Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
File:                     HimymPrXg8InXAD86GVujPdJpIk.mft (raw, json)
Hash identifier:          3h8GEHJ3sWXGtE/gQEcp3MSR7G4/Lt696pTW0PtArM0=
Subject key identifier:   13:BD:4A:D9:CB:50:6C:99:88:BF:C0:72:65:97:AA:DF:D8:85:0C:B6
Authority key identifier: 1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
Certificate issuer:       /CN=A91598F6/serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
Manifest number:          10
Signing time:             Wed 07 Oct 2026 09:45:40 +0000
Manifest this update:     Wed 07 Oct 2026 09:45:40 +0000
Manifest next update:     Wed 14 Oct 2026 09:45:40 +0000
Files and hashes:         1: HimymPrXg8InXAD86GVujPdJpIk.crl (hash: NzcMpNk0CoaqOJO6/3VZehEzuZlZtAke9a2gYGllxB4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
                          rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91598F6, serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
        Validity
            Not Before: Oct  7 09:45:40 2026 GMT
            Not After : Oct 14 09:45:40 2026 GMT
        Subject: CN=6ac614c4-5f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8d:53:ff:8a:7c:22:14:fc:4a:49:94:c7:26:
                    c1:52:9a:63:69:ff:24:41:7a:f9:6f:5d:28:47:e1:
                    19:de:28:ea:e6:73:6c:9e:74:2a:53:84:b6:e4:a9:
                    81:f7:5c:4b:26:46:d9:f6:ac:24:29:e0:ad:9c:79:
                    57:03:3e:89:32:d5:73:d8:70:8f:a0:3c:06:b1:29:
                    80:da:e0:6a:77:7b:36:cf:a0:5d:7b:30:49:ac:78:
                    af:87:3e:d8:9a:83:72:d8:2e:e5:f7:de:00:06:50:
                    89:98:d6:58:c0:52:28:09:df:f3:fe:8c:a1:1e:1c:
                    ab:85:9a:b8:5c:ac:e4:35:37:cf:5c:ad:3b:73:7d:
                    a4:13:28:eb:a0:28:da:60:91:0b:99:67:67:6a:b9:
                    5c:24:ca:4d:a1:bb:68:03:69:d0:45:94:f0:b0:c8:
                    d9:52:7f:b6:6f:82:f3:13:4e:a9:ed:eb:18:3b:a7:
                    f6:e9:f0:b2:38:3a:3d:a8:44:68:d1:a6:32:58:f8:
                    4e:dd:d6:32:ca:7e:53:83:a4:42:97:4e:dc:5c:8c:
                    fc:b9:0e:5b:57:3c:18:00:5a:67:a6:f3:a9:33:c1:
                    38:da:e9:5c:32:d4:08:f1:62:1e:80:3c:6a:09:27:
                    e2:1f:95:84:c9:3b:26:ef:f7:b8:9d:a6:a0:f6:b9:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BD:4A:D9:CB:50:6C:99:88:BF:C0:72:65:97:AA:DF:D8:85:0C:B6
            X509v3 Authority Key Identifier:
                keyid:1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:02:17:67:ed:6a:3c:72:0f:41:c4:b5:6a:49:32:35:92:
         9d:68:de:0c:2d:d0:10:7a:70:25:26:a5:72:21:0e:41:ee:7c:
         16:39:1f:bb:cb:46:ef:a9:f5:78:08:e4:65:b5:ed:6b:f1:67:
         90:9f:ca:73:36:87:84:90:18:43:9b:d1:d6:22:3b:c4:fa:de:
         23:ad:23:51:eb:7f:78:42:64:a4:0c:44:d1:68:0f:95:f5:ed:
         58:90:f6:86:39:17:e9:6c:34:a3:1c:98:21:e1:60:5c:c9:ed:
         6d:42:2a:45:c1:28:96:74:2a:d1:7d:11:5f:fa:56:21:c8:9a:
         b9:57:76:78:fa:4f:1f:f2:50:15:68:66:ce:a3:01:29:4f:ec:
         37:85:37:d5:36:c5:d8:97:e9:f7:27:ab:12:13:ca:5f:c3:fa:
         db:87:20:0a:c9:cf:ac:29:30:33:55:79:c1:48:40:8b:f0:ac:
         76:16:96:53:75:2c:05:15:f9:88:cd:cb:65:19:ec:ae:22:30:
         56:56:a7:65:fb:8c:09:6f:14:2f:e0:ea:9f:b9:5d:86:23:97:
         74:e0:f2:0a:d9:e6:3c:39:6c:48:a8:47:61:24:c3:49:ff:c5:
         9f:00:c6:56:e4:1c:24:87:cf:56:0d:28:00:b2:34:1a:b4:37:
         ac:31:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:59 2026 by rpki-client