Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          fyTDa52KeHnBJfKWcqboScUrtUiqKBYf+DrFEDp0IfQ=
Subject key identifier:   D8:F4:28:58:F4:A3:E7:76:08:12:9B:DD:29:2C:B0:14:9E:0C:5C:AE
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          01B6
Signing time:             Mon 05 Oct 2026 04:39:32 +0000
Manifest this update:     Mon 05 Oct 2026 04:39:31 +0000
Manifest next update:     Mon 12 Oct 2026 04:39:31 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: c2SMj17pV883jG2uIGCm1Dr8ZQBAc8RflxK34WCvEro=)
                          2: voqlZ0tCIdMJjYS75BQF9f7yz5A.asa (hash: 8ZdqhgKkHUtits1R9vUwqzwv/XCWGUyAuC/vBQkTotg=)
                          3: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: 1Yn/q//XKIoyU7nYOwYtLT8tKiEy2Qn2d2N7RVj95ek=)
                          4: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: SAEXcobn5WfR++eemr4q7u6jryaGVSo+R/HbEDcAQGY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 04:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: Oct  5 04:39:31 2026 GMT
            Not After : Oct 12 04:39:31 2026 GMT
        Subject: CN=6ac32a03-9c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dd:4d:ca:30:63:16:7f:f3:1d:d5:57:13:b7:
                    03:b4:9c:79:a0:74:5c:9b:36:dd:a2:ac:49:2f:f4:
                    de:c6:76:3b:59:2a:14:cf:cb:17:92:9b:45:72:32:
                    f7:82:f8:a7:84:c3:da:a3:7f:f6:c7:ac:15:8c:ea:
                    19:1d:1f:50:68:96:5f:bb:93:c2:48:7b:1e:22:f9:
                    37:99:fe:9d:0c:da:88:6b:7c:7b:4d:fe:96:dc:2d:
                    f1:8e:3b:4e:15:c0:d2:ae:84:9c:c4:f1:b2:a1:a6:
                    35:d8:b7:f1:1c:34:5e:ff:35:41:b6:a5:28:c4:49:
                    e3:e0:08:d8:57:78:bf:87:11:a9:87:c5:d3:f1:4c:
                    9d:34:fb:c3:f5:53:a1:46:18:62:7b:26:2c:87:df:
                    2c:e6:27:e4:03:34:7e:59:30:30:d6:38:61:d3:c9:
                    34:e7:84:2a:25:9d:5b:2b:19:16:a0:fb:52:30:ca:
                    4c:0d:74:60:60:ae:5a:cd:65:25:83:11:07:27:72:
                    08:f4:d4:4f:f1:8a:75:2b:06:9a:04:57:1e:2d:3d:
                    85:7a:3a:ec:0e:22:ab:6f:65:24:30:f6:c3:7a:a7:
                    7c:0d:72:af:80:31:aa:5a:f0:6b:a9:eb:06:94:c1:
                    be:0e:81:9d:15:a1:51:11:2a:31:39:d6:59:54:9f:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:28:58:F4:A3:E7:76:08:12:9B:DD:29:2C:B0:14:9E:0C:5C:AE
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2c:69:57:a5:ba:82:fc:c1:92:91:f3:48:45:71:47:7a:7a:
         06:41:01:ec:8f:f5:94:b7:c9:7a:34:4a:19:40:4e:4b:d1:ca:
         1c:4d:21:cc:8e:75:07:f0:4f:0b:1c:2e:85:df:80:5a:6f:1e:
         85:e4:d6:b3:95:28:7e:9e:5e:e8:39:14:47:5d:6e:f3:cc:8d:
         4d:5c:b1:96:eb:a0:fe:4d:4c:27:1b:27:e9:0c:5b:d0:bb:39:
         fb:66:df:fa:d5:69:47:ce:94:56:28:20:f4:38:fc:83:02:1a:
         db:e2:66:a8:a8:30:49:ec:8e:4a:f6:73:80:d4:42:8b:3f:0f:
         84:dc:7f:12:19:c3:af:92:bb:07:67:77:97:3b:ab:20:e2:7a:
         29:8d:e1:45:4d:d0:dc:eb:3b:a6:b5:8a:3b:f4:24:99:cc:dd:
         49:0e:54:41:3a:94:7f:bf:fa:76:d8:db:63:20:22:66:3b:d6:
         12:10:4d:32:d8:fa:3d:df:3e:b5:08:ee:1b:29:97:7e:01:a6:
         39:68:b8:89:39:a0:35:5f:ae:63:e3:26:53:3c:99:c5:d3:7d:
         25:cf:bf:40:25:e7:ec:fd:4a:06:72:98:9e:65:9d:5b:35:03:
         96:fc:74:cb:f9:6d:5d:6d:ea:60:79:4e:a0:3b:af:7e:74:a1:
         33:60:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:40:30 2026 by rpki-client