Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File:                     hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier:          bhpk3xRTeHP5HeHihMAqF3K94BwzBZhPJ47kYrME5WE=
Subject key identifier:   8E:C9:C7:13:0F:25:FB:2A:3E:62:7D:EF:22:40:44:4F:82:53:B6:97
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number:          0145
Signing time:             Mon 01 Jun 2026 06:06:06 +0000
Manifest this update:     Mon 01 Jun 2026 06:06:06 +0000
Manifest next update:     Mon 08 Jun 2026 06:06:06 +0000
Files and hashes:         1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: +I1U3g/tysI3H8uo2LEW9PmvKawA4L/C0lUwrM3o37g=)
                          2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: tcJP6ckIisiXaSRaPvtWnl6KwRGfZck/uk3eudyqJEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 06:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Jun  1 06:06:06 2026 GMT
            Not After : Jun  8 06:06:06 2026 GMT
        Subject: CN=6a1d214e-2379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5a:9d:62:53:94:84:d6:5b:ba:7c:22:24:27:
                    2d:2e:f4:4c:25:26:d5:02:8a:32:9c:18:df:21:69:
                    0a:51:b6:85:b0:fa:55:dc:55:42:98:4a:1f:ed:f1:
                    74:a0:e7:af:08:bd:f6:a9:ac:8c:23:b1:e2:50:ab:
                    16:d1:22:98:9d:a9:03:34:f6:6b:de:ff:58:93:bd:
                    0a:8f:bf:5d:85:a0:9f:0a:c2:f2:17:59:45:97:de:
                    4d:f7:a4:73:d3:cb:f0:e0:41:39:c5:f7:6c:79:fa:
                    8a:90:f1:b7:39:93:4b:79:6a:d1:6a:86:9e:e5:43:
                    e0:ef:03:13:b5:d8:6a:d1:10:92:7b:e9:58:82:3d:
                    3e:df:70:01:dd:58:41:ee:e3:1e:8c:31:b7:47:0d:
                    60:01:fa:bd:4d:39:12:6d:d5:51:fe:59:35:74:d5:
                    a4:cd:f9:91:f0:10:0a:89:06:fc:fc:2d:8d:5a:6e:
                    e3:8e:7b:c6:a4:09:13:a3:ea:04:b8:39:30:a7:0f:
                    48:26:63:9f:80:42:73:ea:3b:d1:a7:59:26:e9:f7:
                    66:8d:58:48:42:0a:9d:c1:4d:09:2f:b2:66:99:8d:
                    8f:4e:c1:0e:7b:ee:e8:0b:0a:e1:57:4c:28:2e:7b:
                    9e:cf:4b:47:62:ff:c5:ca:16:3a:85:2c:73:ea:72:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:C7:13:0F:25:FB:2A:3E:62:7D:EF:22:40:44:4F:82:53:B6:97
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b3:2a:f0:ae:a7:2f:24:0b:4a:d8:d1:db:7f:b4:a2:62:e7:
         3b:1f:f4:8d:bd:97:fc:3d:79:87:c6:9f:e4:e1:78:d2:b1:38:
         39:98:2d:49:f6:27:41:9d:f3:c3:ec:8a:a6:3a:31:f5:66:f2:
         d1:2e:f3:55:c3:65:87:75:f0:55:81:a4:ff:8d:98:fe:ce:19:
         a7:df:7f:fd:c6:23:6d:38:e8:74:1b:6f:66:0f:ad:67:b3:4c:
         04:e2:cc:a6:a9:20:69:5f:0b:98:2b:1a:73:62:42:74:5d:ad:
         c9:1e:69:9c:20:5a:0b:fb:6b:8b:e1:d0:6a:91:da:20:21:3b:
         23:8b:88:38:7d:01:e1:7f:77:6f:0b:03:d7:37:b3:9a:a8:07:
         23:0b:87:47:a6:db:30:72:6a:03:90:6b:af:74:49:e3:87:0c:
         c7:0b:4a:30:2f:7f:fb:36:03:35:e9:99:60:aa:ae:e2:9b:d2:
         4b:59:43:28:d5:15:0e:7f:bf:8d:94:b8:e5:87:ea:c0:86:aa:
         d6:35:56:74:52:27:1f:6f:3b:ef:5a:52:6b:11:7a:f3:fa:53:
         f3:8a:32:e7:d6:67:4c:70:ef:75:98:72:0f:36:71:10:54:36:
         50:cd:2f:cd:c1:ca:b1:7b:3b:8a:ab:77:62:8d:e4:7f:85:86:
         f4:41:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:57 2026 by rpki-client