Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File:                     HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier:          UPb1DhO58DOh01Pz9GNHR+/9t60j1czjYR+gJlfyAM8=
Subject key identifier:   ED:75:08:93:26:5F:9F:83:4A:F8:42:69:27:5D:06:67:04:B5:3F:C1
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer:       /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial:       1ED7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number:          1EC5
Signing time:             Fri 02 Oct 2026 16:09:50 +0000
Manifest this update:     Fri 02 Oct 2026 16:09:49 +0000
Manifest next update:     Fri 09 Oct 2026 16:09:49 +0000
Files and hashes:         1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: c4k4MiHS4+DoJxJusi7RyrRtRYoSbVSQgTAEf8NU0qk=)
                          2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: w+6KOPKF7OqR8NogCX5qW17+ARn7zv6tlxxb0zjTuqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
                          rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 16:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7895 (0x1ed7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
        Validity
            Not Before: Oct  2 16:09:49 2026 GMT
            Not After : Oct  9 16:09:49 2026 GMT
        Subject: CN=6abfd74e-e44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0d:66:73:e4:16:a1:06:71:10:7f:8e:a2:c3:
                    91:03:63:9e:fa:fe:57:48:7f:94:c0:fc:ed:04:81:
                    c0:c1:f8:bd:60:ed:84:a1:b4:ac:ee:81:8e:1e:4a:
                    a0:4d:c0:c4:49:ab:ab:77:d5:f3:eb:f4:a5:f8:b2:
                    7e:50:8a:71:6f:02:20:ad:41:c6:91:eb:4b:b1:1e:
                    83:29:ed:48:2f:2b:a5:f7:b0:83:43:65:23:14:4b:
                    ef:ee:8d:2b:ce:16:d5:31:ba:01:f7:0e:8f:10:3e:
                    24:98:bc:8c:3e:38:ac:13:a6:94:b5:79:dc:ed:ef:
                    ea:be:7d:6d:a9:5a:8b:3d:f4:f4:1c:4e:50:5d:b2:
                    8a:d1:17:7b:50:6a:3d:ce:1d:08:e7:6f:cd:66:62:
                    95:27:c8:21:ab:b2:96:cc:fa:5d:40:a1:c8:4b:17:
                    89:c1:18:73:32:e2:f1:ca:c5:2b:d7:67:b8:ea:8d:
                    e2:1e:4b:9e:40:5b:ab:a8:c5:63:db:19:68:5e:db:
                    7d:36:cb:75:e6:fd:aa:9d:42:02:14:72:dd:59:b2:
                    4c:7b:ab:b4:b4:af:84:f4:e2:5a:22:44:4b:46:26:
                    e2:3d:4e:4e:13:6b:4f:5b:5f:b8:62:3c:3b:0b:0d:
                    bf:54:47:91:de:ee:79:6b:8f:0e:9c:a3:84:3b:12:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:75:08:93:26:5F:9F:83:4A:F8:42:69:27:5D:06:67:04:B5:3F:C1
            X509v3 Authority Key Identifier:
                keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6e:80:2b:d0:65:7a:b9:02:e0:59:49:5e:40:97:46:44:95:
         17:46:fc:b5:5f:8d:aa:a0:87:af:34:af:9c:7c:7f:76:42:70:
         63:7d:ff:3f:f2:72:02:08:13:9f:6a:28:3e:fc:1c:17:03:a2:
         cc:01:e6:f6:2f:e4:17:93:30:fb:c4:1d:19:fe:56:3b:97:5f:
         10:d7:cb:6b:f0:69:d1:74:be:04:f1:a3:52:11:b0:ce:60:8d:
         1e:ee:9a:12:0a:2f:bf:0e:70:b2:5f:23:46:56:30:ef:fa:36:
         a0:70:5b:61:c9:5f:30:6f:dd:62:7f:2f:52:be:10:07:0d:34:
         54:21:87:a4:31:53:a1:14:31:4f:74:f0:12:e2:57:8b:83:d3:
         46:c7:71:83:5f:e8:0c:36:f0:1f:d3:2f:bb:b7:89:22:84:1d:
         30:91:f5:05:04:9e:82:85:5b:20:91:b8:c7:0d:d1:c1:77:8b:
         50:2b:40:a8:59:ca:0a:62:8c:44:3f:50:d9:4d:5a:ed:2c:8c:
         87:17:c2:68:8f:8c:c0:77:96:9d:b3:bd:54:9a:fa:67:b8:a5:
         60:a1:f1:44:56:73:08:38:3b:97:d9:a2:81:2d:ab:31:7d:ef:
         84:e3:ac:0a:8d:8f:39:b2:df:fb:37:dd:cf:15:b2:bd:fe:35:
         38:1f:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:28 2026 by rpki-client