Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
File:                     HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft (raw, json)
Hash identifier:          3CHIPoWNbZJZ2zSMne9+2tAeTis9aEqoScGYDTNrwyE=
Subject key identifier:   D1:0F:B9:C7:4A:1C:E3:03:FA:BF:71:1A:79:1D:32:B8:B6:F5:1F:E4
Authority key identifier: 1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A
Certificate issuer:       /CN=A91145A9/serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
Certificate serial:       02DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
Manifest number:          02CF
Signing time:             Wed 07 Oct 2026 01:37:36 +0000
Manifest this update:     Wed 07 Oct 2026 01:37:36 +0000
Manifest next update:     Wed 14 Oct 2026 01:37:36 +0000
Files and hashes:         1: HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl (hash: SWYEd7qgDqhOxFpXFje0KdU0B2nPkrtJtXZf7hL8cEU=)
                          2: 33A0049E98E311EDBDD55016C4F9AE02.roa (hash: HKqMxuCnXZUWQyUBbuwuWp132t+lLGFUZQke8Tou0tg=)
                          3: 34AB7E9098E311EDBDD55016C4F9AE02.roa (hash: MRMfTNKXALiUr+Ks/cwLuFR+d+i53M1YUPrYan/sCwQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl
                          rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 733 (0x2dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91145A9, serialNumber=1C71D63EDAECB10F53141E8A308943959A7C575A
        Validity
            Not Before: Oct  7 01:37:36 2026 GMT
            Not After : Oct 14 01:37:36 2026 GMT
        Subject: CN=6ac5a260-28da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:23:12:5a:21:02:6c:cc:13:19:f2:22:31:
                    34:a7:88:3a:86:5d:94:73:26:c3:5f:b7:58:cf:a1:
                    98:dc:fa:34:fb:5c:02:a1:c0:27:fb:2c:65:ad:0b:
                    35:b3:5e:93:8d:ba:26:c8:9e:3b:78:99:e9:f7:3e:
                    91:5a:c5:9d:4b:d1:68:f4:d9:c6:81:e0:56:8c:ce:
                    89:5c:e7:c1:dd:ee:ff:64:c8:d6:4b:7c:bb:8d:a9:
                    29:80:e4:c2:e7:ee:b4:98:72:e8:e0:0f:fd:a1:57:
                    43:08:27:4e:e0:64:ae:69:86:46:5c:55:65:bb:b4:
                    ee:17:7c:2e:b5:ce:34:9b:5f:9d:ae:04:ae:74:05:
                    97:81:15:6d:7a:24:4a:da:49:55:d6:20:16:b8:52:
                    7d:bc:1e:e0:1c:3e:bb:86:83:66:3b:e5:e3:8d:5f:
                    3f:7e:0b:c6:40:21:86:6e:22:17:00:d0:c9:47:05:
                    15:ee:32:40:21:b6:d7:0a:f5:53:c0:0e:3d:f9:22:
                    17:7f:59:49:6f:c7:bb:2a:16:40:22:c9:f5:c3:da:
                    80:5e:89:8b:14:fb:a4:20:df:ff:c6:80:43:0a:e6:
                    b9:e3:9e:d0:03:16:3b:87:aa:ce:30:6e:09:8b:93:
                    f4:1a:e1:d8:32:00:8a:b6:55:ae:d5:a4:91:59:1d:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0F:B9:C7:4A:1C:E3:03:FA:BF:71:1A:79:1D:32:B8:B6:F5:1F:E4
            X509v3 Authority Key Identifier:
