Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
File:                     HlpjIbEaoIRvqJvxObzs2604vjc.mft (raw, json)
Hash identifier:          iCqUzl+pHvam5VLCgyynlsq3/7SIYFudGfEjQwKzY5s=
Subject key identifier:   20:44:02:09:5D:2F:77:44:B0:62:52:29:47:66:2D:6F:42:2C:98:37
Authority key identifier: 1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37
Certificate issuer:       /CN=A91C9D76/serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
Certificate serial:       3639
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
Manifest number:          35EA
Signing time:             Sun 04 Oct 2026 14:16:07 +0000
Manifest this update:     Sun 04 Oct 2026 14:16:06 +0000
Manifest next update:     Sun 11 Oct 2026 14:16:06 +0000
Files and hashes:         1: HlpjIbEaoIRvqJvxObzs2604vjc.crl (hash: YH21G5L8QpjO96hqhXZWmKXUTl/gQrB1YM5LBSWnFlE=)
                          2: 0997A5828A1511F09F6EBD2BC4F9AE02.roa (hash: fh/tVUPGS+UXg+acYtuJo5G4hja8nzeWl7IkiWlXYc0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 14:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13881 (0x3639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D76, serialNumber=1E5A6321B11AA0846FA89BF139BCECDBAD38BE37
        Validity
            Not Before: Oct  4 14:16:06 2026 GMT
            Not After : Oct 11 14:16:06 2026 GMT
        Subject: CN=6ac25fa7-ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:1c:6c:80:3d:e2:e1:a3:b0:15:6d:f7:88:
                    c6:35:8e:88:14:3a:35:3b:47:85:00:61:78:bb:f1:
                    a9:8e:6f:1c:6e:cc:13:74:9f:ab:44:5c:e1:08:d1:
                    95:f3:99:0b:8a:6e:7b:69:78:33:89:55:87:d5:7e:
                    92:83:32:db:24:69:f3:e4:81:81:1a:65:34:66:fd:
                    6b:f5:1b:b5:48:3e:2c:ed:2c:52:1e:36:e0:16:4f:
                    6e:50:65:1b:68:3f:dd:89:96:96:e2:e1:fe:15:e4:
                    59:24:ca:ab:f6:0f:c5:bb:7a:f4:e0:86:aa:55:5e:
                    b3:03:3c:47:7b:58:89:a6:35:b0:ba:13:d0:dc:00:
                    0c:b0:8e:85:90:ec:f2:4a:e9:8f:71:19:8e:c0:a3:
                    f5:67:39:8b:9f:b2:d4:f8:c3:0b:22:14:e4:99:1e:
                    4a:0d:51:98:2f:52:48:c0:9a:8f:66:80:88:b6:b2:
                    44:81:94:11:e8:df:82:58:66:06:4d:55:13:18:c2:
                    75:8a:e6:49:09:5d:8d:3a:f3:29:20:31:d2:b4:3f:
                    ec:ca:4c:4a:76:9f:0b:a4:7e:7f:ff:c3:4d:2b:cd:
                    a9:f5:5e:67:17:dc:45:22:7f:cf:20:12:08:7f:28:
                    78:b0:62:70:50:0e:1e:af:b2:80:d7:65:bf:e1:3f:
                    7b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:44:02:09:5D:2F:77:44:B0:62:52:29:47:66:2D:6F:42:2C:98:37
            X509v3 Authority Key Identifier:
                keyid:1E:5A:63:21:B1:1A:A0:84:6F:A8:9B:F1:39:BC:EC:DB:AD:38:BE:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlpjIbEaoIRvqJvxObzs2604vjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D76/6287A1141D6911E288ABA9A608B02CD2/HlpjIbEaoIRvqJvxObzs2604vjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:f2:b2:3b:65:a1:1b:45:9f:7b:01:87:66:2f:df:b4:41:
         fc:a8:cb:41:2c:46:c3:6c:af:c2:96:e5:0b:90:b3:a5:d2:ed:
         69:57:e0:46:ec:35:6d:ad:c8:50:09:26:9c:21:a5:97:fc:93:
         b1:41:92:61:92:f2:e6:3b:00:df:20:a5:e5:22:a2:91:84:43:
         3c:d2:77:13:1a:41:1d:07:e0:af:3f:a6:2c:b4:c6:c2:f1:63:
         0d:64:5b:e2:9c:d3:c1:07:71:bb:81:49:07:90:e8:55:a9:61:
         75:ad:9c:b6:61:d6:f8:74:d2:49:64:29:12:80:fd:24:55:58:
         37:4b:ea:61:05:ce:f1:f4:10:ee:ba:3a:9d:82:70:b4:65:57:
         e8:42:cc:3b:6f:df:2e:4c:01:43:fb:53:87:40:49:f1:dd:38:
         e1:73:5a:c3:74:83:75:15:bb:00:02:ca:76:ad:60:e2:34:f7:
         69:dd:21:b8:e0:ac:8e:b8:10:37:1a:16:06:16:39:e3:39:56:
         b6:1a:a7:64:88:f0:87:d8:c4:ff:4e:5a:df:8c:5a:58:72:25:
         1d:1f:6e:04:da:b9:d0:35:4e:de:7c:c4:86:55:60:03:09:ee:
         34:7a:d5:00:8e:60:cc:47:f9:20:68:50:a0:ba:d6:d2:06:50:
         6e:35:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:14:45 2026 by rpki-client