Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File:                     HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier:          Ae5daFExRM4CTZInGyByQYh+5Vt74iGAeDdtCpUTzQk=
Subject key identifier:   8F:E8:CB:45:B5:7A:A4:6F:62:85:6B:44:6E:D8:F8:D5:B7:00:A7:79
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer:       /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number:          012B
Signing time:             Wed 07 Oct 2026 06:13:05 +0000
Manifest this update:     Wed 07 Oct 2026 06:13:04 +0000
Manifest next update:     Wed 14 Oct 2026 06:13:04 +0000
Files and hashes:         1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: 9DJ12tVVwz/FbbtFh/r0FkqT4R/h7XoNOtwD9SUywHA=)
                          2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 06:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
        Validity
            Not Before: Oct  7 06:13:04 2026 GMT
            Not After : Oct 14 06:13:04 2026 GMT
        Subject: CN=6ac5e2f1-524f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f9:c9:dc:db:70:68:6e:35:0e:4f:b8:23:5a:
                    ab:ea:f4:ea:0d:9d:61:0d:c8:c5:89:70:6e:8c:35:
                    fd:fc:79:20:2d:12:14:a4:f0:0f:d8:f8:e2:70:01:
                    37:a0:24:1e:9a:b4:77:c9:b8:d6:bc:b6:b3:1b:72:
                    85:ce:4f:fa:0b:40:92:8d:7d:4a:11:7c:2d:f2:a3:
                    db:ca:79:43:e8:16:c7:00:2d:e9:b2:94:c4:ef:6e:
                    86:0e:12:70:ec:7b:28:2a:89:7c:26:f7:64:4d:82:
                    52:0e:be:5e:f9:aa:c1:3d:a7:1a:fb:5d:97:7b:7f:
                    08:a8:5b:74:23:4a:5d:ad:71:39:3c:56:40:75:4b:
                    fe:ca:c9:6d:9c:35:d4:98:71:d3:0f:c1:bc:41:a5:
                    da:c8:3d:2d:ea:13:9e:19:88:1e:57:41:f2:21:ba:
                    7a:88:a6:89:97:92:47:c3:11:5c:fa:10:99:96:7b:
                    51:af:66:46:2b:6f:9e:ed:9e:a2:23:d5:fe:00:a1:
                    21:0d:9e:d5:e0:89:5d:9d:f5:02:e6:3e:68:fd:77:
                    f3:f8:7a:51:b4:db:4e:3f:06:9e:f4:a6:7f:0d:d0:
                    52:d2:cc:b4:56:40:91:67:e6:74:2a:0f:83:32:cb:
                    91:f4:b1:d6:ef:0d:06:fa:72:32:89:7a:04:65:21:
                    01:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:CB:45:B5:7A:A4:6F:62:85:6B:44:6E:D8:F8:D5:B7:00:A7:79
            X509v3 Authority Key Identifier:
                keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:73:c5:74:06:29:73:07:7c:9d:ae:4c:c8:75:b0:1e:c7:
         c9:80:d1:8c:fa:3f:6c:a8:a4:61:92:ae:c6:d0:92:6e:86:4e:
         c5:53:68:61:af:ae:21:d6:73:af:7f:91:9d:a5:34:19:65:5f:
         62:7b:b4:29:c7:ce:5a:17:d9:76:f9:b9:c1:c4:c4:6d:4a:78:
         b5:67:57:ee:ef:ce:4f:4e:95:50:06:0e:0d:c5:87:f6:c5:2c:
         ff:9e:20:9a:34:83:a3:84:24:59:61:8f:a4:a2:d5:de:88:c0:
         69:e0:3c:06:6e:b9:1e:8a:95:dd:46:88:38:87:77:95:22:d4:
         66:db:0a:d7:64:50:13:15:4b:20:3f:56:19:64:14:c6:3b:87:
         4a:fc:78:83:73:dd:72:a8:37:b6:be:6a:8a:af:78:0e:ac:d2:
         0d:9b:a0:79:f2:06:62:d1:4e:4d:20:cf:09:92:eb:fa:46:1c:
         a3:23:79:09:e2:05:67:ee:03:5d:94:6f:f4:3d:92:bf:d1:12:
         e0:26:70:af:3d:8c:c2:f0:85:cb:4d:84:53:3a:f9:09:21:46:
         51:33:2b:11:2c:a9:d8:ef:75:2b:57:7a:af:c3:09:bd:1a:6a:
         98:f8:86:95:e2:eb:41:f0:2d:07:ad:2b:34:8f:a5:ae:76:b6:
         3b:48:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:03:11 2026 by rpki-client