                keyid:1C:71:D6:3E:DA:EC:B1:0F:53:14:1E:8A:30:89:43:95:9A:7C:57:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHHWPtrssQ9TFB6KMIlDlZp8V1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91145A9/EBAC8238785911EDB2FC220EC4F9AE02/HHHWPtrssQ9TFB6KMIlDlZp8V1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:ca:b2:b9:50:6f:2b:81:e7:46:bf:dd:8b:5e:de:0f:d0:
         c3:d7:43:3a:a1:99:96:5d:38:51:6f:06:db:09:f3:ba:5b:15:
         fa:5f:e5:66:f6:ac:11:c5:2c:f7:5a:87:45:7f:0d:c6:7e:c5:
         cc:f1:29:5a:d3:03:85:76:9e:6c:d7:be:73:9a:b5:1b:75:13:
         3f:dd:65:6f:4b:aa:f4:d3:f3:32:a7:a1:eb:93:e7:97:db:7d:
         df:ed:91:6f:f7:16:5b:25:ed:dd:9c:30:91:2e:93:09:9e:5d:
         64:b0:dc:3f:cf:6c:77:ab:19:6b:7a:c0:f1:da:f8:96:92:a9:
         2a:1e:e4:9b:8c:75:97:b3:44:60:9f:ab:48:24:15:7b:1c:ee:
         52:8d:26:45:11:a8:b1:33:5a:61:41:9e:a1:61:0b:62:1e:97:
         35:6a:a2:1e:e2:47:57:e0:09:b4:fe:c0:ad:69:95:85:27:78:
         7e:4e:f3:7b:1a:e2:e9:59:dd:d5:38:36:30:0d:c6:4f:92:17:
         82:03:5b:25:86:d2:bd:c8:e1:19:0b:20:7f:2a:b2:a4:18:e7:
         3e:9c:31:51:d0:df:9d:65:c8:ba:81:8b:12:8c:58:35:62:39:
         c9:22:19:b8:40:8c:7c:8d:2d:1c:b8:eb:25:bd:72:08:d7:ea:
         c4:b9:33:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ1QTkxMTAvBgNVBAUTKDFDNzFENjNFREFFQ0IxMEY1MzE0MUU4QTMwODk0Mzk1
OUE3QzU3NUEwHhcNMjYxMDA3MDEzNzM2WhcNMjYxMDE0MDEzNzM2WjAYMRYwFAYD
VQQDEw02YWM1YTI2MC0yOGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxAjElohAmzMExnyIjE0p4g6hl2UcybDX7dYz6GY3Po0+1wCocAn+yxlrQs1
s16TjbomyJ47eJnp9z6RWsWdS9Fo9NnGgeBWjM6JXOfB3e7/ZMjWS3y7jakpgOTC
5+60mHLo4A/9oVdDCCdO4GSuaYZGXFVlu7TuF3wutc40m1+drgSudAWXgRVteiRK
2klV1iAWuFJ9vB7gHD67hoNmO+XjjV8/fgvGQCGGbiIXANDJRwUV7jJAIbbXCvVT
wA49+SIXf1lJb8e7KhZAIsn1w9qAXomLFPukIN//xoBDCua5457QAxY7h6rOMG4J
i5P0GuHYMgCKtlWu1aSRWR1YAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNEPucdK
HOMD+r9xGnkdMri29R/kMB8GA1UdIwQYMBaAFBxx1j7a7LEPUxQeijCJQ5WafFda
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDVBOS9FQkFDODIzODc4
NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NROVRGQjZLTUlsRGxacDhW
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hISFdQdHJzc1E5VEZCNktNSWxEbFpwOFYxby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDVBOS9FQkFDODIzODc4NTkxMUVEQjJGQzIyMEVDNEY5QUUwMi9ISEhXUHRyc3NR
OVRGQjZLTUlsRGxacDhWMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdMfKsrlQbyuB50a/3Yte3g/Qw9dDOqGZll04UW8G2wnzulsV+l/lZvasEcUs
91qHRX8Nxn7FzPEpWtMDhXaebNe+c5q1G3UTP91lb0uq9NPzMqeh65Pnl9t93+2R
b/cWWyXt3ZwwkS6TCZ5dZLDcP89sd6sZa3rA8dr4lpKpKh7km4x1l7NEYJ+rSCQV
exzuUo0mRRGosTNaYUGeoWELYh6XNWqiHuJHV+AJtP7ArWmVhSd4fk7zexri6Vnd
1Tg2MA3GT5IXggNbJYbSvcjhGQsgfyqypBjnPpwxUdDfnWXIuoGLEoxYNWI5ySIZ
uECMfI0tHLjrJb1yCNfqxLkzwg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:16 2026 by rpki-client