Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File:                     hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier:          XoJ8blUtt3sxCxoWm+tgsedABUglEknYh/2ffZ9Hmgk=
Subject key identifier:   7D:CE:E0:E5:7D:69:A2:DE:F9:4F:2E:5E:92:95:4B:BA:83:C1:93:AD
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer:       /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number:          0772
Signing time:             Sat 24 Oct 2026 21:41:41 +0000
Manifest this update:     Sat 24 Oct 2026 21:41:40 +0000
Manifest next update:     Sat 31 Oct 2026 21:41:40 +0000
Files and hashes:         1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: bvMKwG0iG0R7Va6NAKknCpoaeWAMiRtmKMliE9bSNDY=)
                          2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 21:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
        Validity
            Not Before: Oct 24 21:41:40 2026 GMT
            Not After : Oct 31 21:41:40 2026 GMT
        Subject: CN=6add2614-f58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:99:2c:5e:c9:91:ef:f8:16:6b:e0:20:b0:
                    cd:84:5d:8c:2e:c4:ce:c0:b8:55:f3:f4:1c:05:fa:
                    8c:d9:c7:2b:52:26:84:d7:19:43:d8:7d:ac:53:6a:
                    69:f0:94:41:f3:f3:9e:ee:f0:bf:a8:dd:e0:28:73:
                    5e:26:39:16:55:51:de:e4:8d:66:d1:ae:44:12:0c:
                    23:d9:dd:03:b0:61:f8:38:29:08:e1:90:c9:17:d1:
                    42:d4:ec:61:4f:63:95:89:4f:9f:65:cc:71:73:69:
                    8c:4d:a5:ac:fe:2b:7a:0e:be:92:86:79:47:15:75:
                    e7:38:c2:a3:42:2f:c2:d6:a3:3b:dd:ef:55:c9:32:
                    5e:44:7b:79:1f:69:2f:f9:a2:13:ce:a9:45:7a:1a:
                    2d:de:15:15:a0:00:d5:ab:3a:a3:5a:aa:e6:77:f9:
                    22:06:13:58:6a:f0:bd:19:6e:68:5d:c1:68:6a:31:
                    b6:10:7d:a9:5c:46:14:1c:5e:cf:a4:a2:b4:77:5a:
                    e5:88:7d:5e:c9:16:89:74:ab:a2:24:f5:11:73:a6:
                    3a:dd:c3:7a:61:78:9b:08:5b:88:56:00:56:d2:29:
                    d1:2c:12:98:02:e0:c0:f3:66:6a:6e:5b:b8:64:4f:
                    7e:ed:dd:7c:22:8a:1e:3d:ae:55:0d:62:a2:79:61:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CE:E0:E5:7D:69:A2:DE:F9:4F:2E:5E:92:95:4B:BA:83:C1:93:AD
            X509v3 Authority Key Identifier:
                keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:d8:1c:64:99:5e:7e:37:12:f1:94:82:fb:f0:32:98:9b:07:
         63:79:d1:2a:dd:9a:2d:af:7a:c8:02:16:75:97:6a:39:e3:d1:
         36:53:65:23:5b:17:27:80:08:e0:68:f8:c0:52:bb:ce:58:d9:
         51:bc:06:38:0f:0c:a9:a5:74:9b:a3:b1:88:09:7c:af:26:2f:
         84:e8:21:25:8d:88:60:ec:97:64:40:b8:28:65:7f:8b:36:91:
         59:fa:39:95:2a:7d:a9:8f:1b:2b:0d:94:08:0d:c8:78:62:88:
         f7:1e:28:9a:d5:37:c1:17:c7:83:c4:f6:d2:b5:69:c7:55:32:
         de:38:3b:cb:51:29:7b:09:c0:2f:b9:eb:8e:82:3d:c6:3d:cd:
         ec:60:42:96:c2:cf:e4:4d:3d:6b:ce:66:ed:60:88:03:45:52:
         9a:fa:7b:b7:2e:04:e8:fd:a8:41:c2:16:a5:d6:01:06:fb:cb:
         d4:c1:e6:87:fd:93:48:1a:b2:8e:57:2b:56:ed:6d:52:c1:d6:
         5a:87:3e:78:10:1d:20:a8:51:6e:16:02:67:4b:13:3c:a4:e6:
         78:ce:24:d8:4f:4a:9b:a1:c2:42:a3:d1:63:a2:21:fc:b6:28:
         31:17:51:8d:68:22:a1:92:14:a9:30:3e:7e:e6:7c:5c:c3:58:
         dd:1d:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:19:42 2026 by rpki-client