Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
File:                     hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft (raw, json)
Hash identifier:          n3ysgbvVZE5j12Jo/2Rw3C0Fvno/W+i+Usy5qo65/dQ=
Subject key identifier:   0B:4D:96:19:F3:E0:E3:7C:02:D5:BB:59:68:EF:5D:50:4F:45:AD:1A
Authority key identifier: 86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0
Certificate issuer:       /CN=A91A1EE0/serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
Certificate serial:       35F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
Manifest number:          35BF
Signing time:             Sun 04 Oct 2026 14:34:27 +0000
Manifest this update:     Sun 04 Oct 2026 14:34:26 +0000
Manifest next update:     Sun 11 Oct 2026 14:34:26 +0000
Files and hashes:         1: hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl (hash: 9yO/6ySaAnmzXIgT9vdpcVaj8Lv+DEokOWhKTZzVTxk=)
                          2: 4EF85CFEEE4211E9B52B674DC4F9AE02.roa (hash: k2cGF+v3+dS0w+vBEGqoC2FQbaTMDsNcGpU+nhXd4iM=)
                          3: 550BDEE486FD11F194514C90ABEE528E.roa (hash: cROEO2KeJD8VNn1ja3b2H4yPhR2dVDekjJOaLUHdtRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl
                          rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:34:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13814 (0x35f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1EE0, serialNumber=860C0904CED7BB0D1D97B292FDB662E8B9A8AFF0
        Validity
            Not Before: Oct  4 14:34:26 2026 GMT
            Not After : Oct 11 14:34:26 2026 GMT
        Subject: CN=6ac263f3-1872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:29:6e:de:1b:b9:fb:36:8b:76:a1:10:88:
                    9a:45:14:70:b8:71:05:7e:d1:dd:84:62:51:29:92:
                    2f:50:9d:84:0b:e7:1b:0e:8a:19:d1:e6:85:d4:af:
                    64:f3:94:2b:ad:f5:23:70:55:c3:00:aa:c4:92:28:
                    12:9b:78:49:78:65:4e:8e:c0:e5:09:14:33:62:d7:
                    5e:75:a3:9f:de:52:a2:ce:ab:63:ea:0a:a9:09:d4:
                    93:ad:90:d8:57:dc:16:63:53:29:b1:c1:f0:d9:7c:
                    a2:e4:ed:c2:7b:6f:9d:9d:a4:9d:38:47:41:39:63:
                    76:8d:71:90:fa:73:11:e3:13:cf:a1:05:77:1f:ce:
                    f1:6e:55:cb:ea:a0:20:a2:eb:51:83:6e:86:a6:3f:
                    34:67:8c:35:3b:1e:97:55:fc:d0:46:17:bb:d6:f0:
                    3d:34:98:88:87:3f:90:89:32:b2:0d:d0:4a:fa:50:
                    3b:7d:d5:7c:55:23:f4:89:76:04:eb:08:97:98:07:
                    04:e7:d3:0e:40:66:30:dc:08:85:b9:bd:35:75:c6:
                    96:c6:a5:31:4c:53:a3:35:d2:52:af:35:d8:0d:da:
                    92:f7:04:bf:5a:4d:dc:bd:69:46:d5:54:3a:69:8c:
                    98:80:0a:55:d0:28:d5:31:c0:c7:99:b2:a6:d2:10:
                    b2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4D:96:19:F3:E0:E3:7C:02:D5:BB:59:68:EF:5D:50:4F:45:AD:1A
            X509v3 Authority Key Identifier:
                keyid:86:0C:09:04:CE:D7:BB:0D:1D:97:B2:92:FD:B6:62:E8:B9:A8:AF:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1EE0/D23634461D8A11E2820F04E508B02CD2/hgwJBM7Xuw0dl7KS_bZi6Lmor_A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:09:2f:b6:8a:c4:20:9e:76:be:f0:75:b4:f3:e6:aa:33:1e:
         dc:97:b1:50:54:da:dd:89:84:54:b0:28:0b:11:a1:a0:41:d9:
         5e:2d:31:48:ac:66:a3:ac:80:7b:eb:1b:03:27:7f:29:aa:28:
         24:24:76:86:c0:fa:d4:1d:be:32:94:10:3c:dc:69:07:ee:5c:
         f1:c1:75:90:b0:d2:e3:b7:fd:f7:68:6d:23:e4:d5:5e:4f:79:
         83:df:51:14:be:06:0e:32:fc:71:56:94:fe:30:79:d5:61:06:
         7d:3c:93:8e:b5:89:d8:d1:8e:09:e5:99:c8:3a:49:d5:75:ed:
         4d:f3:1c:f6:71:6b:2c:d2:6b:bb:71:a3:13:c8:16:ff:a3:92:
         f9:b1:68:b5:a8:7c:0e:e7:68:d0:be:2c:8d:88:3a:67:f8:c8:
         4c:ec:ce:3f:82:33:45:cc:3b:e2:67:5a:3e:21:a0:cd:8f:db:
         7d:ec:39:8f:6b:91:64:25:3c:37:d4:06:23:44:c6:e9:8e:d8:
         00:94:2e:6a:e4:6f:a3:44:64:9b:52:a3:7d:a9:d8:00:04:46:
         31:de:24:5e:48:69:16:6b:72:0b:35:43:74:5f:c7:55:f1:76:
         a9:d4:07:b6:4f:c2:fc:0f:a0:db:53:53:b0:13:08:fe:d5:c7:
         ed:bf:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:06 2026 by rpki-client