Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File:                     HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier:          zXHf6NLKxJ2qHP+22/NPKLCxaSjVLS1yrZ+hIULugoA=
Subject key identifier:   B3:BC:8C:31:58:E2:9D:2E:65:B3:2E:77:7F:42:AF:B1:33:81:08:55
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer:       /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number:          0163
Signing time:             Wed 19 Aug 2026 05:49:44 +0000
Manifest this update:     Wed 19 Aug 2026 05:49:44 +0000
Manifest next update:     Wed 26 Aug 2026 05:49:44 +0000
Files and hashes:         1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: OKqmblEWFr6/CxBz51xBWz4nApM4ykkzKr8T9rZn+Qo=)
                          2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: W9u5qlB4WlP9CIfe+lgCw0P7bcpuJCWbMFYa3TvAgqM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
                          rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
        Validity
            Not Before: Aug 19 05:49:44 2026 GMT
            Not After : Aug 26 05:49:44 2026 GMT
        Subject: CN=6a8543f8-e5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:c6:49:4f:6a:16:3a:88:12:1a:00:8e:ec:
                    92:64:9e:dd:62:d9:4c:d4:d5:b9:f0:73:d2:80:97:
                    cc:ac:bb:88:5d:27:cb:f6:76:5e:72:60:42:cf:40:
                    39:79:20:4e:fd:d7:a5:8e:7a:75:d2:6b:97:4f:8e:
                    3a:c8:29:10:4c:76:d9:4f:90:e1:3b:4e:ab:d2:57:
                    11:4e:e3:42:6a:00:2d:8d:70:b3:ef:d2:1d:c4:75:
                    8c:3e:23:86:ed:b1:19:75:d1:ac:3a:9c:a1:f5:61:
                    9f:5b:22:6f:8a:03:41:89:5e:e7:81:b2:53:1e:79:
                    ae:2b:66:d9:61:f0:3e:4b:e5:8b:91:05:00:d1:07:
                    48:03:58:a6:42:9f:2b:2b:fb:16:7d:9a:74:dd:10:
                    13:cc:86:32:f2:7d:ee:2a:8d:88:19:5d:7d:5f:e3:
                    da:27:31:b4:48:ae:79:02:7a:b6:3d:fc:09:38:3f:
                    d3:23:ec:af:cc:e3:7d:36:e1:d1:30:a7:0c:dc:5d:
                    bf:16:e5:c5:14:f9:86:b9:57:e7:cd:e6:1e:7b:e2:
                    73:de:62:de:64:62:b9:3a:ca:b5:f4:80:52:cd:27:
                    58:3c:9e:e2:17:b0:dc:c2:ef:c4:11:0d:11:e6:f8:
                    1f:6f:bc:a9:c4:71:9d:5a:fe:bd:6e:af:76:3a:da:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BC:8C:31:58:E2:9D:2E:65:B3:2E:77:7F:42:AF:B1:33:81:08:55
            X509v3 Authority Key Identifier:
                keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:8e:8b:ff:90:60:c0:7d:de:1b:1b:2e:90:0d:30:1a:b0:
         fa:fe:20:eb:3e:0f:2f:9d:1a:db:4a:a9:f7:50:e0:1c:8e:57:
         be:7e:67:66:60:4a:fc:48:b3:2e:51:b9:1c:d4:f0:95:db:71:
         a1:86:6b:14:7f:78:66:3d:78:8d:01:5b:55:c0:7b:e4:32:2b:
         2c:33:f7:48:a0:bc:e9:eb:87:92:c3:db:19:34:c1:89:c7:91:
         c3:27:00:70:e1:25:1e:7d:ed:88:53:25:a1:ac:ec:38:98:5d:
         d4:1a:c1:47:f6:36:ad:be:3c:49:3f:61:49:9c:ec:d1:ad:7e:
         2b:0a:cd:8b:57:6a:6b:83:6e:29:45:bf:fb:01:a2:e7:ba:70:
         ea:01:9d:b9:a6:07:c7:57:0c:a9:42:1a:e7:b1:39:99:f3:cf:
         1e:33:e2:8c:a7:3f:02:29:e3:ff:77:cb:7c:44:6a:d2:af:02:
         99:4a:89:7a:98:4e:5f:82:8f:1e:c1:9a:6f:49:7c:bc:1f:bd:
         25:ce:32:32:e4:4f:ee:92:81:f0:fd:f7:74:b1:95:0f:57:61:
         1b:ed:bc:5e:2d:93:23:25:af:a2:3f:d8:34:e2:df:4b:de:c7:
         9d:67:50:3c:6a:57:cb:8e:81:20:47:10:6e:1f:59:89:ad:ab:
         d9:1b:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:54 2026 by rpki-client