Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          KzFQxgVmx753PHyFBr8vez5XXYu8HmvL27ndgpWauXg=
Subject key identifier:   C3:8B:E8:CC:F4:FC:A3:2C:EA:40:37:B9:6C:5B:28:43:D0:BC:5E:E6
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          069C
Signing time:             Sat 04 Apr 2026 22:13:44 +0000
Manifest this update:     Sat 04 Apr 2026 22:13:44 +0000
Manifest next update:     Sat 11 Apr 2026 22:13:44 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: VsUA9aWb7N5/FKvFOMeUBitvNXsyRhR08zrtxPL9TQc=)
                          2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1737 (0x6c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Apr  4 22:13:44 2026 GMT
            Not After : Apr 11 22:13:44 2026 GMT
        Subject: CN=69d18d18-9fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:3c:c1:7a:76:46:85:e0:5e:be:d9:fc:6a:
                    f7:b3:86:17:1d:cf:c3:0c:cf:c4:c0:57:c7:04:c4:
                    e2:ee:c6:06:be:52:cb:2b:e9:2b:93:3e:bc:1a:9c:
                    5e:19:a9:86:31:13:69:bc:42:aa:fd:6f:9e:d3:9c:
                    c2:23:ce:c3:d4:35:e2:76:4a:a8:10:b4:64:f0:91:
                    89:47:4d:3e:5c:24:44:99:e3:bf:ef:17:cf:64:c5:
                    54:19:44:69:8b:66:d3:f5:2e:0e:24:39:30:43:1b:
                    88:d6:87:31:80:6c:a9:06:29:57:f3:78:83:e9:2e:
                    82:5c:59:f1:ee:22:9e:78:82:62:7f:38:ad:d6:fe:
                    b8:d8:f6:cb:77:b2:81:ef:1a:2f:a6:b8:70:e8:9a:
                    40:00:d6:79:90:1e:50:a7:f0:71:b0:83:7d:ea:99:
                    f0:8e:15:21:19:98:09:85:df:4c:4a:5f:56:c1:58:
                    82:d2:a5:05:84:2d:5f:7f:45:40:9b:ac:09:dd:7a:
                    b9:b2:30:3d:14:6a:38:2d:3e:08:aa:2b:90:95:9c:
                    34:47:8b:6f:46:6c:67:15:a0:36:ee:50:24:72:97:
                    6e:f9:87:48:71:49:6b:4d:d7:51:0f:1f:99:9d:21:
                    73:13:8a:76:44:99:5b:e9:4e:73:ef:94:f6:d8:22:
                    d4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8B:E8:CC:F4:FC:A3:2C:EA:40:37:B9:6C:5B:28:43:D0:BC:5E:E6
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:59:9c:e7:75:a1:93:1b:69:83:f0:5f:f9:1c:fb:a2:13:99:
         a4:9a:92:55:27:fa:a6:c3:a8:8d:ac:4d:c6:f3:e4:68:f2:da:
         70:dc:32:7b:7e:7f:92:6d:bb:d7:53:98:2a:de:a2:d0:68:8f:
         18:1b:c4:24:f0:89:0b:fa:1a:13:06:78:a6:21:e0:16:d9:a0:
         ea:44:02:7b:e0:71:dc:18:38:65:3a:94:bf:a4:5b:1d:1d:3f:
         80:21:d8:a0:47:57:d6:e8:a1:b6:af:72:35:30:66:40:63:8f:
         00:c5:9b:8f:f1:a5:0a:05:38:39:5e:e0:66:91:b8:c0:d8:8e:
         6b:8b:79:db:dd:92:15:3c:e6:30:71:a8:f9:7d:11:9f:eb:63:
         f5:f5:4c:e5:7c:cf:c6:af:89:6d:54:cb:7a:6c:b1:c1:48:6a:
         23:af:5e:65:53:51:0d:40:d1:b9:3e:d5:d1:e8:47:4b:12:3b:
         1b:31:c8:65:ac:cb:21:cb:31:c2:61:17:38:51:5f:ee:51:a6:
         08:ed:c7:31:92:f5:ce:d2:fa:1f:0b:78:37:17:84:dc:91:42:
         09:9b:10:11:25:e0:ea:4f:b7:06:95:b1:49:9b:f0:81:14:d6:
         53:5a:0e:87:53:5e:0f:93:e3:65:38:68:bf:cd:41:8a:23:c4:
         77:92:7c:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwNDA0MjIxMzQ0WhcNMjYwNDExMjIxMzQ0WjAYMRYwFAYD
VQQDEw02OWQxOGQxOC05ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2HA8wXp2RoXgXr7Z/Gr3s4YXHc/DDM/EwFfHBMTi7sYGvlLLK+krkz68Gpxe
GamGMRNpvEKq/W+e05zCI87D1DXidkqoELRk8JGJR00+XCREmeO/7xfPZMVUGURp
i2bT9S4OJDkwQxuI1ocxgGypBilX83iD6S6CXFnx7iKeeIJifzit1v642PbLd7KB
7xovprhw6JpAANZ5kB5Qp/BxsIN96pnwjhUhGZgJhd9MSl9WwViC0qUFhC1ff0VA
m6wJ3Xq5sjA9FGo4LT4IqiuQlZw0R4tvRmxnFaA27lAkcpdu+YdIcUlrTddRDx+Z
nSFzE4p2RJlb6U5z75T22CLUKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMOL6Mz0
/KMs6kA3uWxbKEPQvF7mMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0Fmc53Whkxtpg/Bf+Rz7ohOZpJqSVSf6psOojaxNxvPkaPLacNwye35/km27
11OYKt6i0GiPGBvEJPCJC/oaEwZ4piHgFtmg6kQCe+Bx3Bg4ZTqUv6RbHR0/gCHY
oEdX1uihtq9yNTBmQGOPAMWbj/GlCgU4OV7gZpG4wNiOa4t5292SFTzmMHGo+X0R
n+tj9fVM5XzPxq+JbVTLemyxwUhqI69eZVNRDUDRuT7V0ehHSxI7GzHIZazLIcsx
wmEXOFFf7lGmCO3HMZL1ztL6Hwt4NxeE3JFCCZsQESXg6k+3BpWxSZvwgRTWU1oO
h1NeD5PjZThov81BiiPEd5J8fA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 16:50:44 2026 by rpki-client