Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          feS0Na9EEq0m7mQ06pIocR19pjAO3FxEeRJvbLUYYFA=
Subject key identifier:   C7:D8:F5:69:40:CE:71:7B:F0:A9:84:F5:7D:1C:99:D0:B7:56:56:D2
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0734
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          0702
Signing time:             Sun 18 Oct 2026 22:17:23 +0000
Manifest this update:     Sun 18 Oct 2026 22:17:23 +0000
Manifest next update:     Sun 25 Oct 2026 22:17:23 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: FwusFiN8b28WeytNte1qFyEb4dKNNa3vPb6zhR12lCc=)
                          2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: EQASLtuoR6EsjHdG53Md+z8IqytyzdxiEBxgg98uaVo=)
                          3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: gmiznf/rB7enYpTf/YzP3CAZPFsBXf6xe87sGWeVl4c=)
                          4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: xknjJ13gwZ9xl2TQQYccPkk8b/iDjk0MZUEtEXEv1tA=)
                          5: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: o/XwhsB+XVooPsmWzQGDETGh7dBjz+5eR8mUlPI8cLs=)
                          6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: O6E2zr3QVTkio/pvxmFA+1SqKB5lb53jqEw26yPfilY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 22:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct 18 22:17:23 2026 GMT
            Not After : Oct 25 22:17:23 2026 GMT
        Subject: CN=6ad54573-4d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:ef:84:7f:44:af:3d:63:74:e7:05:76:b3:
                    ef:d7:24:f6:07:04:af:e9:3d:ef:fa:fc:07:97:3c:
                    ad:33:c4:54:82:87:8a:af:8a:dd:41:9b:2d:71:77:
                    fb:2a:d6:45:bd:db:8d:8d:3f:b2:ed:e3:0f:7a:2f:
                    b1:65:9d:d9:b5:f7:01:49:a3:dc:61:8f:0a:a9:5e:
                    b0:f2:cb:01:d4:72:32:16:f4:fd:11:e7:3d:eb:5b:
                    72:bb:5b:e9:e6:e8:fc:40:29:54:c2:ec:7f:41:30:
                    f1:c5:49:5d:72:84:e0:d8:36:34:c3:f1:bc:8e:5b:
                    9c:cd:72:e3:e9:53:39:8c:50:a2:a0:03:78:b1:07:
                    32:64:42:f6:96:21:f1:1b:4e:b4:73:dd:a7:c7:4e:
                    c1:63:3a:45:3a:a5:e3:61:c9:68:28:e8:ec:a9:80:
                    e1:fa:7f:6b:ad:3e:55:44:aa:aa:a7:17:5c:07:1c:
                    d0:1a:a4:6a:e0:f9:61:e6:05:5c:3a:e6:c8:79:1e:
                    cd:a7:58:b9:d4:60:62:40:04:a4:f5:ee:06:52:e7:
                    00:3e:ee:e8:14:f1:36:8d:9c:75:c1:a2:fe:59:33:
                    b8:38:af:df:40:27:f8:67:52:6f:2e:cc:ef:1f:ad:
                    1b:16:c2:12:5d:a9:1b:66:04:36:06:0d:72:20:21:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:F5:69:40:CE:71:7B:F0:A9:84:F5:7D:1C:99:D0:B7:56:56:D2
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:bf:b8:5d:7b:bd:4e:c4:fa:ee:20:2f:ef:aa:5f:44:c9:
         f3:d3:8a:84:79:fc:a5:3c:90:c3:20:37:76:6e:af:9d:4a:bf:
         c3:9b:71:7f:8c:7e:c3:1f:06:86:08:8f:93:e9:be:5e:a6:44:
         fa:ad:18:ca:a5:96:ce:d0:c4:ba:45:65:d0:4b:cf:b8:87:ad:
         b4:41:47:b9:e9:f2:af:6d:e9:95:99:89:ef:1b:fb:bb:f3:c3:
         2c:4b:7f:0e:ee:72:a7:3c:65:a7:3d:fb:29:67:b4:93:f0:5a:
         f6:36:14:1d:a8:41:be:c7:d0:5c:a9:1b:c0:2b:c2:94:20:5e:
         11:39:a4:dd:1a:32:bb:24:4a:7b:e8:0b:0b:9b:6d:03:85:67:
         22:49:71:e3:a2:68:9f:a6:80:a3:b3:aa:44:34:7e:3c:aa:17:
         a3:fa:db:a2:a1:9f:f1:63:de:0f:e8:cc:5d:82:6c:0d:56:34:
         e2:d7:1a:9d:0c:4d:4b:5d:27:5a:df:a9:92:7c:b3:8b:eb:d1:
         4b:e1:b1:72:f4:84:fd:e3:12:58:c8:a0:9f:fc:0a:8d:60:97:
         d2:bd:57:d9:24:c2:d9:68:9b:30:7a:19:54:b6:09:e9:04:87:
         af:d1:a3:94:09:14:34:17:84:d8:30:d2:4c:28:f6:93:a0:f9:
         af:0a:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:15 2026 by rpki-client