Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
File:                     HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json)
Hash identifier:          oG1xtYsgT3D83M46DnGEz8ZAya50OWfoH/yTwvHCH8Q=
Subject key identifier:   6F:86:55:8B:09:51:61:BC:A7:45:C9:C7:64:E7:0F:58:A6:80:48:3F
Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84
Certificate issuer:       /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
Certificate serial:       0FC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
Manifest number:          0F9A
Signing time:             Sat 24 Oct 2026 17:28:39 +0000
Manifest this update:     Sat 24 Oct 2026 17:28:39 +0000
Manifest next update:     Sat 31 Oct 2026 17:28:39 +0000
Files and hashes:         1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: kiUQWJq3q8kZz36uA4agbx4saaJHR8VSgjxWsv83pC8=)
                          2: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: CzoXjxwwafDE/0X1/IFRvm6Y/QHPkUJqqlhM2vR6GHQ=)
                          3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: JnEr1ULSbKqalMG/ES7bWBOgeNVDSEEFX8LfergGB94=)
                          4: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: HJroJ49BIbNGAuccbium1kEpSjVPB8qo4E6nRxSwoW8=)
                          5: 1hLHVC5fTqOzxZTy8hjXM7kVrkg.asa (hash: nKEAkhT4iDzocHW9xwQdsGGgb2TlVgboCtjeFBXEaME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 17:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4038 (0xfc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084
        Validity
            Not Before: Oct 24 17:28:39 2026 GMT
            Not After : Oct 31 17:28:39 2026 GMT
        Subject: CN=6adceac7-eeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:01:19:b2:4d:cb:8e:77:e8:d4:98:6b:71:0d:
                    12:09:fd:83:84:5b:a6:b2:6e:88:63:d4:13:a3:03:
                    a7:c7:d3:0f:28:c5:8e:45:7e:a9:e5:f8:65:0f:0a:
                    92:e1:0b:81:23:db:a1:e6:49:48:5e:d1:b4:66:ae:
                    00:63:f4:f7:7c:b5:a7:28:b6:b8:a8:f1:93:ee:a9:
                    7d:0c:71:a3:a0:08:b4:22:ef:14:27:14:95:b5:ac:
                    08:d7:10:03:cc:e5:f4:63:79:7b:f5:a2:29:4f:75:
                    ad:d0:02:1e:7e:11:5b:03:9b:50:30:31:ca:0c:98:
                    6c:24:c1:99:65:0f:f5:40:11:13:b3:be:61:33:f4:
                    42:b8:12:84:64:ef:3e:09:51:5b:b9:78:9c:29:75:
                    a9:f4:8e:10:93:f3:c2:f4:4d:a2:38:3a:45:95:cc:
                    3f:da:49:07:63:05:0d:09:7a:ea:70:8a:72:33:21:
                    68:56:86:cf:0e:9a:63:5b:f1:56:ab:f0:50:22:04:
                    39:cf:86:cd:16:00:54:d3:e5:5f:44:5a:d0:29:bf:
                    37:33:d9:5c:5b:ee:e9:a5:6f:af:03:2a:c0:1b:f8:
                    2a:37:66:ac:b5:bf:85:d7:e7:0e:54:6b:4d:d1:a8:
                    5a:77:c5:aa:af:8c:66:76:6b:56:15:d9:b4:8d:53:
                    9c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:86:55:8B:09:51:61:BC:A7:45:C9:C7:64:E7:0F:58:A6:80:48:3F
            X509v3 Authority Key Identifier:
                keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:68:69:1c:b2:9c:64:12:88:77:12:18:21:d4:44:fa:69:1b:
         1f:6f:dc:1c:24:5b:8a:0d:7f:1f:1c:d7:6c:17:cf:d6:65:f0:
         93:81:47:75:8e:f2:6a:fb:8c:bf:fc:0d:99:db:5c:cc:ab:8e:
         a0:7a:3d:0b:98:ae:1a:85:5e:01:d4:f3:56:71:5c:9b:2d:38:
         65:08:88:0f:3f:31:e0:b6:8a:7f:18:6f:de:65:5e:df:19:03:
         d1:ad:1d:80:74:ef:d0:c5:b2:8a:42:c4:bb:6c:7b:33:54:81:
         9b:33:74:98:bf:0f:24:bb:c9:31:f0:bb:a1:d2:c9:ba:93:c6:
         96:4c:82:a5:ce:c7:61:b9:af:93:43:e0:ba:3f:15:41:dc:54:
         94:56:85:a7:76:f4:7d:e8:65:bc:52:18:c5:16:57:a4:80:18:
         8c:47:1d:62:06:f8:ad:94:7a:c0:b6:42:1e:53:80:20:67:ce:
         1b:ef:75:f6:6a:e2:5f:94:7d:97:49:18:d9:80:78:29:6e:b6:
         79:e7:48:f1:ae:ed:cc:aa:0b:7b:b0:c7:14:fa:34:74:43:3a:
         3a:2b:a5:2e:c7:83:80:66:27:30:4d:89:de:3a:53:33:00:b6:
         76:4e:7b:d0:27:79:55:19:f8:83:a7:12:cc:fb:b6:65:9e:10:
         66:47:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:30:59 2026 by rpki-client