Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          Kut0poq5NFJ6Nttjjvi/BLBvOnz7KSUPU8RDmKkmyvA=
Subject key identifier:   B2:1B:A7:2D:39:37:7D:30:9C:F5:AD:71:3A:30:37:29:47:91:4D:39
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       361E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          35D0
Signing time:             Tue 18 Aug 2026 14:16:13 +0000
Manifest this update:     Tue 18 Aug 2026 14:16:13 +0000
Manifest next update:     Tue 25 Aug 2026 14:16:13 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: YSp87yvLqqQLsFz9N4RQNT+1fUD/6nDQ6lR35rPj4+I=)
                          2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: ODWKcUe3z5vKtDIj0xaFZ5y/WUcNqtmAta/zMVOpKQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13854 (0x361e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: Aug 18 14:16:13 2026 GMT
            Not After : Aug 25 14:16:13 2026 GMT
        Subject: CN=6a84692d-4fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:37:12:9e:28:db:05:fb:b3:73:75:e8:68:
                    62:d2:c8:eb:c6:0a:5e:9e:44:c2:73:cc:84:5d:ed:
                    96:62:14:53:d3:2f:d2:e2:6f:2c:dd:cf:b1:fc:98:
                    ac:54:67:22:3a:fc:3e:e4:a7:ce:9b:66:a2:e2:89:
                    7d:0c:ec:1c:c9:8f:e1:72:e8:8c:b0:2d:d7:dd:2d:
                    07:8d:13:f3:13:bb:cd:07:fd:42:61:a9:a3:a3:96:
                    bd:f9:f6:8c:b7:de:d6:c3:d3:51:ee:0e:06:cc:50:
                    aa:66:e6:e4:e3:cb:f9:3a:cd:56:77:79:a7:f7:34:
                    ff:e5:f1:ca:5c:8d:7b:1c:62:c1:08:47:aa:3b:b0:
                    29:b2:ca:4f:9c:b5:f7:29:47:94:3a:8d:88:95:ce:
                    fc:df:c8:ff:69:58:2d:84:6d:49:b3:0b:d0:c2:5c:
                    46:f2:b0:4c:37:f1:c0:05:43:67:23:bd:5b:8f:6e:
                    af:4b:2f:43:02:e1:53:ee:23:07:b8:d2:31:81:6c:
                    32:5e:ce:cf:f8:e1:23:66:2e:23:c1:ac:10:96:f7:
                    4c:f2:e8:de:a7:1a:7b:0a:9d:51:1f:35:cc:5e:cb:
                    45:ad:6d:64:80:d3:f0:06:e4:75:1a:eb:50:f9:e1:
                    86:13:c2:27:33:51:67:e7:f1:55:4b:23:cf:73:3b:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1B:A7:2D:39:37:7D:30:9C:F5:AD:71:3A:30:37:29:47:91:4D:39
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b9:6f:04:cf:3d:73:88:a0:ea:12:11:41:b3:98:d4:ba:be:
         69:56:78:61:d1:a5:44:8e:b2:ea:51:28:8d:e5:6c:c0:50:5d:
         e9:a1:9d:18:04:39:36:4d:d9:53:99:c4:30:68:b7:2a:51:df:
         c9:c1:c6:30:68:d6:91:86:49:b9:ff:48:e5:5d:93:1f:48:40:
         43:25:0f:62:79:56:99:5a:b7:66:03:4c:8b:47:96:5f:f8:6e:
         85:c2:d9:c5:f4:b4:50:08:1f:f4:31:27:9a:38:f9:a2:cc:eb:
         7d:e4:0b:ce:ca:a1:81:d7:54:1d:e0:b3:01:9b:c0:bf:68:84:
         b7:59:81:69:9d:8f:9c:0f:3e:c5:d7:21:6a:76:aa:10:00:0a:
         7f:d1:ff:61:fa:c8:15:88:4c:aa:58:02:ea:52:e8:65:81:26:
         ff:66:b2:22:1d:7f:08:5d:01:ff:84:5f:ae:5d:9b:52:a1:dd:
         6c:f6:42:f7:59:6a:1a:37:ec:43:a5:f6:9b:92:4c:63:96:a1:
         02:b6:99:6b:35:9d:59:2c:fc:d7:52:d5:47:ae:90:92:ca:38:
         45:0c:d3:95:ed:0d:e3:2d:9a:d5:de:17:59:da:61:72:07:d2:
         a9:6d:84:65:7e:4f:88:0d:b6:45:5a:67:26:81:04:9e:bf:9e:
         1b:8e:46:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:33 2026 by rpki-client