Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
File:                     hHBzG4maje6yn-pRuQ3BWNvaKvA.mft (raw, json)
Hash identifier:          o/UMAMn6hVJsSyefA8BVUP6vujyaKhupz6JyZ6LLADg=
Subject key identifier:   0F:C1:73:B3:EB:68:C0:FA:18:DC:55:A9:CD:35:79:E2:F0:D9:E0:FD
Authority key identifier: 84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0
Certificate issuer:       /CN=A914AF32/serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
Certificate serial:       148F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
Manifest number:          1478
Signing time:             Tue 06 Oct 2026 16:55:10 +0000
Manifest this update:     Tue 06 Oct 2026 16:55:10 +0000
Manifest next update:     Tue 13 Oct 2026 16:55:10 +0000
Files and hashes:         1: hHBzG4maje6yn-pRuQ3BWNvaKvA.crl (hash: mnE0unuvPzSSwaGFR/jZGhWuETqofpRXP0k1kWVjpUI=)
                          2: 813A255423A611F09025FC11C4F9AE02.roa (hash: RaOIdSyJbLBmHHTBAcqvM2xNuH84JM4tWrC9RYmAhrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl
                          rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 16:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5263 (0x148f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AF32, serialNumber=8470731B899A8DEEB29FEA51B90DC158DBDA2AF0
        Validity
            Not Before: Oct  6 16:55:10 2026 GMT
            Not After : Oct 13 16:55:10 2026 GMT
        Subject: CN=6ac527ee-79a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0a:64:db:fb:fc:0e:52:0d:e5:11:27:90:9e:
                    1c:31:b4:26:dc:28:c1:e9:4f:b6:f1:e6:83:be:ef:
                    00:0c:04:d1:eb:b3:6b:a8:a6:a8:fa:5c:29:62:82:
                    c0:33:48:b9:c8:b1:29:f2:18:d6:2e:57:1c:70:3c:
                    09:f8:fb:30:0a:ea:8b:93:6b:40:3b:a0:bf:87:2f:
                    fe:83:a0:a6:19:59:8a:6f:c4:c0:c8:7e:0f:1f:26:
                    fc:35:4f:e8:9d:5b:43:07:a0:6c:80:8b:df:18:fa:
                    72:d8:59:69:20:78:3c:e0:fe:b4:f1:5b:af:b9:48:
                    4d:11:6a:7c:64:dc:7d:94:10:b7:7e:88:a7:29:cd:
                    26:83:6b:cb:42:f8:df:9d:d1:31:32:8c:a8:98:36:
                    43:53:a5:f5:31:d9:f0:c1:4c:04:3c:21:f2:41:9e:
                    6e:e5:e2:b4:79:05:cd:c3:41:50:52:ad:ad:47:75:
                    db:ad:2d:e1:18:83:73:74:d8:1e:f9:8e:1a:ac:17:
                    a9:a1:c3:b9:31:69:50:c1:ec:ca:b6:22:c6:87:bb:
                    3d:27:15:97:17:11:aa:cc:c3:27:8a:c7:30:2e:fa:
                    3e:b8:67:4f:31:b0:ac:a1:4d:f8:7c:56:fd:ba:5a:
                    a1:d7:3f:6d:00:d0:fd:74:07:14:51:dd:74:8e:9c:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:73:B3:EB:68:C0:FA:18:DC:55:A9:CD:35:79:E2:F0:D9:E0:FD
            X509v3 Authority Key Identifier:
                keyid:84:70:73:1B:89:9A:8D:EE:B2:9F:EA:51:B9:0D:C1:58:DB:DA:2A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHBzG4maje6yn-pRuQ3BWNvaKvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AF32/9DEC07409E5011E89803D826C4F9AE02/hHBzG4maje6yn-pRuQ3BWNvaKvA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:73:b1:7c:03:dc:5d:73:2c:9c:8f:08:75:e9:e9:ae:a5:5e:
         be:d4:e1:06:45:1c:d4:34:81:63:33:e8:d8:2e:72:11:4d:69:
         0e:57:02:cf:26:ff:3f:40:32:12:a8:e8:13:22:3c:e8:f8:52:
         c5:1d:dc:e8:08:50:b4:24:07:82:54:0f:59:b3:04:9f:69:58:
         fa:60:3e:84:52:e0:6d:ad:7f:ce:16:81:2d:2c:ff:1e:8b:6b:
         d6:75:39:e6:07:26:84:7a:37:7f:0a:d3:54:33:59:09:72:4f:
         21:46:5f:a9:25:17:27:a2:a7:de:75:55:15:d8:e0:2b:4d:dc:
         0b:c9:59:6f:35:b8:5f:94:7c:ee:b0:91:5e:9e:16:8e:94:01:
         ea:7e:75:0b:b6:f9:7b:7f:22:aa:a4:60:52:61:09:4e:be:9a:
         b8:9a:bf:1e:15:a1:c1:a0:06:60:60:cb:0f:88:eb:38:34:e6:
         65:de:5e:93:8b:ec:9c:10:94:8c:b6:71:6f:98:d2:70:cf:cb:
         eb:c1:d3:da:d0:34:7f:59:2f:de:75:29:3f:00:02:97:1c:4d:
         a2:a0:6a:8d:52:b7:19:9b:31:9b:05:8c:d3:4e:14:d6:cf:b0:
         71:76:7a:96:b0:f0:65:ad:e5:9f:f1:eb:5c:cc:a0:4d:cd:90:
         6b:43:f7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:58:52 2026 by rpki-client