Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File:                     hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier:          x0hn9tENrb7O0/0cQrNJTdmC1QC51+xLd28NC34fqNo=
Subject key identifier:   AC:F5:86:33:B7:48:7A:EB:E7:4D:B8:B6:FC:01:7A:96:4B:44:35:4C
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer:       /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number:          014E
Signing time:             Mon 21 Sep 2026 05:18:34 +0000
Manifest this update:     Mon 21 Sep 2026 05:18:34 +0000
Manifest next update:     Mon 28 Sep 2026 05:18:34 +0000
Files and hashes:         1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: wOam+XrVWWpEEyS/4lXzMtQ4PR4qpw0dTTBT5MN7JpA=)
                          2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:18:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
        Validity
            Not Before: Sep 21 05:18:34 2026 GMT
            Not After : Sep 28 05:18:34 2026 GMT
        Subject: CN=6ab0be2a-32f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:e9:13:dc:bb:52:5e:58:40:2e:ed:23:25:
                    04:ca:34:1b:96:76:20:f4:56:87:33:ad:b7:6c:7e:
                    bf:c3:25:f9:20:71:fb:33:6b:11:f3:4c:42:6c:a9:
                    4e:36:76:9a:03:d6:a9:79:2b:27:74:8f:2c:88:ef:
                    e9:7f:15:da:00:8f:09:b8:74:8d:9c:ad:26:29:73:
                    04:45:79:cb:6f:cd:ec:41:15:f3:c9:60:73:d6:e9:
                    6e:14:9f:e2:d1:a4:1c:6a:ab:f6:cd:1a:9a:ea:5c:
                    9f:ae:e7:d5:0a:40:f1:4c:49:e6:f2:18:7e:f3:56:
                    92:a4:1a:53:a3:36:97:ca:12:8b:3e:96:c9:ee:17:
                    f0:33:cb:95:35:73:98:9d:18:01:25:d7:d1:5e:7a:
                    ba:b2:2e:14:77:e0:4c:64:ba:a0:86:70:88:2d:ac:
                    a8:99:cb:11:7d:47:ba:a0:c4:1e:ae:ba:85:22:e9:
                    5b:40:65:d3:69:9d:82:65:a2:39:33:a7:ca:17:9c:
                    35:b9:a1:66:ef:3e:52:42:2c:8b:ca:99:62:b4:1a:
                    55:6f:8b:c4:bc:a6:68:41:e2:e8:c5:2c:21:1e:0e:
                    8a:25:e8:93:de:5c:ac:04:13:46:5e:d4:18:20:80:
                    ea:a1:05:b2:98:05:64:55:09:39:9f:57:96:b2:07:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F5:86:33:B7:48:7A:EB:E7:4D:B8:B6:FC:01:7A:96:4B:44:35:4C
            X509v3 Authority Key Identifier:
                keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7b:c2:0e:8b:ee:ee:70:6c:3e:a7:05:fb:39:24:47:b4:e6:
         4c:67:1d:95:00:97:fe:bf:04:c6:98:d2:77:9b:47:a3:3f:c7:
         4a:e2:8e:29:c5:6c:66:b6:59:0e:91:e5:36:ec:03:89:72:6e:
         b1:32:d7:7a:a9:d1:59:2d:4c:7d:c5:e8:24:b8:98:2d:01:11:
         d4:2b:61:d4:a1:e1:c2:89:7e:35:37:fe:9d:89:2c:b5:ee:bd:
         b3:28:ba:25:92:98:75:1f:c7:78:95:d9:61:fd:aa:85:d1:9d:
         bf:c1:bc:99:c8:29:26:cf:93:99:18:ae:5e:13:3d:0b:55:c0:
         23:ee:e2:db:49:8d:a3:d5:4e:29:1a:a1:53:34:45:76:51:c2:
         1d:2c:c0:09:a0:3a:18:71:ad:fe:bb:a3:0a:6d:16:de:08:f9:
         b6:0b:99:fb:ae:0f:8e:0b:e0:92:3b:c9:6b:fb:f7:12:ec:89:
         0b:d7:31:e7:cc:08:ca:59:53:fd:fd:00:95:12:70:a4:c0:aa:
         1b:f8:6f:af:73:c4:5e:84:ee:11:de:d5:84:71:21:0d:96:61:
         9b:d2:36:f8:e0:52:0b:3a:fa:e0:6d:e2:e5:90:cd:35:1e:dc:
         fb:8c:57:47:17:03:61:1d:3a:a5:18:66:cb:6d:f8:42:e0:13:
         0e:59:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:39:20 2026 by rpki-client