Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File:                     HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier:          f8eCrG98J9lqdzWqetM9/Qp3jVBr60nVcuz+SG2Eg0A=
Subject key identifier:   9A:12:C0:F6:F3:9A:DF:41:C5:13:BD:01:45:8F:77:58:F9:95:98:32
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer:       /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial:       1797
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number:          1789
Signing time:             Thu 08 Oct 2026 16:38:41 +0000
Manifest this update:     Thu 08 Oct 2026 16:38:40 +0000
Manifest next update:     Thu 15 Oct 2026 16:38:40 +0000
Files and hashes:         1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: 5szLw6o5Wz6V0rfM35HiJglMwLwK6InZVkQveCxNmxA=)
                          2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: +mlsrBxdIyOlCH9NElXmLFuWulBGulTkwg1yRe34F2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
                          rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6039 (0x1797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
        Validity
            Not Before: Oct  8 16:38:40 2026 GMT
            Not After : Oct 15 16:38:40 2026 GMT
        Subject: CN=6ac7c711-9b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9b:57:ea:5c:af:6d:af:e7:a0:00:2c:8f:51:
                    05:eb:d9:ef:15:48:21:20:f4:b0:57:5f:79:64:a5:
                    5c:7d:8f:4c:34:39:63:28:a3:54:04:b6:92:54:21:
                    58:40:78:10:2f:e5:c7:e1:13:a5:00:d5:87:4c:6e:
                    b7:3e:de:21:a1:20:db:74:d0:d3:c2:a9:da:42:a1:
                    89:86:d2:2d:b2:fb:0d:0f:4e:99:ef:c7:88:9c:5a:
                    7c:cd:90:b1:62:42:f1:f4:d5:59:75:13:ac:ce:af:
                    01:9d:9c:f6:bf:00:d7:b3:15:6d:95:96:3c:84:b5:
                    c3:37:9d:fd:29:08:58:a8:0b:9e:af:c3:d7:f2:f3:
                    06:67:2d:a3:17:25:1f:07:27:ad:ea:a5:ca:50:f8:
                    34:df:c4:2e:49:13:32:69:51:5a:18:9a:23:ee:f8:
                    b7:0a:11:96:2f:1e:9c:27:43:9b:1d:06:d5:7d:20:
                    1a:91:a4:aa:fa:25:33:3e:a6:97:5a:d0:b2:2c:5f:
                    dc:a1:72:8a:29:62:8c:6d:17:bb:6b:dd:ec:1e:f6:
                    4b:22:37:32:62:26:59:87:c1:22:1c:68:09:42:76:
                    d9:ee:88:5a:a2:ea:41:61:d1:c6:d0:81:9d:97:e2:
                    61:60:f0:79:8f:b4:95:0a:b1:b8:22:82:9a:4b:5d:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:C0:F6:F3:9A:DF:41:C5:13:BD:01:45:8F:77:58:F9:95:98:32
            X509v3 Authority Key Identifier:
                keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:60:21:17:50:e2:2f:08:0d:42:60:df:a0:e3:b5:35:d4:a4:
         9f:34:44:e0:1f:be:25:c8:da:38:cf:36:5f:e4:42:4c:43:c2:
         cb:fb:58:dd:13:2b:18:f1:1c:f6:27:f9:50:7f:50:70:24:bc:
         3e:35:2b:33:87:f6:c9:0b:0f:03:43:4e:0e:32:60:6b:21:35:
         e4:f1:7d:f7:f4:25:2d:11:41:fd:c8:08:d5:c5:4a:ff:67:99:
         49:c7:a4:a6:bb:8b:b1:65:9f:2c:e4:47:07:e1:52:2b:30:ae:
         5e:45:43:09:d9:32:ca:b0:f8:a3:f5:e9:bf:2f:d7:45:cd:16:
         3b:31:7c:58:08:eb:d4:5b:1d:c0:7c:5f:25:a7:16:9e:0f:96:
         6a:44:e8:4a:f3:b7:15:61:e8:48:c2:ba:d1:53:a6:d5:da:51:
         fe:52:fa:a0:3f:18:93:85:b4:d4:e4:f6:43:65:aa:99:c3:16:
         0e:6f:4e:09:04:19:1c:74:9e:e8:e9:ee:05:d3:cf:4d:9a:63:
         f4:07:7a:f7:c8:b4:65:80:16:df:7b:36:fe:4c:01:89:1f:79:
         a0:c5:3c:3f:bc:14:55:a6:ad:9d:00:5d:56:e4:f2:99:e4:1a:
         e9:8a:d1:38:f7:fd:a2:14:7e:4d:eb:ea:10:03:0c:c2:ef:f8:
         85:68:be:06
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB
MTUzMzMxRTkwHhcNMjYxMDA4MTYzODQwWhcNMjYxMDE1MTYzODQwWjAYMRYwFAYD
VQQDEw02YWM3YzcxMS05YjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4JtX6lyvba/noAAsj1EF69nvFUghIPSwV195ZKVcfY9MNDljKKNUBLaSVCFY
QHgQL+XH4ROlANWHTG63Pt4hoSDbdNDTwqnaQqGJhtItsvsND06Z78eInFp8zZCx
YkLx9NVZdROszq8BnZz2vwDXsxVtlZY8hLXDN539KQhYqAuer8PX8vMGZy2jFyUf
Byet6qXKUPg038QuSRMyaVFaGJoj7vi3ChGWLx6cJ0ObHQbVfSAakaSq+iUzPqaX
WtCyLF/coXKKKWKMbRe7a93sHvZLIjcyYiZZh8EiHGgJQnbZ7ohaoupBYdHG0IGd
l+JhYPB5j7SVCrG4IoKaS12o4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoSwPbz
mt9BxRO9AUWPd1j5lZgyMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx
OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ
ekVXNEVTOHBIaEtoVXpNZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwmAhF1DiLwgNQmDfoOO1NdSknzRE4B++JcjaOM82X+RCTEPCy/tY3RMrGPEc
9if5UH9QcCS8PjUrM4f2yQsPA0NODjJgayE15PF99/QlLRFB/cgI1cVK/2eZScek
pruLsWWfLORHB+FSKzCuXkVDCdkyyrD4o/Xpvy/XRc0WOzF8WAjr1FsdwHxfJacW
ng+WakToSvO3FWHoSMK60VOm1dpR/lL6oD8Yk4W01OT2Q2WqmcMWDm9OCQQZHHSe
6OnuBdPPTZpj9Ad698i0ZYAW33s2/kwBiR95oMU8P7wUVaatnQBdVuTymeQa6YrR
OPf9ohR+TevqEAMMwu/4hWi+Bg==
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:45:22 2026 by rpki-client