Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
File:                     HmeMaiF9cVsw2csi1fiE0XxWmbY.mft (raw, json)
Hash identifier:          zHt3ENRXoB+utnjP6khrpN/fXeYIH859yqWUYTUW1Lg=
Subject key identifier:   C5:1F:64:3B:98:50:BB:2A:B4:ED:2D:41:A3:19:02:CB:E8:F9:83:36
Authority key identifier: 1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6
Certificate issuer:       /CN=A9133953/serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
Certificate serial:       1995
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
Manifest number:          1969
Signing time:             Tue 06 Oct 2026 16:26:42 +0000
Manifest this update:     Tue 06 Oct 2026 16:26:42 +0000
Manifest next update:     Tue 13 Oct 2026 16:26:42 +0000
Files and hashes:         1: HmeMaiF9cVsw2csi1fiE0XxWmbY.crl (hash: Bp0zcqpD16/RFIaQAriDH3Cr6dBxkjh6VIHF4XMVuKU=)
                          2: A55682E0821A11EE9104BB68C4F9AE02.roa (hash: uds8VZP/Cnzq4ik9TsZtEgZFHT8utwL0NugztHyo5wA=)
                          3: 3DC507001C8F11E9990F665CC4F9AE02.roa (hash: KNHL/L5tyBmlAfdw55D3rrTekY6agqcXrKB3/U0Q+x8=)
                          4: D34372461C8D11E9B21BD858C4F9AE02.roa (hash: 0aZHDcufdZQ7dDzrjinBuGWb3k3ed9FsQLE77AphBaA=)
                          5: A2BE54D2228B11F09A2FAA12C4F9AE02.roa (hash: 3eZlHcsbneHOE1MVSFtkIXyL5kgfcrV5bb38+q+WXH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl
                          rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6549 (0x1995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133953, serialNumber=1E678C6A217D715B30D9CB22D5F884D17C5699B6
        Validity
            Not Before: Oct  6 16:26:42 2026 GMT
            Not After : Oct 13 16:26:42 2026 GMT
        Subject: CN=6ac52142-a1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:91:7d:a3:21:e0:0b:cd:07:77:c4:78:9a:b8:
                    79:63:b6:e6:cb:20:09:83:aa:7c:f5:c6:6d:87:2d:
                    fa:8f:1c:ec:a0:c9:8d:5a:03:5a:4e:2f:55:3e:7d:
                    bb:8d:a0:f3:be:83:d0:f0:ab:61:72:ba:23:a5:e1:
                    1b:66:52:92:52:01:98:05:f2:12:b2:8e:e1:ed:d6:
                    71:ca:ad:93:91:cf:97:56:5e:7e:19:76:01:8f:0c:
                    d9:b4:3c:61:0a:88:9c:73:12:59:19:a1:2d:04:cf:
                    52:4f:6c:29:8e:ae:29:0b:5d:95:17:5d:80:6f:c7:
                    d0:25:12:2a:39:01:96:fc:be:2d:38:7e:e2:49:d3:
                    aa:a0:5c:4f:00:a7:d2:6b:fb:f2:55:2c:ce:60:54:
                    b3:d9:c4:90:c5:44:92:18:a4:2e:69:2b:f6:e2:12:
                    65:a9:88:58:7d:6e:cc:81:20:cf:9e:e5:b7:13:8a:
                    28:fd:b0:74:24:a1:4d:25:4a:76:5c:20:20:c2:c6:
                    59:57:6e:25:9a:ec:24:05:7d:7e:0f:c7:01:83:4d:
                    fb:f6:13:37:9e:48:01:38:ff:99:fb:c0:e2:99:e6:
                    a4:47:69:55:b8:76:9f:d1:3b:c4:88:62:88:46:f5:
                    42:77:ef:47:1c:22:38:ee:34:b6:ae:c0:51:aa:f3:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:1F:64:3B:98:50:BB:2A:B4:ED:2D:41:A3:19:02:CB:E8:F9:83:36
            X509v3 Authority Key Identifier:
                keyid:1E:67:8C:6A:21:7D:71:5B:30:D9:CB:22:D5:F8:84:D1:7C:56:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmeMaiF9cVsw2csi1fiE0XxWmbY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133953/122D8D28A49611E7A926ED4DC4F9AE02/HmeMaiF9cVsw2csi1fiE0XxWmbY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:bf:10:57:89:e1:b7:a1:75:a5:79:09:03:c0:e7:93:ae:e7:
         cb:e7:c8:9f:21:9a:b1:81:87:3b:d9:58:2f:22:9d:61:73:73:
         10:1e:20:74:84:1c:44:92:c1:1e:a9:ff:5b:e9:88:68:5a:54:
         d8:3e:c9:90:fc:51:78:96:4a:8f:f7:a6:9f:95:45:af:f3:b4:
         ef:ca:c2:e6:36:cd:35:40:0f:cc:99:25:4e:fc:f9:2f:d3:57:
         63:35:54:13:f2:ce:26:0a:8e:49:ba:5d:88:15:1b:72:0d:b0:
         fb:2f:c8:c1:96:48:07:79:87:8c:4e:4b:81:52:94:af:98:73:
         59:89:2d:00:7b:af:b6:f3:94:b5:fa:9e:b0:32:4a:7b:84:fd:
         7f:8d:38:66:63:f2:43:9c:9b:9f:7d:51:87:f1:c6:7c:2f:e5:
         e8:08:4c:c5:40:b7:2d:65:50:4b:44:eb:bb:48:e3:07:18:37:
         03:91:10:06:6c:08:0a:0a:f0:4c:d3:c7:74:27:18:7c:c4:61:
         f1:65:c5:0a:c0:e3:4b:f4:2e:0f:0a:f7:03:0d:79:c1:2c:e7:
         05:e9:d7:f6:73:44:05:9f:12:1c:d9:66:7c:a6:19:5b:89:4a:
         fe:28:2e:6c:05:e1:dd:a9:9b:a8:7e:08:d4:e8:8b:78:04:e0:
         c6:08:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:23:04 2026 by rpki-client