Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
File:                     hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft (raw, json)
Hash identifier:          mUO1tUFqNS8d6w0JpipNTkHO/j8bmje4GXmBZN6py1U=
Subject key identifier:   DD:7B:A3:55:73:BB:A6:A3:D8:D1:85:45:AB:B3:77:CB:76:CB:40:B6
Authority key identifier: 86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3
Certificate issuer:       /CN=A91973D2/serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
Manifest number:          06CB
Signing time:             Thu 08 Oct 2026 22:30:53 +0000
Manifest this update:     Thu 08 Oct 2026 22:30:53 +0000
Manifest next update:     Thu 15 Oct 2026 22:30:53 +0000
Files and hashes:         1: hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl (hash: 0FU6C8qmNzgDBTi6jP5DvFWqtU9jsc8ehImVF1E8bVM=)
                          2: 6959BDA8C05B11EB9540776AC4F9AE02.roa (hash: OANS4UGotbrHDA32WOeuOB3Wn0ea/AxoJh5y6ulR7SQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl
                          rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 22:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91973D2, serialNumber=86AB3EBD7C41E656CCEECDB5A850C7A4B1E267E3
        Validity
            Not Before: Oct  8 22:30:53 2026 GMT
            Not After : Oct 15 22:30:53 2026 GMT
        Subject: CN=6ac8199d-3dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3d:89:c7:03:7a:b3:da:20:90:b2:a1:67:56:
                    fc:cd:f6:3b:78:84:10:86:08:7d:8d:b7:23:0b:44:
                    de:8b:39:1c:ac:ca:d9:d7:2d:24:c0:f1:69:cf:c1:
                    4f:c3:ed:df:39:fd:b8:84:ac:c3:bb:00:23:e4:56:
                    8e:bc:11:6a:e5:29:1b:ac:ea:4c:47:53:3a:e3:90:
                    57:e3:80:86:e3:5a:16:d0:ee:23:c8:07:c7:d5:66:
                    af:83:72:17:de:fb:25:5f:a6:3b:d8:83:37:39:65:
                    9c:b5:be:88:19:3e:20:c0:b5:43:26:96:2d:fe:6f:
                    c8:93:4b:00:5b:cc:0e:1e:bb:d8:aa:c0:a4:b3:fd:
                    eb:cd:40:2f:9d:36:f8:cd:26:02:ab:58:ab:2a:a6:
                    ef:91:eb:4c:a9:53:27:ea:8a:58:6b:9e:59:44:d9:
                    51:32:ea:28:86:f1:fa:8d:1a:3f:a8:37:e4:98:d5:
                    c4:16:18:cd:cb:5f:9e:dd:76:ae:c1:d1:a2:48:d8:
                    40:45:07:cc:32:35:19:ba:e6:e3:6f:98:7c:37:ee:
                    28:4d:9a:c5:29:09:b5:be:e5:e0:90:77:26:8e:69:
                    a4:c6:77:c2:31:ee:26:a8:6d:a3:f2:d0:34:a4:2d:
                    25:c0:ea:12:fd:39:1e:c4:79:2d:71:ec:b7:0e:86:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:7B:A3:55:73:BB:A6:A3:D8:D1:85:45:AB:B3:77:CB:76:CB:40:B6
            X509v3 Authority Key Identifier:
                keyid:86:AB:3E:BD:7C:41:E6:56:CC:EE:CD:B5:A8:50:C7:A4:B1:E2:67:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hqs-vXxB5lbM7s21qFDHpLHiZ-M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91973D2/DA839C94BFC811EBA5B3A67CC4F9AE02/hqs-vXxB5lbM7s21qFDHpLHiZ-M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:8d:b5:86:3a:5a:82:5c:92:4d:52:05:0e:d8:bb:c8:1a:
         12:9c:e7:ce:7a:70:08:77:45:b5:52:30:76:ee:c0:7a:73:ea:
         85:ab:d2:4b:d6:c5:42:65:55:40:35:bb:60:b5:c1:e2:38:74:
         46:f5:8a:1b:e1:7e:e7:28:1e:44:25:da:ca:7f:43:f7:86:34:
         53:d5:f2:f9:01:95:7a:85:8d:e6:1e:86:3d:80:8e:c3:39:af:
         59:4f:33:79:f9:35:f9:01:54:36:84:4e:b4:ec:4f:10:11:28:
         d3:f3:b8:8f:0d:86:ba:f9:30:3f:df:1b:ff:98:e0:4e:25:a7:
         f5:c3:da:a3:59:39:50:ae:94:28:b5:05:de:ae:16:08:ed:04:
         f4:ce:f4:e0:24:22:8c:23:2f:3b:6a:40:53:3b:72:d3:4a:ae:
         c2:00:71:ab:b5:df:45:54:72:99:18:fc:b3:71:7e:34:38:7d:
         76:a1:21:93:b5:11:5d:fa:4a:b4:6b:c6:17:67:ce:5a:73:b1:
         42:0e:e2:dd:b3:73:27:3f:11:3f:8a:8a:21:5c:8e:4b:77:5c:
         1a:dc:df:ef:6b:2b:9f:2b:c6:f4:d9:9c:4d:c3:9f:24:f3:d6:
         48:05:02:a2:da:df:36:f7:b0:73:73:3a:26:71:fd:4f:d0:af:
         9b:ab:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:16:39 2026 by rpki-client