Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
File:                     HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json)
Hash identifier:          qJ5YKIC03K8EL9NKC0yBiKCrL/vBj/gokOM43rCcDX8=
Subject key identifier:   8B:4A:E5:CE:3E:95:5D:7F:DD:4A:F5:A9:C0:26:70:AC:FD:EB:12:64
Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12
Certificate issuer:       /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
Certificate serial:       071B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
Manifest number:          06EE
Signing time:             Sat 12 Sep 2026 22:00:18 +0000
Manifest this update:     Sat 12 Sep 2026 22:00:17 +0000
Manifest next update:     Sat 19 Sep 2026 22:00:17 +0000
Files and hashes:         1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: t1Qq2+Xq/yxX6hoPFHR7frgAnzCQNV1HOIHDmTITUlE=)
                          2: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: 2BUIUgxvcNc8FKQNTEn2iBIeuclNjrnmHDRM3YAQDcg=)
                          3: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: p/TVTKAt5KdzhUbxLMpy828VFw5LwqckZkSH14Ik/o8=)
                          4: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: v/foeEKordGhb9+twDBbACvfymVczEIMIF+8PlsYKI8=)
                          5: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: JyfcUr1tWyuOITJhrtk9V3F9eH5PW2R7X5x70HXGjr4=)
                          6: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: zlHp90z6YflX6Zoion059ib8bnfEmetsjV8gpqhjGfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl
                          rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1819 (0x71b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312
        Validity
            Not Before: Sep 12 22:00:17 2026 GMT
            Not After : Sep 19 22:00:17 2026 GMT
        Subject: CN=6aa5cb72-c6a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b7:ef:55:68:f0:b2:8b:eb:d0:8d:2e:7a:a8:
                    ed:3c:b9:83:2e:86:e4:15:fc:e4:04:0f:c0:48:d8:
                    05:bb:bc:97:84:31:3c:50:6b:46:a3:8f:2c:82:d8:
                    18:03:00:84:18:2e:ae:d7:22:ad:da:46:af:dc:27:
                    53:bd:7b:38:7a:bd:ff:57:5d:5f:aa:6c:ad:32:ba:
                    b3:d7:cb:d7:54:2e:01:1a:51:cb:be:e0:fa:33:46:
                    8e:77:22:8e:e6:ad:18:a5:ee:63:72:bc:c3:54:fb:
                    04:4f:5d:37:f2:f9:36:95:7f:cd:9e:e2:17:de:f2:
                    c0:d0:9b:26:98:bb:db:7b:fa:7a:9b:d2:e5:56:5e:
                    4d:e9:68:34:08:28:cc:ab:8e:e0:03:7b:2a:5d:c8:
                    aa:5f:45:d0:d5:b0:d2:13:84:a9:73:01:cf:9e:e6:
                    52:e5:4c:fb:c3:8d:04:8d:4b:13:a3:9b:0d:ad:f6:
                    9f:ff:74:e7:96:97:a3:1d:a0:0c:70:ee:0a:2d:32:
                    de:5d:21:05:ed:ac:d5:3a:ce:87:b3:af:06:a7:85:
                    ea:ca:de:a5:3c:fd:a3:76:78:a9:48:c5:d4:3c:5a:
                    94:a4:39:7a:20:7e:08:48:8a:79:d7:b0:09:10:d9:
                    69:6f:6f:5c:89:fe:9a:0a:28:08:bd:77:7e:ff:31:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:E5:CE:3E:95:5D:7F:DD:4A:F5:A9:C0:26:70:AC:FD:EB:12:64
            X509v3 Authority Key Identifier:
                keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:72:45:70:77:0d:91:01:2e:3b:c9:b8:7e:a4:6b:eb:39:4e:
         a8:86:f2:0d:38:73:e9:72:09:43:af:eb:32:25:9a:42:cb:34:
         16:72:bb:bb:7d:28:85:c7:46:5b:31:c9:f0:be:7b:52:f1:3e:
         87:01:14:a7:49:25:b4:10:2c:02:7d:d5:00:88:9a:41:af:c5:
         2c:34:3f:4d:d3:93:51:b1:c4:1a:2d:37:a7:cb:6d:b6:49:ba:
         2f:f8:11:fd:ed:4e:99:0b:e9:dc:4e:96:7f:bd:e8:8c:3d:52:
         4c:c7:fc:35:a0:00:e0:fc:36:a0:6d:fa:bf:42:13:b6:91:8b:
         56:1a:28:31:b2:f1:60:bf:05:ca:8f:9d:27:d1:08:7f:ad:d7:
         ef:0b:42:e3:ad:01:6d:d4:02:eb:40:94:6a:66:c9:de:62:2b:
         b5:a8:3a:9b:5b:e9:1d:74:9d:82:df:4e:47:2d:21:ad:4d:0e:
         ff:da:bb:d2:0b:78:d1:6b:ae:ea:86:95:7c:86:30:6b:ba:c9:
         15:e3:e3:3a:0e:73:e8:91:6c:53:8e:a6:22:ee:39:ac:b1:4a:
         15:a2:ea:c9:0b:57:9c:1f:25:dc:26:1a:e3:fc:00:47:a7:8a:
         e4:35:c8:71:97:9f:43:41:7a:f9:9f:b4:b3:71:22:d8:e9:80:
         6c:98:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:43:05 2026 by rpki-client