Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File:                     HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier:          +sz2SC38EyjssNOmHhWZeAFOgqIzvaj6WY1DzThTI84=
Subject key identifier:   88:5B:91:F4:3D:E6:E7:49:29:FB:5E:62:6E:5F:BC:43:6E:2B:21:5B
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer:       /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number:          F0
Signing time:             Thu 03 Sep 2026 06:34:36 +0000
Manifest this update:     Thu 03 Sep 2026 06:34:35 +0000
Manifest next update:     Thu 10 Sep 2026 06:34:35 +0000
Files and hashes:         1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: fFBgC3SQIXSl19D3jMF6Nb8hsNoKx4KzlE3X6YZpTbE=)
                          2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 06:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
        Validity
            Not Before: Sep  3 06:34:35 2026 GMT
            Not After : Sep 10 06:34:35 2026 GMT
        Subject: CN=6a9914fb-d969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:f5:1a:a7:4d:3b:94:4a:33:7a:4b:8c:e7:
                    0d:91:5a:35:3c:01:e0:e9:01:ce:55:64:dc:85:d6:
                    f8:17:45:bc:c9:34:aa:24:37:9e:4a:83:8d:58:14:
                    9c:0f:45:e7:99:9a:9e:9b:87:a7:75:d0:ca:d4:dd:
                    3b:f9:ef:8a:2c:65:53:82:94:7d:4e:d9:67:4b:e9:
                    07:09:8f:8b:a5:8c:d4:fd:a0:d3:ce:77:a0:75:ee:
                    97:87:8c:fd:29:35:a6:20:0b:e7:93:c2:8e:af:3d:
                    09:71:93:c6:f3:93:76:0b:fb:f1:e7:72:25:e6:6a:
                    07:83:4e:86:0e:e2:51:2f:83:87:fa:02:9f:98:6c:
                    ab:f2:6d:49:1c:ed:b9:00:60:6b:bf:1a:0f:a9:fc:
                    55:d8:11:69:51:56:c9:03:da:28:db:e9:e4:bd:17:
                    ef:17:fd:d3:d0:5d:05:2b:ee:77:14:02:1f:fe:47:
                    62:e3:a4:99:f7:79:40:84:16:66:f9:4d:2a:b8:65:
                    34:08:e0:a9:b8:5a:51:a4:38:9e:c4:e0:09:ea:23:
                    bf:8e:ce:f9:ba:5d:86:97:a3:b0:1e:6f:5e:c7:2e:
                    10:13:fc:49:3a:98:a8:b4:ed:1d:75:5f:08:8d:fd:
                    c1:f7:06:25:4a:e4:6d:6c:a0:f2:84:57:4f:6b:2e:
                    93:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5B:91:F4:3D:E6:E7:49:29:FB:5E:62:6E:5F:BC:43:6E:2B:21:5B
            X509v3 Authority Key Identifier:
                keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:23:e8:6b:a5:de:9b:46:57:eb:f6:09:1f:8f:89:c3:23:65:
         96:d7:d0:9d:71:34:28:ed:62:30:5e:6c:c3:87:46:2d:0e:93:
         63:38:10:b3:0b:7d:11:c3:01:7e:3c:29:f4:87:00:69:fc:95:
         97:fd:f6:45:46:98:90:01:32:46:14:70:5e:a7:4a:19:4a:9c:
         59:22:13:d5:6c:cb:20:ff:a0:df:93:35:f8:df:96:26:e3:fd:
         2e:aa:32:03:42:5b:0a:60:fc:c0:a3:ce:32:19:2c:d6:e5:fb:
         d7:c3:18:69:7a:b9:c8:2f:ac:aa:12:3c:e8:9c:22:9d:f3:fb:
         d8:bf:75:ad:4c:b8:d9:96:14:19:84:4e:db:6e:d4:76:9b:77:
         21:c1:2b:71:9e:5b:67:c5:65:65:d2:8f:8f:8d:46:7d:f1:cf:
         07:9b:16:73:a8:22:6c:32:ff:a3:5b:4e:8a:7e:d7:92:eb:a7:
         7d:c9:ac:33:fb:1c:86:e8:e1:37:bb:47:31:eb:a8:04:f8:9f:
         5c:1e:06:65:a3:25:2f:22:d6:8e:07:54:26:3e:56:a3:64:60:
         c3:32:aa:fc:8e:07:24:62:f1:1c:f3:ef:4e:9d:27:d1:1b:c3:
         d2:4d:b4:78:4d:54:4c:5a:53:1f:a4:72:b0:33:cd:64:ff:1d:
         e3:19:05:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:58:28 2026 by rpki-client