Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
File:                     hgOgrKcgSw7-1k23DeUcdboDk1U.mft (raw, json)
Hash identifier:          L1WD18hr9TfBwLxhu931JasOuEf70FvYQfXYHKDsCOk=
Subject key identifier:   C0:B5:A3:50:1A:82:A0:50:03:9C:87:BA:96:AA:F8:6A:5E:BC:FA:0B
Authority key identifier: 86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55
Certificate issuer:       /CN=A9118EB2/serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
Manifest number:          034C
Signing time:             Sun 05 Apr 2026 00:50:04 +0000
Manifest this update:     Sun 05 Apr 2026 00:50:04 +0000
Manifest next update:     Sun 12 Apr 2026 00:50:04 +0000
Files and hashes:         1: hgOgrKcgSw7-1k23DeUcdboDk1U.crl (hash: htp6hE5KiZz3B2heRy1IeA0659HO9U8RIVJudFjKgKw=)
                          2: 208C7D2E066C11EDB31C2239C4F9AE02.roa (hash: 384lM558CG+awOCq+Jp4xJkMm0eBCvPqegdL9GG+nvU=)
                          3: 673C2B68A8BA11F096079D46C4F9AE02.roa (hash: iAesf40760Ge7OkqHg9mpMk5sp26zXObALVRo0oegXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl
                          rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118EB2, serialNumber=8603A0ACA7204B0EFED64DB70DE51C75BA039355
        Validity
            Not Before: Apr  5 00:50:04 2026 GMT
            Not After : Apr 12 00:50:04 2026 GMT
        Subject: CN=69d1b1bc-7147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:78:93:12:6f:80:1e:f6:1b:0b:70:f8:32:
                    84:db:f6:b3:27:d6:e1:73:c6:22:38:13:2a:70:fc:
                    c4:af:9c:5c:c3:45:7c:d9:e8:71:fa:d3:eb:ec:5c:
                    91:94:f0:40:3c:a4:e4:4b:1e:e0:c8:50:87:fe:52:
                    cd:b0:47:23:a8:ec:c2:28:aa:ba:c5:25:1a:b6:27:
                    23:f8:99:bd:b0:42:7b:da:8b:b0:0d:3f:46:e0:71:
                    ff:46:71:c3:9e:eb:c8:45:7d:5c:ef:db:d3:ec:97:
                    13:65:e4:9d:8d:1b:36:37:62:1f:6b:7c:78:c3:ba:
                    e0:6f:0e:48:50:f6:b5:78:ff:b2:f1:1c:8a:6a:24:
                    8b:e9:56:b2:ae:97:31:2d:02:1c:32:8b:9a:40:09:
                    3d:3c:a9:29:b9:cb:ba:a6:c8:65:07:b2:56:ce:3f:
                    c7:d9:e7:0a:a5:8d:27:88:fa:d6:bd:24:ba:c4:9a:
                    d8:fd:7a:ba:51:af:34:92:61:06:58:fe:17:58:10:
                    00:1f:00:0f:f0:f9:e1:cf:7a:13:e2:63:c8:3f:88:
                    90:a4:a1:d8:e2:fc:ab:24:55:af:9a:40:3e:2b:de:
                    e8:b4:0f:ff:e0:28:85:24:9f:70:24:17:50:95:97:
                    c1:8f:61:ed:12:0e:20:4c:84:f0:ad:04:35:42:f4:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B5:A3:50:1A:82:A0:50:03:9C:87:BA:96:AA:F8:6A:5E:BC:FA:0B
            X509v3 Authority Key Identifier:
                keyid:86:03:A0:AC:A7:20:4B:0E:FE:D6:4D:B7:0D:E5:1C:75:BA:03:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgOgrKcgSw7-1k23DeUcdboDk1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118EB2/7AC767DE066911EDB0AE8E37C4F9AE02/hgOgrKcgSw7-1k23DeUcdboDk1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1b:45:86:a0:ec:93:0c:cf:5f:e1:4e:2d:67:0b:11:dc:2c:
         1e:86:d2:11:3b:28:27:4e:b6:52:f4:b6:d1:b6:96:7d:f0:b3:
         2a:ca:39:9f:3e:91:73:3f:01:9d:32:2d:42:51:29:74:03:b8:
         a3:27:7f:53:ef:db:14:0a:f8:52:4c:be:2d:77:06:32:05:b3:
         1c:9b:2c:f8:ed:eb:04:3a:21:eb:05:d5:66:00:cf:02:35:9e:
         88:22:be:00:08:dc:b2:8d:aa:11:0e:90:98:e0:70:d9:43:67:
         79:02:33:18:be:8f:05:29:71:05:c8:e2:b0:62:4d:47:42:98:
         18:d4:fb:4c:17:d6:63:04:d6:7f:10:28:5d:8d:67:ba:8f:71:
         41:02:7c:fc:71:58:8c:34:47:e9:87:aa:08:aa:55:a9:d6:aa:
         72:20:eb:61:5b:b6:44:d1:17:27:37:8c:3d:cb:fa:f9:5c:cd:
         43:ac:18:86:71:78:23:1c:20:dd:30:06:f8:00:3a:f8:2e:b2:
         4f:5c:dc:80:5c:10:59:3c:a5:c9:7f:27:eb:61:4a:49:03:cf:
         4c:22:b3:8b:89:bb:7b:18:5d:cc:67:75:4e:cb:91:6a:36:9e:
         91:b5:6c:77:53:a3:77:9e:ec:9a:8c:e8:0d:dc:88:18:63:42:
         cd:a8:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:53:59 2026 by rpki-client