Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
File:                     hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft (raw, json)
Hash identifier:          is4JgUCFA/DVPOb7UeGuwbY0wEcIO/XpOGnCTsP5eTY=
Subject key identifier:   B8:A5:CB:C7:49:1F:A6:21:8D:2B:A9:39:7E:4A:4C:48:77:6F:56:A9
Authority key identifier: 86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6
Certificate issuer:       /CN=A91B3759/serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
Manifest number:          089F
Signing time:             Sun 04 Oct 2026 20:42:40 +0000
Manifest this update:     Sun 04 Oct 2026 20:42:39 +0000
Manifest next update:     Sun 11 Oct 2026 20:42:39 +0000
Files and hashes:         1: hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl (hash: RGLebDQNUBdJrj3MxgRdxPpSw0UgZV0ZEA0ozUc2qk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 20:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3759, serialNumber=8622333DBC0773380BA37647DCC3F3E655F34BC6
        Validity
            Not Before: Oct  4 20:42:39 2026 GMT
            Not After : Oct 11 20:42:39 2026 GMT
        Subject: CN=6ac2ba3f-67b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:a5:f4:87:3b:77:f4:06:4c:4c:dd:bc:65:
                    6a:42:cb:cc:1e:31:af:6a:1a:b0:0d:0f:65:01:3f:
                    cd:73:0c:74:de:b1:d7:77:c0:12:22:94:97:c4:4d:
                    86:f3:1d:5d:73:2b:9e:69:7c:7e:47:a4:af:41:bf:
                    36:d7:7e:f9:0f:44:55:a3:fb:86:22:09:19:0c:fe:
                    c5:6d:5b:08:b3:8a:80:59:7f:81:a3:5f:3c:15:64:
                    eb:34:5f:04:7d:1f:34:23:35:cb:8d:56:eb:a6:36:
                    ab:bd:50:18:67:b2:6e:30:2f:7d:1a:46:5f:c0:ac:
                    c1:7e:72:9f:48:c6:fe:89:3f:6f:88:a2:51:9e:13:
                    63:13:43:0b:35:5c:d8:0b:cc:ac:4b:32:32:83:04:
                    fd:6c:49:9a:cc:dc:54:2e:06:4b:d6:c3:0c:22:03:
                    b6:f3:a1:08:a3:fa:45:ac:9e:ba:0e:29:bf:5c:ff:
                    58:1b:90:17:a4:7e:63:11:53:24:f5:d4:e6:cd:08:
                    a9:11:2f:d6:9d:5a:7a:dd:08:7f:ca:2e:29:65:01:
                    0c:15:5f:f9:c3:5b:4e:b0:38:5b:d5:43:59:e7:c1:
                    14:b9:17:9d:c6:12:a5:13:18:5d:68:3a:0c:6a:32:
                    c5:bd:98:9e:aa:c8:ee:e5:56:05:fb:f8:34:94:80:
                    d3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A5:CB:C7:49:1F:A6:21:8D:2B:A9:39:7E:4A:4C:48:77:6F:56:A9
            X509v3 Authority Key Identifier:
                keyid:86:22:33:3D:BC:07:73:38:0B:A3:76:47:DC:C3:F3:E6:55:F3:4B:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3759/090F5AAA051911EB9D50DD6EC4F9AE02/hiIzPbwHczgLo3ZH3MPz5lXzS8Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:b0:59:22:85:64:ec:28:8b:73:14:f3:42:8b:bf:53:31:
         b0:da:8c:e2:f5:31:4c:f2:ca:d2:de:29:03:a2:fb:b0:04:a4:
         37:bc:98:b7:11:e1:28:cf:eb:20:e3:14:dd:74:45:f4:52:1d:
         a7:80:57:5f:1a:8d:9e:d0:04:6a:ea:da:3b:f3:76:4c:42:22:
         f2:11:16:e8:77:e0:f5:a1:9b:09:ad:f3:98:86:a2:a9:d3:5b:
         c6:12:b1:37:26:b6:c2:67:be:51:17:f3:16:0a:57:f4:e3:dd:
         dd:07:e8:b7:09:d1:ce:42:0e:d2:1f:a1:35:09:ca:4a:3c:e6:
         05:ab:ec:27:90:b0:e1:d9:b6:b0:9d:f1:de:ef:0b:78:a2:03:
         27:e1:20:9a:8f:8a:77:1d:37:31:fe:ed:2d:3b:a3:07:02:1c:
         9c:55:0c:03:33:17:96:72:6d:28:4b:cc:30:0d:79:47:86:ee:
         60:77:7e:db:da:12:85:13:ff:73:de:a9:77:03:16:2d:c7:b1:
         4c:e8:3b:87:41:0d:e2:00:6d:ac:36:d7:29:7a:a9:89:99:1c:
         55:20:84:f0:b7:7c:34:d1:6e:b9:f5:7d:b9:95:d3:74:77:5b:
         e0:2d:5e:36:58:c3:47:59:56:2e:47:97:19:eb:b8:f3:45:a3:
         59:8e:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:03:18 2026 by rpki-client