Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
File:                     hm540aRej9EmgIr_fOpPwI59kqg.mft (raw, json)
Hash identifier:          Nnzu0Sgo3M9vruZUcvDAZyC5RU+ZrQFz7KmOfhu/bvo=
Subject key identifier:   B9:C8:3E:3C:9F:C7:BD:7F:D1:44:C3:A7:4B:EF:53:D0:BF:37:E6:2A
Authority key identifier: 86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8
Certificate issuer:       /CN=A911CFCE/serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
Manifest number:          01DB
Signing time:             Sat 03 Oct 2026 04:24:24 +0000
Manifest this update:     Sat 03 Oct 2026 04:24:23 +0000
Manifest next update:     Sat 10 Oct 2026 04:24:23 +0000
Files and hashes:         1: hm540aRej9EmgIr_fOpPwI59kqg.crl (hash: MhrsRnW0E0pgn+lSD4yz7i6ILfwtB1+MbDdefnYW9NY=)
                          2: 139B8950382911F1B2EF7ADC9D833773.roa (hash: hVaUELhP5lL/NOJceIrXYGy4lOBy7MgLdEmJ1OSKOf4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl
                          rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:24:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CFCE, serialNumber=866E78D1A45E8FD126808AFF7CEA4FC08E7D92A8
        Validity
            Not Before: Oct  3 04:24:23 2026 GMT
            Not After : Oct 10 04:24:23 2026 GMT
        Subject: CN=6ac08378-13ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:56:6e:f4:64:26:c6:ef:17:31:e5:13:7a:
                    7a:7e:86:ef:53:a2:f6:21:84:43:a5:de:02:47:b4:
                    97:c8:68:97:90:d1:53:ff:d4:d3:4c:56:53:10:e1:
                    cc:30:29:b2:a8:e2:ff:8f:b4:5d:bd:f5:ad:4d:10:
                    03:85:72:c1:7b:34:46:4e:48:b1:dc:ce:5d:b3:03:
                    8e:5c:2f:8c:b4:a6:b3:6d:cd:73:fb:e3:5b:b0:00:
                    06:99:4b:58:ce:44:d3:f0:2d:b6:b4:3a:36:c3:53:
                    63:a2:86:0d:75:c2:af:04:a8:b3:30:ad:d0:d8:67:
                    40:ef:98:ff:df:3d:6c:0b:52:0d:41:1d:08:d6:1e:
                    d2:9c:4e:c3:a2:80:86:cd:72:ec:33:fe:8a:6e:d2:
                    87:bd:0e:53:c7:d0:dc:54:b4:97:3b:3f:d5:be:9b:
                    a1:ea:7a:dc:68:9f:98:07:32:3a:77:4c:85:24:31:
                    8b:0c:84:52:90:bc:02:9b:5b:15:3c:9c:29:ea:5a:
                    48:7c:bf:a3:a1:9d:46:e4:6d:ec:77:67:d0:0b:ec:
                    e8:66:ba:37:72:77:ba:b0:7d:8e:30:72:4c:b2:5e:
                    e6:25:4c:1d:12:04:ba:f2:af:81:22:0e:84:12:9e:
                    0a:ca:b8:f7:94:ec:8e:84:63:4b:fe:bb:97:0c:e0:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:3E:3C:9F:C7:BD:7F:D1:44:C3:A7:4B:EF:53:D0:BF:37:E6:2A
            X509v3 Authority Key Identifier:
                keyid:86:6E:78:D1:A4:5E:8F:D1:26:80:8A:FF:7C:EA:4F:C0:8E:7D:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hm540aRej9EmgIr_fOpPwI59kqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CFCE/E0BE36AC023F11EF8E5C1E58C4F9AE02/hm540aRej9EmgIr_fOpPwI59kqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d1:70:74:95:ed:52:1a:f9:3e:96:2a:af:7e:4e:de:74:68:
         32:20:bf:52:a6:f2:20:f2:7f:24:91:2c:98:27:ca:37:1e:d6:
         3c:aa:a2:0f:6b:18:80:10:39:c9:3e:ff:01:24:91:d4:7c:89:
         76:88:63:3d:c4:12:e1:6d:fd:49:d4:52:0d:50:27:5e:2f:50:
         72:d8:36:27:f9:b5:fb:cd:55:0f:fc:a2:e9:28:30:b5:5c:e3:
         4f:da:04:24:18:71:ce:20:ad:df:58:28:06:68:d5:49:6d:be:
         b1:a2:26:e0:79:cd:ee:f2:b9:a9:6e:6b:79:4d:e1:d8:01:07:
         55:3d:b4:ad:d2:83:85:8d:8a:d3:f5:f1:09:48:0b:08:17:21:
         3f:70:dd:c0:c1:28:9c:4c:c0:16:a3:4e:80:1a:fe:d0:9a:6c:
         8d:e0:06:0e:2c:51:d7:1b:92:40:78:3c:f0:03:6a:10:23:d7:
         18:dd:31:29:96:c9:03:1d:fc:92:04:17:0e:e9:70:af:da:01:
         2b:8a:d7:c2:be:c1:46:4b:a6:20:d2:54:83:ab:68:18:d4:a5:
         25:e9:f1:52:46:83:77:3e:d1:86:1c:08:d8:67:cf:36:11:d5:
         9a:e2:a6:31:73:44:b3:b6:aa:23:68:ee:51:eb:e4:db:19:b5:
         9d:50:b6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:08:50 2026 by rpki-client