Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File:                     s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier:          wGc21Lpn1K6jTA7QdquFxC171feNw38MKqDK3v0vWUY=
Subject key identifier:   D8:81:1B:52:A7:F3:CF:E6:8D:B4:65:57:09:E4:16:4E:74:42:06:A8
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer:       /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number:          014B
Signing time:             Wed 07 Oct 2026 05:47:02 +0000
Manifest this update:     Wed 07 Oct 2026 05:47:01 +0000
Manifest next update:     Wed 14 Oct 2026 05:47:01 +0000
Files and hashes:         1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: CrB8SatPMqu2QMfhXOkNL94T7UN57y0Hbi9YBAT3E8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
                          rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 05:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
        Validity
            Not Before: Oct  7 05:47:01 2026 GMT
            Not After : Oct 14 05:47:01 2026 GMT
        Subject: CN=6ac5dcd6-2540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:9a:fc:37:de:aa:03:c0:86:a6:68:f3:16:
                    3a:f7:26:99:b1:e9:5e:21:b4:ce:70:9e:be:f6:8c:
                    b3:c6:83:38:2a:45:33:21:1c:56:b4:92:c0:84:18:
                    e0:a2:00:60:df:c2:b9:76:0c:af:8e:15:b4:86:ce:
                    a8:a4:ff:38:61:a9:d9:5e:44:01:fd:e6:53:2e:a4:
                    b3:ec:90:b7:79:bd:a0:ca:12:9b:19:2d:f9:3d:ea:
                    5f:f6:c0:77:22:e4:2e:cd:8c:db:f7:a4:9f:57:75:
                    f0:ab:b6:6d:4c:a5:21:91:4e:c1:2d:5e:31:05:89:
                    eb:65:8c:1b:af:3b:08:94:fc:92:db:16:ee:44:a0:
                    cd:e4:40:f2:36:c3:6c:e3:1c:e8:50:bf:3a:97:ba:
                    d3:25:9e:36:ed:d6:3f:b6:91:39:87:53:c7:f8:d0:
                    31:66:1f:52:67:22:47:bb:86:17:3d:77:bf:2e:d7:
                    b9:04:1d:48:a1:28:73:11:40:54:5d:2c:06:84:5b:
                    e7:47:3c:e7:bd:13:7b:c2:e3:6d:a8:37:44:15:b7:
                    ba:03:37:5f:e1:0d:8f:2f:f1:74:bd:3b:01:ac:4b:
                    63:4e:73:ae:25:5e:a7:39:af:1b:fc:4f:3a:9a:be:
                    6e:66:8a:5f:51:90:e6:98:3a:d0:93:ab:fb:9a:3b:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:81:1B:52:A7:F3:CF:E6:8D:B4:65:57:09:E4:16:4E:74:42:06:A8
            X509v3 Authority Key Identifier:
                keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:08:1a:a8:ac:95:96:79:79:6c:0f:d1:31:46:69:f1:43:3c:
         c6:88:c7:da:8c:42:25:04:59:ef:3c:65:e0:02:b4:38:46:e4:
         7f:c3:e1:88:3c:a0:28:89:42:2f:41:2e:ea:34:01:80:8e:6b:
         b5:1e:4b:13:f6:e5:3b:95:1a:a3:c5:2a:cd:61:b2:4e:1f:2c:
         ef:f6:e5:c6:8e:62:67:4e:cc:d6:69:af:08:bf:ca:85:59:01:
         54:39:08:7d:ff:98:8a:f7:61:45:35:eb:95:82:5b:47:73:ed:
         92:1c:07:07:4f:0b:f3:10:24:e5:63:46:0f:75:82:8e:dd:bd:
         be:b8:0b:f3:d0:d4:bf:05:6e:69:c0:38:c9:18:4f:90:29:93:
         8c:52:8d:15:c3:06:f9:26:37:da:0a:96:33:aa:74:8c:3a:6e:
         4d:84:4a:f1:06:4a:25:d2:87:44:f8:af:8e:f7:3b:6c:35:0b:
         6d:a9:98:a3:c5:dd:36:eb:55:b8:12:0f:1d:9f:1a:4d:7b:84:
         ea:7e:c3:de:8d:d7:31:84:c8:d2:0e:59:e1:fa:8e:14:41:3f:
         e0:c4:c3:ad:07:70:c9:4b:7f:9c:5f:0e:cb:f0:26:71:78:08:
         eb:fd:75:31:1f:f8:ae:f5:e0:67:96:a5:39:1c:d2:5c:89:2b:
         ab:a3:3d:ca
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTg1Q0YxMTAvBgNVBAUTKEIzRTg2MjJBNDEwNjE5RkQ5NzIzRjlEMURCQzUzNTdF
MTVGQTdEQ0MwHhcNMjYxMDA3MDU0NzAxWhcNMjYxMDE0MDU0NzAxWjAYMRYwFAYD
VQQDEw02YWM1ZGNkNi0yNTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp8Ka/DfeqgPAhqZo8xY69yaZseleIbTOcJ6+9oyzxoM4KkUzIRxWtJLAhBjg
ogBg38K5dgyvjhW0hs6opP84YanZXkQB/eZTLqSz7JC3eb2gyhKbGS35Pepf9sB3
IuQuzYzb96SfV3Xwq7ZtTKUhkU7BLV4xBYnrZYwbrzsIlPyS2xbuRKDN5EDyNsNs
4xzoUL86l7rTJZ427dY/tpE5h1PH+NAxZh9SZyJHu4YXPXe/Lte5BB1IoShzEUBU
XSwGhFvnRzznvRN7wuNtqDdEFbe6Azdf4Q2PL/F0vTsBrEtjTnOuJV6nOa8b/E86
mr5uZopfUZDmmDrQk6v7mjtn4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNiBG1Kn
88/mjbRlVwnkFk50QgaoMB8GA1UdIwQYMBaAFLPoYipBBhn9lyP50dvFNX4V+n3M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODVDRi9GMDAwOTc3NENB
RTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dmMlhJX25SMjhVMWZoWDZm
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MtaGlLa0VHR2YyWElfblIyOFUxZmhYNmZjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
ODVDRi9GMDAwOTc3NENBRTIxMUVGQUY4RjEwMTFDNEY5QUUwMi9zLWhpS2tFR0dm
MlhJX25SMjhVMWZoWDZmY3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZggaqKyVlnl5bA/RMUZp8UM8xojH2oxCJQRZ7zxl4AK0OEbkf8PhiDygKIlC
L0Eu6jQBgI5rtR5LE/blO5Uao8UqzWGyTh8s7/blxo5iZ07M1mmvCL/KhVkBVDkI
ff+YivdhRTXrlYJbR3PtkhwHB08L8xAk5WNGD3WCjt29vrgL89DUvwVuacA4yRhP
kCmTjFKNFcMG+SY32gqWM6p0jDpuTYRK8QZKJdKHRPivjvc7bDULbamYo8XdNutV
uBIPHZ8aTXuE6n7D3o3XMYTI0g5Z4fqOFEE/4MTDrQdwyUt/nF8Oy/AmcXgI6/11
MR/4rvXgZ5alORzSXIkrq6M9yg==
-----END CERTIFICATE-----
Generated at Wed Oct 7 18:52:07 2026 by rpki-client