Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          h0UWP4yHfayqVyUIjtVJ/WNSGH1NCcplVJ6wUTWJzjM=
Subject key identifier:   D3:2E:A9:A6:E4:46:03:01:DC:AC:86:AA:83:6F:24:B2:85:AD:1B:E8
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       026B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          025C
Signing time:             Thu 29 Oct 2026 02:51:26 +0000
Manifest this update:     Thu 29 Oct 2026 02:51:26 +0000
Manifest next update:     Thu 05 Nov 2026 02:51:26 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: MYHPTZebPqVWhl1tceWk8Ph+le/Izpvj9OvRLXArgmI=)
                          2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: /i61ongesRVs6GzFE6G2KDY9aaIP3uRMFwQZFR3nHRc=)
                          3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: V3mSD2PmxvztBCh6XpV5mCgqBcH3iqbAbCPx3PCcyPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 02:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Oct 29 02:51:26 2026 GMT
            Not After : Nov  5 02:51:26 2026 GMT
        Subject: CN=6ae2b4ae-d37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:34:bc:9e:5e:a8:49:03:78:cf:d6:23:4f:59:
                    43:13:44:91:69:5a:86:a8:fd:e9:80:42:a4:2e:2b:
                    dc:98:ab:72:83:f4:4e:d1:7b:9e:51:9e:d8:7f:0e:
                    0d:2d:43:71:01:a9:aa:5a:ad:49:cc:5c:8a:88:dc:
                    44:43:49:5d:40:e0:4c:40:e3:84:e4:82:dc:ba:80:
                    2c:e1:54:ca:33:67:b3:9e:09:1e:7c:ba:26:b0:be:
                    6b:d0:f2:c4:47:d8:c7:ca:ea:54:fd:13:20:2b:bb:
                    0f:ca:84:5a:b4:49:b6:df:bf:26:65:44:05:65:c6:
                    4e:44:3c:64:b1:ee:8a:26:65:b8:4d:42:39:89:8a:
                    5d:68:e5:7d:a7:bc:95:2d:f9:64:01:59:a6:46:60:
                    4f:3a:01:6b:e4:94:5d:95:bb:2a:48:cb:51:67:50:
                    f2:38:e2:db:27:34:58:0e:3b:62:ff:20:79:da:35:
                    e5:a9:ac:2f:ce:60:80:7d:ba:b1:50:82:6a:ae:76:
                    e0:2d:42:8d:98:d4:63:94:02:7d:65:cd:a0:3f:65:
                    df:4d:83:1d:60:11:17:b0:ad:ae:78:7a:71:20:90:
                    6e:38:d8:9c:3f:17:3b:43:4e:4e:1d:4d:59:67:1a:
                    56:0d:e9:aa:8e:1a:9d:f4:5b:54:5d:b4:16:b1:16:
                    f2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2E:A9:A6:E4:46:03:01:DC:AC:86:AA:83:6F:24:B2:85:AD:1B:E8
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:79:33:ad:65:b7:15:6b:b1:4f:c0:d5:b2:b8:7f:85:ce:
         11:ea:d8:ab:e3:48:dd:83:7e:68:1b:1e:64:d3:7a:24:47:71:
         9a:c1:09:1a:2d:32:bc:b5:13:01:c1:fb:c3:3c:1f:dd:03:64:
         b3:82:13:8a:a9:44:d6:2e:59:72:e6:7b:ab:db:dd:71:1d:bc:
         95:fb:a9:57:c9:ce:c3:6f:9c:5c:56:07:57:01:bb:42:a9:2f:
         e1:aa:fc:9e:1f:99:81:83:ea:1d:2e:d8:00:4d:64:63:84:e6:
         9d:39:5c:61:0b:bb:8e:1a:55:2b:c7:4e:d9:23:29:1c:8c:05:
         47:55:e8:ca:04:44:14:8e:75:ed:d2:d6:89:ce:c7:23:58:45:
         0b:03:d7:c1:20:15:75:d4:45:a9:e9:61:9a:dc:2a:ab:53:bb:
         5f:04:d0:62:7d:15:14:9d:ba:79:f2:75:f4:dd:33:21:84:cd:
         eb:7d:08:78:7f:cf:2f:9f:dd:67:80:e0:3b:fc:bf:eb:d2:94:
         4d:91:a1:9f:77:3c:75:75:73:06:0d:eb:17:8a:da:cb:fd:af:
         2a:0a:b7:b8:6c:5c:c9:c9:92:38:a0:8f:8b:7e:77:ad:57:bd:
         9b:eb:fd:e2:7c:f1:68:12:cd:d2:e4:c5:1a:82:a8:28:65:a5:
         0e:ae:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 16:13:59 2026 by rpki-client