Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File:                     hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier:          GBSI5n6K3s8lKhz+etrnqWuxf9fLxk/GSZKkJxGWOAI=
Subject key identifier:   71:CD:E4:A1:36:50:CD:D4:C4:3E:0D:72:7B:42:76:96:16:DA:B3:F2
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer:       /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number:          F5
Signing time:             Tue 03 Mar 2026 05:51:48 +0000
Manifest this update:     Tue 03 Mar 2026 05:51:48 +0000
Manifest next update:     Tue 10 Mar 2026 05:51:48 +0000
Files and hashes:         1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: uPo5qCAh29xTC3Ftt3Tz8PaNYU4dEf6R8z2Y+xrcZ4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
        Validity
            Not Before: Mar  3 05:51:48 2026 GMT
            Not After : Mar 10 05:51:48 2026 GMT
        Subject: CN=69a676f4-c613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:10:59:b3:e5:74:12:3e:b2:71:64:55:de:
                    b1:cf:e3:2e:17:04:cc:6d:39:82:4a:1c:34:37:5e:
                    51:93:3e:3b:82:44:83:02:81:95:69:45:70:9c:c0:
                    e7:36:65:48:22:a5:41:4e:ff:32:40:fa:b8:c0:f7:
                    72:5e:8b:c4:d6:2c:ba:69:af:03:a0:90:85:9e:de:
                    e1:09:b5:3e:ea:a9:c0:92:14:23:20:47:d5:3f:e4:
                    02:33:8e:1b:41:11:13:bf:51:00:cb:c1:d6:3b:e2:
                    86:38:8d:da:ed:15:02:4d:49:6d:b0:81:de:0d:20:
                    57:4b:2d:f1:b0:a3:a2:5f:e6:0f:7e:dd:b3:4a:76:
                    57:30:59:c3:5b:ff:22:1d:d2:03:6c:16:1a:f8:d3:
                    4d:1b:fd:c4:f0:23:b3:2e:57:89:e7:ef:72:ec:41:
                    49:b2:56:6f:4c:65:cc:22:9d:cc:4f:30:a3:63:8a:
                    41:ac:63:73:95:1c:d8:f6:60:20:ed:94:a6:16:25:
                    c7:cd:14:1b:c0:2b:d2:90:3d:18:79:32:07:5e:d0:
                    a5:d4:0f:74:18:fc:09:c2:a7:e4:68:b5:1c:25:1d:
                    86:7c:6d:2b:34:7b:db:80:4d:47:88:5e:ca:09:74:
                    4d:91:63:a2:c8:81:5e:32:cb:20:85:1d:81:3e:68:
                    ba:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CD:E4:A1:36:50:CD:D4:C4:3E:0D:72:7B:42:76:96:16:DA:B3:F2
            X509v3 Authority Key Identifier:
                keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:f0:e9:4a:4e:97:26:aa:b0:db:ab:de:4c:ea:35:c3:9f:
         cc:d1:71:3f:92:24:f1:a3:35:c8:26:fd:9e:84:de:95:ce:05:
         1c:1b:cd:59:98:38:d8:88:de:ad:61:02:bd:28:2d:4f:e1:ce:
         13:16:81:6e:06:12:a6:6a:e8:43:7e:d9:16:4e:11:95:43:25:
         ac:8c:f7:ff:e1:1a:46:7f:e5:64:9e:aa:ef:fa:ee:33:14:cd:
         d9:e8:26:47:91:16:70:03:fb:31:ba:ea:d1:cd:2d:fc:9e:25:
         4e:49:32:75:3a:85:8b:1a:ca:a6:6d:d6:d8:35:f5:df:56:a5:
         a4:d0:bf:e9:ab:4a:f0:ec:d4:2f:c4:a0:eb:fe:8e:4e:f7:d4:
         02:dd:b6:6e:53:7e:a1:3a:78:fb:f8:3c:dc:ad:7c:ed:d0:13:
         27:16:66:31:4a:e1:ac:10:01:6d:7a:d2:b5:bd:64:e7:be:1e:
         99:e2:26:d0:9e:40:d2:c2:86:fd:5b:fc:f3:c0:56:eb:19:c6:
         46:65:23:33:53:6e:be:4b:23:5e:4b:a9:36:0d:65:fe:24:5c:
         a5:81:91:d8:ee:7b:30:d6:30:d5:ea:ed:45:2d:12:9e:96:2b:
         ff:17:f0:fa:50:e4:bc:ca:5f:d9:8b:7f:a8:37:52:75:b8:f0:
         1e:4d:cb:0b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBM0YxMTAvBgNVBAUTKDg2QTY0RjJBRDJEREUyQjdEOTYyNEU2OTIyN0FEMDlC
MTc3OEM2QzEwHhcNMjYwMzAzMDU1MTQ4WhcNMjYwMzEwMDU1MTQ4WjAYMRYwFAYD
VQQDEw02OWE2NzZmNC1jNjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyOIQWbPldBI+snFkVd6xz+MuFwTMbTmCShw0N15Rkz47gkSDAoGVaUVwnMDn
NmVIIqVBTv8yQPq4wPdyXovE1iy6aa8DoJCFnt7hCbU+6qnAkhQjIEfVP+QCM44b
QRETv1EAy8HWO+KGOI3a7RUCTUltsIHeDSBXSy3xsKOiX+YPft2zSnZXMFnDW/8i
HdIDbBYa+NNNG/3E8COzLleJ5+9y7EFJslZvTGXMIp3MTzCjY4pBrGNzlRzY9mAg
7ZSmFiXHzRQbwCvSkD0YeTIHXtCl1A90GPwJwqfkaLUcJR2GfG0rNHvbgE1HiF7K
CXRNkWOiyIFeMssghR2BPmi6iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHN5KE2
UM3UxD4NcntCdpYW2rPyMB8GA1UdIwQYMBaAFIamTyrS3eK32WJOaSJ60JsXeMbB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi85QjI3NTRGNkEy
NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRyZlpZazVwSW5yUW14ZDR4
c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2hxWlBLdExkNHJmWllrNXBJbnJRbXhkNHhzRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUEzRi85QjI3NTRGNkEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi9ocVpQS3RMZDRy
ZlpZazVwSW5yUW14ZDR4c0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU43w6UpOlyaqsNur3kzqNcOfzNFxP5Ik8aM1yCb9noTelc4FHBvNWZg42Ije
rWECvSgtT+HOExaBbgYSpmroQ37ZFk4RlUMlrIz3/+EaRn/lZJ6q7/ruMxTN2egm
R5EWcAP7Mbrq0c0t/J4lTkkydTqFixrKpm3W2DX131alpNC/6atK8OzUL8Sg6/6O
TvfUAt22blN+oTp4+/g83K187dATJxZmMUrhrBABbXrStb1k574emeIm0J5A0sKG
/Vv888BW6xnGRmUjM1NuvksjXkupNg1l/iRcpYGR2O57MNYw1ertRS0SnpYr/xfw
+lDkvMpf2Yt/qDdSdbjwHk3LCw==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:55 2026 by rpki-client