
         8a:bd:c3:75:eb:44:52:88:0d:09:70:8d:90:f2:4c:35:34:39:
         5e:7d:e9:05:e1:8d:98:85:49:e4:47:7a:12:22:55:38:d2:b6:
         01:f7:20:fc:74:ee:35:f3:4d:80:7d:e9:2e:17:15:62:d3:4d:
         0b:db:87:b3:66:66:81:26:25:9f:ef:bf:83:9b:16:58:05:aa:
         6b:f6:aa:56:40:fc:39:27:87:65:b2:3a:a3:98:fb:80:58:7b:
         14:57:b2:15:5d:9d:ba:df:eb:0c:62:50:69:27:9a:2d:26:a7:
         82:a0:5c:9c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUE5QzAxMTAvBgNVBAUTKDFEMERBQzExRUQ4MkUzNUMyM0IwQ0JFRkZCRUUwMDYy
NjNCMDk5NTcwHhcNMjYwMzAyMDAwMzAwWhcNMjYwMzA5MDAwMzAwWjAYMRYwFAYD
VQQDEw02OWE0ZDNiNy04NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5By1OztSfRodCk+DDVCHa6Umabr6x9vQz2q6FAU8rXJfNzbGHYuMJ9yumRXC
89nrRfUWVP4jZ+5nddrcbn+OqaS14lO/dsr8k0YbJaWMITcli9FVTrgBdS7TNwTP
PP5N73Qy6k17vEWanA4moILfsIDUkYQi18z0A/BUQanRyCOYRWzmwJ1NGiSO5qoI
DIbd0QyzUYIp7fhaYHL4VmBHRw4vKZVjpp1ARku8BslRZJxFtVmjswbjqMdTBuVO
dCMQvWY+CmZokxGc1+J8zfPJFKQNdmlKCoqDvfLO1FEK5TiXoh6XSov1el2yPIP2
vYR+nG3MNBwygOCZc0Eg7EabcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEjYW9eZ
Vx3ZBq+ev0Bbn68EyWETMB8GA1UdIwQYMBaAFB0NrBHtguNcI7DL7/vuAGJjsJlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlDMC81QUZCMTQ4RTM4
ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQxd2pzTXZ2LS00QVltT3dt
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hRMnNFZTJDNDF3anNNdnYtLTRBWW1Pd21WYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTlDMC81QUZCMTQ4RTM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi9IUTJzRWUyQzQx
d2pzTXZ2LS00QVltT3dtVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHcZKIqWGqn5yv3MlNZ6TyVSRFt5o5ilvozNKGPuuBqql2S0jnUNt+nxTgi1k
CVJAYNAFScPKXlRIsJ5/kfHHZcSDRThegu2kP65Olnas93prd3XbSLXDAbtEjfQV
HFu5hXWCpUAlMqL7RX8jowr26wXagoyCCkPGslNjLoZxV0AVM2CYco9DC+gvdBD1
stgYir3DdetEUogNCXCNkPJMNTQ5Xn3pBeGNmIVJ5Ed6EiJVONK2Afcg/HTuNfNN
gH3pLhcVYtNNC9uHs2ZmgSYln++/g5sWWAWqa/aqVkD8OSeHZbI6o5j7gFh7FFey
FV2dut/rDGJQaSeaLSangqBcnA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:36 2026 by rpki-client