Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File:                     HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier:          4SlV4D2gnRAnHhu/Tw3V+VuwFc1Wxw+30jklEq5/5yE=
Subject key identifier:   D0:1A:15:E5:29:B8:32:5E:87:97:47:4C:10:91:E9:9B:8A:53:60:86
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0EB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number:          0EA9
Signing time:             Wed 20 May 2026 17:43:37 +0000
Manifest this update:     Wed 20 May 2026 17:43:37 +0000
Manifest next update:     Wed 27 May 2026 17:43:37 +0000
Files and hashes:         1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: Cv0en3LjzrRyH5PFwtEF+YlHwaJUx0eGMTiK9PlU7kY=)
                          2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: FPxJw4sExbccVQ2M9hVDSe9NeO0aMI9+xaKlLCWTwe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3767 (0xeb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: May 20 17:43:37 2026 GMT
            Not After : May 27 17:43:37 2026 GMT
        Subject: CN=6a0df2c9-8c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:64:a7:a5:04:ad:a9:57:c6:52:10:7f:68:58:
                    23:85:9a:b5:aa:79:ae:03:4a:75:ee:da:72:b8:3d:
                    64:7e:b3:4f:ab:ea:17:05:59:5e:89:99:f7:4f:3a:
                    4f:bb:85:1b:19:77:b2:8b:7f:e0:c3:62:ad:c8:ca:
                    b0:21:9a:f5:dd:8f:01:62:31:81:c1:d8:e3:2e:c5:
                    b0:6d:d3:4b:1a:d0:45:f5:4b:01:ed:05:39:78:d6:
                    d7:87:53:8f:a1:4d:c0:7a:07:de:00:d9:5b:41:27:
                    f5:98:09:be:ee:d9:b5:1d:aa:de:1f:c2:91:9f:8c:
                    a6:15:a3:16:c8:8d:cd:c9:fd:70:54:e3:28:75:14:
                    27:43:e1:7a:61:3c:24:61:a1:ac:5a:a9:fe:8e:ed:
                    20:b3:9f:3d:14:4f:50:9a:0a:2b:4f:dd:01:be:c0:
                    61:02:7a:ae:95:54:77:fe:e2:ed:29:91:65:ee:7a:
                    bd:9e:a1:ba:df:46:3c:23:1a:75:d6:ee:a3:41:b7:
                    5b:26:13:ae:b9:3f:cc:af:6c:a0:84:10:06:bd:8e:
                    8f:0a:35:ec:11:7a:5f:45:b5:01:cb:31:96:97:59:
                    5e:e7:4b:3e:32:b7:5e:eb:c3:15:d2:59:72:7d:fd:
                    3b:22:a7:40:6b:80:9e:26:51:cf:bf:ad:a4:80:58:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:15:E5:29:B8:32:5E:87:97:47:4C:10:91:E9:9B:8A:53:60:86
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:19:a0:8e:ad:38:28:43:c6:45:f5:8a:9d:98:c5:98:77:85:
         87:b0:ab:b1:30:a0:79:96:2f:9b:63:02:65:e0:b0:a6:0f:90:
         7e:d8:1b:90:7c:73:f1:27:78:c8:3d:f3:d1:75:8d:a4:d3:ad:
         be:d8:1f:f3:63:6b:2e:07:22:5c:f9:78:3a:1d:76:90:87:a4:
         81:45:27:0b:40:6a:7e:51:79:7b:25:7a:8a:82:18:a1:3f:bb:
         e5:a7:3d:00:16:39:dd:70:ae:c5:e9:f1:cf:36:5e:d4:b0:ab:
         89:dd:84:f4:20:65:f5:f3:d0:02:e8:63:1d:e9:c3:0d:f2:48:
         29:b2:23:0b:b1:78:77:1d:f5:58:6e:33:38:3b:e9:cc:58:2b:
         85:51:e8:a3:79:3c:40:1b:c0:a6:8f:a3:92:68:ff:da:d4:29:
         52:40:76:fa:2f:55:72:ba:dc:7d:78:6a:86:5f:87:8e:3b:ee:
         11:60:ed:8a:02:f4:76:39:a2:8f:33:07:a7:af:12:b2:73:45:
         b2:6f:10:a3:55:ab:42:75:f7:4a:18:d9:60:0f:35:2c:54:65:
         cd:f1:01:0d:f7:6f:50:44:ff:92:e8:08:15:66:f9:9b:e8:8e:
         44:86:28:ff:71:4d:54:ef:36:a5:c5:09:b3:aa:57:75:39:5a:
         3e:19:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:24 2026 by rpki-client