Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          8SHOxg9SSLNf41Lukm1QtOSH5iliAl35mhpYWxAC3Sc=
Subject key identifier:   02:FE:A3:2C:29:B5:D6:14:4F:CF:A4:AF:5D:71:15:06:5D:55:69:62
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       06BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          0690
Signing time:             Thu 12 Mar 2026 22:05:33 +0000
Manifest this update:     Thu 12 Mar 2026 22:05:33 +0000
Manifest next update:     Thu 19 Mar 2026 22:05:33 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: 6HP+Wlb2saJ/Fvx9l44g26eBHXjd7W1+L3RPwJiKgrw=)
                          2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
                          5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
                          6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Mar 12 22:05:33 2026 GMT
            Not After : Mar 19 22:05:33 2026 GMT
        Subject: CN=69b338ad-0346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:55:21:c6:85:0a:82:29:0a:fb:33:f9:d9:
                    e0:a9:7e:31:63:06:e6:71:74:97:e3:4a:46:c5:df:
                    b1:92:74:51:45:ff:c1:1c:80:57:f0:1c:7f:ed:09:
                    15:45:39:2f:a0:ae:3a:48:9e:c1:ac:aa:53:84:0e:
                    aa:e9:83:7a:54:17:f5:9f:4e:66:9b:39:c7:8b:0f:
                    4e:4e:92:c7:c2:b0:c1:70:7e:d9:9a:df:45:87:21:
                    c2:08:96:1b:f9:1f:c5:9a:fa:09:51:99:7b:d8:a6:
                    b7:c8:a6:a8:62:9e:b8:7d:80:ad:dc:e6:94:cc:d1:
                    bb:99:7d:b3:2b:db:c5:60:10:07:81:95:15:40:cf:
                    f9:e3:e9:8e:ed:1b:93:8f:3f:b4:74:24:d1:c9:4e:
                    b1:09:3f:13:22:98:2b:60:5d:e0:ea:26:6f:06:d3:
                    6f:e7:8b:c7:3e:10:02:5e:98:cb:80:ea:4c:85:79:
                    44:db:7d:28:f3:c5:bd:91:5a:dd:94:e6:e3:ba:d2:
                    ad:01:47:a3:d4:6f:29:19:73:da:78:f2:c7:a4:5e:
                    3a:a2:83:22:f9:ee:b5:46:c1:17:9f:f9:05:f2:b3:
                    7e:d3:6c:c3:b6:1b:4d:a9:cb:d5:b1:89:36:6f:57:
                    4b:e0:54:03:fb:ff:d2:2c:01:b5:a1:57:f3:8e:44:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FE:A3:2C:29:B5:D6:14:4F:CF:A4:AF:5D:71:15:06:5D:55:69:62
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:86:2d:c5:18:e6:47:da:7f:fc:1f:07:ee:c7:20:ec:a8:af:
         ff:70:b8:6c:88:52:1e:d6:e8:9e:bf:33:df:0e:27:20:3b:ed:
         87:60:d2:c4:d1:be:28:ee:bd:e6:09:e7:89:6b:d1:e7:a9:d7:
         f6:c2:e0:7f:09:d2:fb:38:26:24:3d:9e:31:2b:99:87:9c:5d:
         1d:be:55:b8:01:bb:b8:3b:b9:30:ae:eb:99:1d:35:bd:49:b2:
         1d:3b:68:b6:f2:a1:ce:58:9b:06:a6:1f:f3:8c:22:90:e4:10:
         c1:86:f9:49:ae:2a:ca:3c:44:ae:fb:5f:55:f7:e2:88:7f:61:
         7e:86:32:f8:8a:2e:09:94:fe:ea:e4:53:f5:16:a0:fb:0d:51:
         aa:15:38:e7:a1:3e:41:76:4d:89:f5:c2:f6:3e:00:b5:22:23:
         9c:ee:e3:3f:28:e6:60:98:cb:57:13:77:c5:5d:3b:b7:d3:4e:
         20:db:0a:62:a0:32:1c:f0:e1:ff:89:d9:46:b5:83:a9:38:a6:
         e0:8c:3a:31:9d:dc:06:c4:65:f2:fd:12:ee:31:4e:d8:17:9f:
         11:4f:6e:96:6a:c6:81:08:4e:eb:73:78:07:f0:50:f6:97:25:
         d8:6b:6b:dd:0f:f3:5f:f1:0b:d3:e3:47:22:e7:a7:ad:04:b4:
         46:7c:42:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB
RjM3RDgzMTIwHhcNMjYwMzEyMjIwNTMzWhcNMjYwMzE5MjIwNTMzWjAYMRYwFAYD
VQQDEw02OWIzMzhhZC0wMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApjNVIcaFCoIpCvsz+dngqX4xYwbmcXSX40pGxd+xknRRRf/BHIBX8Bx/7QkV
RTkvoK46SJ7BrKpThA6q6YN6VBf1n05mmznHiw9OTpLHwrDBcH7Zmt9FhyHCCJYb
+R/FmvoJUZl72Ka3yKaoYp64fYCt3OaUzNG7mX2zK9vFYBAHgZUVQM/54+mO7RuT
jz+0dCTRyU6xCT8TIpgrYF3g6iZvBtNv54vHPhACXpjLgOpMhXlE230o88W9kVrd
lObjutKtAUej1G8pGXPaePLHpF46ooMi+e61RsEXn/kF8rN+02zDthtNqcvVsYk2
b1dL4FQD+//SLAG1oVfzjkQo/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL+oywp
tdYUT8+kr11xFQZdVWliMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD
QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp
ODBBSWpSTjAzUzJ2TjlneEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFYYtxRjmR9p//B8H7scg7Kiv/3C4bIhSHtbonr8z3w4nIDvth2DSxNG+KO69
5gnniWvR56nX9sLgfwnS+zgmJD2eMSuZh5xdHb5VuAG7uDu5MK7rmR01vUmyHTto
tvKhzlibBqYf84wikOQQwYb5Sa4qyjxErvtfVffiiH9hfoYy+IouCZT+6uRT9Rag
+w1RqhU456E+QXZNifXC9j4AtSIjnO7jPyjmYJjLVxN3xV07t9NOINsKYqAyHPDh
/4nZRrWDqTim4Iw6MZ3cBsRl8v0S7jFO2BefEU9ulmrGgQhO63N4B/BQ9pcl2Gtr
3Q/zX/EL0+NHIuenrQS0RnxCkw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:50:04 2026 by rpki-client