Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
File:                     HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft (raw, json)
Hash identifier:          d3CvSlTi0FgFwzUSFLYGLo4FXtwadY0fCXNKKNMmm+A=
Subject key identifier:   2E:A8:33:8C:E6:19:1C:F4:87:D0:F5:1F:74:95:14:FA:FE:EF:22:B1
Authority key identifier: 1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F
Certificate issuer:       /CN=A911BD6E/serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
Manifest number:          A3
Signing time:             Fri 09 Oct 2026 08:08:40 +0000
Manifest this update:     Fri 09 Oct 2026 08:08:40 +0000
Manifest next update:     Fri 16 Oct 2026 08:08:40 +0000
Files and hashes:         1: HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl (hash: tD2Tg/JnjUa7H+OkwASQLt176cNh5fUaFneJxuh0wT0=)
                          2: C6369A92E29211F086FBD344456F56BC.roa (hash: /hMoFkZDEyrOtFoyUNiUcHKPDtAIaxeqfmQ19EP0GNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 08:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=1EEC078CB6BA526603C20C8D99C3A74631D9C14F
        Validity
            Not Before: Oct  9 08:08:40 2026 GMT
            Not After : Oct 16 08:08:40 2026 GMT
        Subject: CN=6ac8a108-cb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:b7:e2:aa:cd:a2:f9:f3:8a:9e:a6:fa:56:
                    0e:17:38:e4:85:76:b6:09:3c:a0:ad:26:d4:fa:96:
                    c6:da:08:fc:cc:f5:b2:8c:61:ec:d8:c3:77:09:37:
                    51:ce:ad:6d:f6:7c:94:26:8a:52:a0:51:88:81:5e:
                    f9:61:1b:a3:d2:d2:80:83:29:a2:96:1b:4a:7e:52:
                    6c:c2:b5:67:fc:a6:ce:39:81:d8:57:01:f5:6f:79:
                    e9:ed:ea:40:26:95:12:76:0a:31:6a:13:92:02:7d:
                    31:9a:ce:08:6d:bc:6b:78:88:fd:06:02:ee:20:dd:
                    8f:e2:1b:40:83:6e:03:25:f2:4e:9a:78:b5:11:4d:
                    e5:bc:59:e3:90:f1:33:13:b6:c9:d8:a9:5b:8a:0b:
                    00:31:f0:c3:2f:94:75:20:41:52:47:99:db:f1:ba:
                    1a:eb:96:d8:64:ce:9e:1d:73:87:b9:49:87:fa:5e:
                    0b:99:cc:eb:45:b5:e0:15:c1:e0:e8:18:5c:b6:5a:
                    e8:a6:55:38:ca:8c:86:32:ca:e7:5b:28:b7:1d:0b:
                    2d:a6:f2:7e:c9:89:ec:b2:9b:5e:e7:17:a9:93:3a:
                    03:d3:95:fe:30:47:26:4b:4a:87:ba:2f:ca:d9:3b:
                    97:02:79:e4:6e:a7:e8:2d:0e:31:d1:d8:a1:c6:ef:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A8:33:8C:E6:19:1C:F4:87:D0:F5:1F:74:95:14:FA:FE:EF:22:B1
            X509v3 Authority Key Identifier:
                keyid:1E:EC:07:8C:B6:BA:52:66:03:C2:0C:8D:99:C3:A7:46:31:D9:C1:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HuwHjLa6UmYDwgyNmcOnRjHZwU8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/B659794CE29111F096E27D11456F56BC/HuwHjLa6UmYDwgyNmcOnRjHZwU8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:35:3a:11:14:ee:d4:47:97:19:38:9b:4c:30:c9:5f:30:
         ab:0c:cc:c9:33:90:cc:26:44:2e:24:b7:72:81:33:26:2c:39:
         75:93:72:be:be:ba:9e:d9:44:df:d3:91:dd:c7:fb:80:f8:32:
         d6:eb:2b:2b:59:0b:ac:73:a1:8f:f7:c8:06:53:e2:21:a1:77:
         ae:9a:0a:9a:1f:26:9a:64:eb:5b:bf:e1:60:ec:89:5b:e1:df:
         e5:4c:48:81:3c:b6:2e:a4:02:16:e6:fa:2a:4b:9d:05:f2:ab:
         88:f3:46:98:ee:81:44:74:25:0d:ae:7e:57:45:40:cf:dc:7e:
         94:49:2f:88:61:e8:aa:e8:ab:57:fa:25:83:1c:2f:78:68:b5:
         af:56:bd:d3:4d:e1:bc:73:e6:b5:1d:f4:22:80:94:98:69:7d:
         98:12:26:dd:6a:4d:72:c2:d2:00:d3:c2:70:95:de:bf:a7:61:
         77:07:16:8b:51:ed:50:8e:92:15:4b:14:5c:d3:2d:93:08:10:
         cc:f9:73:1c:6e:ed:b1:31:88:54:b9:67:e2:46:b0:d3:b0:03:
         38:81:d8:cd:a1:2c:b7:a3:1c:e6:25:00:e6:a3:b5:77:5c:02:
         ea:c2:33:9f:e5:6a:66:39:6d:d0:4a:a7:3e:1c:25:89:32:ba:
         29:2a:ef:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:24:58 2026 by rpki-client