Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File:                     HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier:          Yifg6AIDEZksrwgfkow9P73DWUhFgrOzE9lS0X5bIjs=
Subject key identifier:   A8:E9:A5:D8:23:AF:BE:99:3E:53:5B:FD:C0:C4:D1:D3:41:D8:04:B8
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       052F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number:          051F
Signing time:             Thu 10 Sep 2026 23:28:12 +0000
Manifest this update:     Thu 10 Sep 2026 23:28:11 +0000
Manifest next update:     Thu 17 Sep 2026 23:28:11 +0000
Files and hashes:         1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: +8+on5nsYl6h2e0XxGki6BuAXAne7YZzOQJ7A3Drx/M=)
                          2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: N6QDQkW63cni5s3lT0BX7q7ZKDgD5wrDskQ0i3AMnL0=)
                          3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: nTqCgWsgMqkkVQO1onPyXIdhw/sgly+V7QUcjgkYkRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 23:28:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: Sep 10 23:28:11 2026 GMT
            Not After : Sep 17 23:28:11 2026 GMT
        Subject: CN=6aa33d0c-e4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a5:10:a1:07:0d:ba:d8:d1:aa:87:63:04:c9:
                    83:71:6c:6c:fd:03:8c:a1:87:22:ad:3b:f1:a9:24:
                    38:8a:ed:93:9d:7a:44:0d:5a:95:32:90:c4:7c:43:
                    30:a0:44:b2:a6:84:7a:1d:0a:b4:16:fa:95:85:6e:
                    64:1e:d8:46:e4:df:c7:b7:48:bf:42:1a:96:63:69:
                    dc:c1:f4:b9:0d:fd:79:85:ac:72:ee:70:5e:b9:c9:
                    aa:55:79:f9:43:d3:7e:42:f0:c6:01:b2:4c:34:f7:
                    9e:4a:df:5e:bf:b9:d8:72:bd:e3:19:20:2e:68:55:
                    80:f8:0c:7b:13:50:ef:6b:b6:ef:71:f2:cc:8c:3f:
                    e4:72:43:9f:8e:54:36:89:c4:76:2e:c1:00:c3:1f:
                    42:e9:b2:09:ba:36:58:00:ce:cb:11:e0:41:1b:40:
                    e0:df:d1:f6:a9:14:23:a1:bc:cc:48:a9:cb:1c:84:
                    bb:b7:cb:08:8d:90:eb:dd:60:64:c5:09:85:da:7c:
                    57:7f:1a:33:60:80:d2:dc:d3:aa:6d:e3:9a:44:ea:
                    95:0d:61:50:5c:7c:e9:9e:30:14:12:83:28:55:bf:
                    4b:49:a2:63:9b:37:ea:74:19:de:c4:e8:f7:5a:1c:
                    7b:5f:94:90:8a:82:1a:eb:a3:a1:5f:31:c1:58:45:
                    80:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E9:A5:D8:23:AF:BE:99:3E:53:5B:FD:C0:C4:D1:D3:41:D8:04:B8
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:49:47:6f:7b:e5:6c:86:7e:ae:26:38:90:67:7e:cf:ec:6d:
         a0:55:d7:11:0a:8a:33:d4:8d:a8:a3:8b:7a:19:c6:3a:34:34:
         71:73:e1:be:34:8c:ed:31:d7:5b:12:45:6a:66:c8:c3:8f:3d:
         83:d7:48:93:8b:ed:b5:2f:1c:9d:2a:18:ae:d2:d9:43:c1:46:
         f0:3d:e9:72:de:54:a7:56:a6:0a:2b:82:11:0f:d1:fb:8c:f0:
         d8:5b:03:a8:7a:d5:8d:b1:e8:16:23:6e:00:cb:7d:bf:bb:79:
         a6:b0:89:58:b5:0d:7f:2c:1e:f0:44:e3:0f:86:26:f9:2d:28:
         94:1c:ea:08:2e:94:7c:dd:7b:af:eb:74:ad:90:67:cf:0a:60:
         65:80:d6:db:14:82:23:28:33:66:14:9a:05:87:80:da:20:ea:
         54:41:10:8a:df:cf:49:28:a9:3c:b8:7f:f1:6b:58:74:29:24:
         a1:4d:37:6f:73:3d:f3:37:ff:54:87:35:20:8f:ac:c3:6c:c1:
         c0:56:80:4a:11:b3:16:fa:94:25:bf:bb:a8:fc:e6:b6:bf:3d:
         25:8f:6a:1b:58:3a:ae:ef:29:3a:85:c9:3b:f5:48:98:fd:71:
         0b:1f:1b:d6:60:55:c5:55:3b:30:47:7f:94:48:59:b1:e9:5b:
         73:b5:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:22:11 2026 by rpki-client