Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          N0cb712vEuxp+wQa3wszdDuhxRXj/FLg6CrqkOmoXhQ=
Subject key identifier:   00:B9:B9:43:5B:FE:20:8D:66:5C:00:02:37:83:F3:01:C6:F4:29:9F
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          069B
Signing time:             Thu 02 Apr 2026 22:21:05 +0000
Manifest this update:     Thu 02 Apr 2026 22:21:05 +0000
Manifest next update:     Thu 09 Apr 2026 22:21:05 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: L8SnLBRTNgjbeba0fXLNsjJqi3ct7JhNMUHCWFiZU6c=)
                          2: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
                          3: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          5: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          6: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Apr 2026 22:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1736 (0x6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Apr  2 22:21:05 2026 GMT
            Not After : Apr  9 22:21:05 2026 GMT
        Subject: CN=69ceebd1-3498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:ba:7f:a7:10:91:13:52:74:68:82:d4:51:
                    df:f4:7d:ea:27:08:89:cc:85:70:ac:84:e8:54:fc:
                    1a:75:75:55:db:69:04:57:a3:45:ac:d9:97:98:c9:
                    28:bd:cb:77:7d:d5:eb:3e:4b:4e:3e:25:b1:17:03:
                    7b:da:61:16:14:39:46:a1:c1:f3:87:26:d6:c1:14:
                    f7:a4:20:99:33:85:df:a2:f4:e0:c3:ce:37:ac:89:
                    95:fb:6f:c5:8b:e7:52:9e:73:e3:3c:04:51:27:5d:
                    df:c9:87:5d:84:8a:79:31:ca:33:49:e1:f5:d1:6f:
                    45:04:76:66:32:db:3c:3a:d1:7a:9f:8d:51:8a:22:
                    46:bb:26:3f:e2:91:31:f7:eb:48:61:5d:11:b5:23:
                    3b:bd:51:c6:a6:5c:26:48:1c:45:67:2b:db:f2:3b:
                    f9:95:96:6d:9a:6e:28:ac:aa:8f:eb:b6:da:57:ee:
                    45:37:37:1c:7b:04:bd:40:cc:6d:76:44:1a:cb:a2:
                    ff:1e:21:20:90:e6:f6:3f:e6:91:d1:8b:cd:0b:96:
                    30:5e:5f:ef:cf:04:69:02:e9:ab:15:36:86:3d:dd:
                    44:97:26:87:39:b3:89:f4:15:de:80:b0:4c:9d:39:
                    6e:77:c7:4d:24:2b:3f:96:de:3f:75:2a:39:72:1a:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B9:B9:43:5B:FE:20:8D:66:5C:00:02:37:83:F3:01:C6:F4:29:9F
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:ee:13:02:22:ac:3e:f6:2a:37:ce:c2:f1:f9:da:33:1a:b1:
         59:38:82:8f:09:e6:d8:2e:de:d1:27:62:d1:36:1d:85:7d:be:
         65:75:2d:82:11:eb:06:33:df:ad:d3:2a:f5:42:cc:26:76:75:
         f9:28:20:21:6a:c1:85:9a:05:da:a7:2b:2d:58:04:02:c8:06:
         09:3d:0f:9e:ac:9e:b3:c6:a4:c2:a6:9a:7a:d4:a4:04:57:a8:
         98:91:36:83:de:93:c5:53:89:8a:22:c2:bb:6d:ff:07:59:3a:
         0e:f7:de:03:38:9f:54:69:90:44:49:d5:e0:62:bf:32:35:a3:
         8b:58:1b:64:03:51:9f:a9:dd:39:95:7b:5c:0b:16:c0:30:7a:
         99:a4:23:4d:dd:61:46:bb:68:e0:67:f7:d6:1a:15:8d:8c:0f:
         b1:63:fa:94:3b:7b:2e:17:74:1c:bf:0a:b0:1a:32:24:43:f4:
         1a:a1:91:0a:19:17:14:45:d5:f6:8c:ee:dd:15:76:d3:d0:36:
         6e:83:8b:d6:b5:17:01:1b:2d:25:f0:52:6e:68:77:ae:9f:24:
         31:dc:d7:c4:f2:d5:fb:1c:64:7f:10:4c:3a:fe:c4:96:b8:32:
         15:e8:90:26:7f:c5:a8:40:2a:29:68:7d:04:8b:1e:2e:2a:c4:
         9f:09:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 10:32:08 2026 by rpki-client