Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
File:                     hlng_trNtpATntXTNVh0di16GJ0.mft (raw, json)
Hash identifier:          k7ZE6zkP9rg3/H+yKE+sziZmyRhSZU8hhb+Ysl10OJ8=
Subject key identifier:   AC:19:97:BD:B0:D1:E6:C6:46:A8:7A:E3:B2:BD:ED:19:CC:3C:24:56
Authority key identifier: 86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D
Certificate issuer:       /CN=A91AC0BB/serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
Manifest number:          0D
Signing time:             Sun 05 Apr 2026 08:28:23 +0000
Manifest this update:     Sun 05 Apr 2026 08:28:22 +0000
Manifest next update:     Sun 12 Apr 2026 08:28:22 +0000
Files and hashes:         1: hlng_trNtpATntXTNVh0di16GJ0.crl (hash: nndyqtJNx2kclmAbrKAX9fzM0o8hI1YuU+SYul+pRKo=)
                          2: 76DAAFAA251911F182F11CF1C0833773.roa (hash: uwccILNOfn3op7dK+stqfjkg9anKckOvjcXt+VX9yxw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC0BB, serialNumber=8659E0FEDACDB690139ED5D3355874762D7A189D
        Validity
            Not Before: Apr  5 08:28:22 2026 GMT
            Not After : Apr 12 08:28:22 2026 GMT
        Subject: CN=69d21d27-db5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8c:b3:8d:98:b6:78:c8:e3:3b:e4:b8:46:76:
                    91:ed:e6:7b:71:63:c7:f6:d2:57:68:79:dd:63:19:
                    e8:53:60:74:eb:4f:b2:50:c2:b2:8e:d3:1a:64:e8:
                    b8:9c:32:a4:f0:f5:72:c9:a2:8b:73:39:9f:32:d0:
                    9c:f4:67:3d:31:6a:2c:20:bd:81:3c:37:82:bf:9e:
                    c3:50:d8:4e:cd:a5:12:a5:80:b1:5e:d8:77:78:fa:
                    6c:2d:bd:7d:ab:fd:2d:6c:3e:c5:5b:34:00:aa:ce:
                    0b:b2:40:c0:dd:81:6f:74:98:d5:04:f0:0d:a3:4e:
                    ec:06:d8:cb:e1:73:59:ae:e2:07:00:0c:eb:ee:23:
                    8a:18:44:9f:66:27:66:f6:3f:b9:c8:30:26:38:7a:
                    b8:63:96:ff:a5:63:86:0c:05:33:52:af:2e:a8:91:
                    47:bc:ef:6c:b7:d4:79:92:ca:69:6d:3f:47:a4:f0:
                    61:f3:64:88:51:8c:ff:e1:05:a4:33:3c:3c:20:8f:
                    81:41:2b:8b:3a:fc:58:8a:87:f3:1f:fc:da:3a:ff:
                    bc:29:fb:f4:76:f0:f8:c7:d9:cf:07:d6:e9:b5:09:
                    e9:45:d1:c2:1b:c9:8a:b5:11:e4:34:d2:16:1a:aa:
                    78:ab:33:3e:fb:b6:bf:06:29:b4:56:c9:94:d9:89:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:19:97:BD:B0:D1:E6:C6:46:A8:7A:E3:B2:BD:ED:19:CC:3C:24:56
            X509v3 Authority Key Identifier:
                keyid:86:59:E0:FE:DA:CD:B6:90:13:9E:D5:D3:35:58:74:76:2D:7A:18:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hlng_trNtpATntXTNVh0di16GJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC0BB/0991272824D111F18BCE12E0A9833773/hlng_trNtpATntXTNVh0di16GJ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:8a:47:25:f6:21:dd:4a:c1:40:52:70:39:a3:4f:b0:c2:13:
         89:f0:2d:45:d9:94:bb:ba:1a:55:dd:1a:6f:36:94:d7:1c:90:
         1e:76:88:9c:4a:dd:20:2c:1d:13:ee:18:f2:d4:12:ce:3b:97:
         18:95:e6:f1:08:c7:4e:f0:07:10:28:2e:4d:a7:f3:85:33:c3:
         cb:8e:f3:57:7e:a9:96:ed:57:23:05:85:c9:46:b7:c8:2d:66:
         a3:dd:b0:99:9e:f6:f8:a7:7f:38:ef:20:6b:75:cc:c6:e8:0e:
         50:8a:61:8c:41:b2:6d:ce:95:87:27:4c:c8:42:b9:1d:e6:a9:
         22:d2:e5:bd:c6:ba:53:45:be:7a:84:0b:55:1b:4a:14:66:21:
         ef:b4:54:64:cc:ea:14:87:1d:8a:4c:79:9a:59:51:0b:8a:bc:
         42:ef:e2:bb:60:44:f3:6b:82:83:39:ee:de:d7:3b:13:7c:58:
         67:b0:5a:19:a0:1e:f0:43:91:3c:e8:62:78:6c:24:cc:59:20:
         61:68:6b:09:dd:f9:2b:16:f4:ae:c5:dc:8c:ff:bb:f2:1b:f0:
         97:d6:6c:3f:3d:7d:a7:fb:f5:33:16:30:a4:cc:16:f5:d6:7b:
         b8:5e:1d:2c:60:9e:ec:dd:f2:b5:bf:8a:6d:79:3b:61:a9:f4:
         01:76:23:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:13 2026 by rpki-client