Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          17uVSvmhhy2nsdXliIaqnrqU9L/CLg3TO1ZmV91drsU=
Subject key identifier:   7F:93:1E:31:7A:BB:2B:64:AE:45:CD:A9:96:A2:CC:17:0F:B0:7E:D5
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       0731
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          06FF
Signing time:             Mon 12 Oct 2026 22:19:31 +0000
Manifest this update:     Mon 12 Oct 2026 22:19:30 +0000
Manifest next update:     Mon 19 Oct 2026 22:19:30 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: CKcFCVH1DbbxE2Km+S+u2senj5CwVfuyBRpUNW/qMOs=)
                          2: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: o/XwhsB+XVooPsmWzQGDETGh7dBjz+5eR8mUlPI8cLs=)
                          3: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: gmiznf/rB7enYpTf/YzP3CAZPFsBXf6xe87sGWeVl4c=)
                          4: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: xknjJ13gwZ9xl2TQQYccPkk8b/iDjk0MZUEtEXEv1tA=)
                          5: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: O6E2zr3QVTkio/pvxmFA+1SqKB5lb53jqEw26yPfilY=)
                          6: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: EQASLtuoR6EsjHdG53Md+z8IqytyzdxiEBxgg98uaVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1841 (0x731)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Oct 12 22:19:30 2026 GMT
            Not After : Oct 19 22:19:30 2026 GMT
        Subject: CN=6acd5cf2-72a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:63:9c:db:aa:d4:97:80:60:a9:42:60:ba:
                    ec:0c:c9:82:52:ae:fc:ea:ec:9e:23:37:6a:46:da:
                    e8:df:68:42:cb:75:34:25:7a:0b:08:df:63:3c:08:
                    c1:06:df:65:d2:2c:8b:cd:1f:84:f7:cb:20:99:19:
                    b8:e7:61:29:0a:c3:d8:89:7a:da:0d:48:c1:01:2d:
                    d1:05:3a:d5:9a:84:dd:7f:d1:23:9e:ab:d8:8c:2e:
                    f7:10:eb:d4:1a:e7:d1:50:d4:16:7a:01:8e:0d:b9:
                    99:d6:d4:77:e8:4c:c2:89:a4:a3:02:1f:28:09:d7:
                    fe:1b:c7:6c:04:79:3f:d9:d1:34:71:12:1b:51:0b:
                    0b:81:d0:ee:a2:b6:c3:ac:cc:be:05:4d:62:13:61:
                    36:0f:c5:98:3c:e5:e4:95:3e:eb:3a:41:9a:18:2b:
                    c7:9c:f0:d6:5d:87:1d:83:c1:82:92:9e:7b:ad:93:
                    86:ed:08:e7:59:74:a8:18:a8:9b:d4:9d:4e:99:ba:
                    68:98:bb:cd:80:bd:fb:bd:81:8e:19:00:b3:c9:b4:
                    76:89:08:4b:42:72:ac:42:8d:a8:22:fb:6e:2e:89:
                    92:3b:83:02:19:9c:a8:b4:cf:a1:1f:22:ae:40:77:
                    94:74:1e:85:08:e0:ef:ea:c8:7b:30:94:be:ff:68:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:93:1E:31:7A:BB:2B:64:AE:45:CD:A9:96:A2:CC:17:0F:B0:7E:D5
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:81:51:dc:60:be:4b:28:33:49:6f:9b:d7:e9:5b:14:b0:85:
         14:fa:1f:f6:55:c0:06:5f:f8:5c:71:a3:b0:4b:08:0e:ca:71:
         a2:d1:41:07:f2:91:f2:63:c1:42:f1:a6:55:5c:0a:a5:b3:13:
         24:fa:e7:9e:5b:64:80:c4:47:d7:0e:b0:a9:9a:38:60:ab:a4:
         b7:46:6c:08:e3:bf:33:0b:ef:bf:86:d7:6e:16:9a:8f:9d:58:
         8b:64:7d:96:b8:f1:9c:4a:dc:68:5d:42:a6:e2:1c:30:c5:a4:
         32:42:fa:3d:19:4c:39:2b:e3:e5:4b:91:2f:be:f8:83:20:c0:
         9d:77:ee:c3:9e:1b:dc:36:88:9f:7a:fc:08:05:16:b9:7a:ea:
         13:8f:99:d1:01:99:64:ef:5a:83:5c:b1:ea:a7:03:ab:b1:a4:
         42:93:d1:cf:90:db:69:d8:74:1b:90:08:9f:ac:93:5b:ac:c6:
         3d:ec:64:16:3f:1e:85:cd:df:d9:84:90:a1:62:7f:5e:b3:57:
         f7:69:32:99:4d:8c:60:9c:7c:f4:b0:26:08:a3:e5:e5:36:f3:
         14:a3:f5:72:9f:d8:90:cb:a0:99:7f:7b:f1:17:21:d8:81:81:
         e6:f7:32:0f:cf:ee:fd:4a:f7:fb:da:ed:06:6e:b8:af:27:5e:
         f7:3d:9a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:34:41 2026 by rpki-client