Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
File:                     HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json)
Hash identifier:          wimdcPH6lCh0D16rQavVK2FEaV6XRicWsGXmMIPYVuI=
Subject key identifier:   2A:7A:CD:FC:6A:27:2D:47:76:51:04:09:93:B9:EE:1E:77:B7:A6:AE
Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71
Certificate issuer:       /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
Certificate serial:       19F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
Manifest number:          19DA
Signing time:             Sat 04 Apr 2026 16:16:49 +0000
Manifest this update:     Sat 04 Apr 2026 16:16:49 +0000
Manifest next update:     Sat 11 Apr 2026 16:16:49 +0000
Files and hashes:         1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: +yyMxlsL5vdYSsRBt5d7kC6jCrcYJ5EbW+vvlQwlQPA=)
                          2: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: YbJqZlDc5DhntXvk0RSJHoPR1oURQ03ROlcVicrPr9A=)
                          3: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: ViCm8rntM/kipc96OmVyQSWm5otXWholJHBWK9um5D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl
                          rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6642 (0x19f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71
        Validity
            Not Before: Apr  4 16:16:49 2026 GMT
            Not After : Apr 11 16:16:49 2026 GMT
        Subject: CN=69d13971-6686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:dd:0b:2e:bb:a9:95:ad:bb:0b:66:11:06:
                    9c:02:8f:af:eb:53:9a:42:7a:2b:fc:5e:0e:3a:00:
                    4f:d9:58:3c:f5:70:d6:92:a3:b4:d5:87:48:cf:9e:
                    a3:2c:f4:e8:d5:c3:ac:e1:bc:e7:db:8b:7e:67:c6:
                    ef:06:67:fd:f3:f7:c2:87:67:df:41:a9:c6:87:64:
                    4d:aa:38:8e:ec:71:43:6f:17:db:08:b6:2d:cb:76:
                    aa:81:1f:80:31:fe:56:ca:cc:fc:09:8b:ec:e7:1b:
                    c1:2d:ab:1d:30:47:2b:fc:72:ae:ea:38:a5:fd:0a:
                    21:10:65:2a:f5:69:75:a8:ba:a4:e3:fe:fe:ef:f2:
                    89:b0:17:b1:bf:a0:b7:e3:f5:3c:56:9a:06:a0:95:
                    b0:45:92:93:0d:50:bc:76:9a:ed:59:9a:69:f8:d3:
                    4b:e5:37:ac:2a:39:1f:e0:34:0b:65:60:c4:d4:75:
                    59:a4:4d:e4:32:48:29:b9:c7:64:1c:d4:70:7c:3d:
                    53:06:bf:fb:81:1b:41:b4:9e:e9:0b:a6:6b:d8:15:
                    c1:65:49:0f:f2:ee:74:19:d9:f3:4f:30:ef:94:17:
                    73:33:c8:ae:2b:ae:8f:4a:05:78:98:44:a3:b4:22:
                    59:9e:59:7a:f6:dc:3f:85:06:c8:d6:38:54:be:70:
                    0e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7A:CD:FC:6A:27:2D:47:76:51:04:09:93:B9:EE:1E:77:B7:A6:AE
            X509v3 Authority Key Identifier:
                keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:11:7b:8e:3c:a7:91:7f:2e:c3:27:bf:24:1f:ff:47:33:
         72:82:18:bd:55:e4:01:01:15:e1:b8:e4:2f:5c:53:8c:7f:18:
         5a:50:34:bd:71:9a:96:e3:a8:bd:fc:9c:66:e5:c2:64:fa:a4:
         1e:a6:d5:4d:a3:3d:5c:ed:ee:9b:08:f6:ca:21:00:b4:b7:59:
         e5:dd:9a:89:f6:e0:f3:8c:cf:12:0f:f4:c6:02:43:f8:54:db:
         ef:69:7c:ce:37:85:d8:37:21:35:9d:49:bf:69:1b:d6:8d:29:
         f8:9c:18:4e:c7:e6:c6:d8:25:c2:b2:f8:a5:d4:3e:02:e9:dd:
         61:69:dc:bc:01:61:0b:eb:7d:74:ac:c5:c2:b9:d7:2e:8e:00:
         11:ac:a7:4f:1d:29:eb:09:30:2b:98:f2:81:10:9a:9a:96:f0:
         07:cb:12:bb:17:82:de:3a:db:67:2a:c0:08:16:94:6b:9e:d5:
         90:e1:7c:8d:60:bd:ba:5e:48:0f:2b:87:81:53:70:27:87:ea:
         33:22:f3:fe:df:2f:12:67:8f:f1:26:56:ec:65:97:11:ae:97:
         3e:18:50:59:48:2a:b5:e6:02:ec:95:ff:a3:82:03:df:c4:60:
         e7:d3:bb:7d:6a:f5:51:ce:2a:f6:79:76:bd:8e:e2:19:5f:e7:
         1f:61:66:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:56 2026 by rpki-client