Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          6QB7V1B/BGAfqisYc9sV94nTtAAoGCzMly8PlqEzGSA=
Subject key identifier:   A0:C3:55:71:CA:38:3C:14:72:78:F8:6F:AC:85:04:E8:B5:F7:E7:82
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          078A
Signing time:             Tue 18 Aug 2026 21:57:28 +0000
Manifest this update:     Tue 18 Aug 2026 21:57:27 +0000
Manifest next update:     Tue 25 Aug 2026 21:57:27 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: Z+SomoA/zzYpPQ0m0ndQMTEWn2zNJply69tuKE43Sqw=)
                          2: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: WeQVo7fwV+V9bl8424+RhWXTOrNJfa47Vs9LGPlEi9s=)
                          3: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: 92S13xMUtTa9ngZEJpHZILOhTqRPbqcQrnmdTEujx6o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Aug 18 21:57:27 2026 GMT
            Not After : Aug 25 21:57:27 2026 GMT
        Subject: CN=6a84d548-2b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:d9:f1:5c:f2:6d:73:b3:29:cb:f0:00:c4:
                    75:15:a5:ed:f4:18:62:4d:b4:34:a6:45:a9:5b:b9:
                    7a:b4:5d:26:a6:a1:31:c5:67:8f:26:ff:af:f4:cf:
                    03:8f:f6:1b:25:e3:c6:1a:06:ca:53:b0:7d:09:02:
                    05:b0:1e:e2:2c:aa:78:22:9a:7d:fc:95:37:3e:8c:
                    82:ee:72:3d:3b:78:a9:79:f1:d0:7d:82:8a:d3:76:
                    a4:d8:4b:a0:0f:2e:48:4f:ee:e8:47:a8:06:36:20:
                    15:84:ea:b3:bb:96:04:da:4a:5e:10:7b:0b:97:65:
                    46:62:23:e6:d2:fa:f3:75:33:eb:bd:89:e0:10:31:
                    aa:e0:05:00:c7:3f:36:81:f4:16:e3:94:e0:e7:a8:
                    a1:cf:26:7c:22:7a:f3:bb:5a:7a:6f:81:d6:3b:2f:
                    1e:6e:de:fc:21:0b:60:ab:83:1d:48:4e:67:2d:5a:
                    71:6d:0f:b9:9b:a3:f9:c5:88:cd:a9:35:e4:c1:90:
                    d3:29:66:9b:e4:ba:29:f1:2e:14:0a:f2:4d:ef:05:
                    9c:51:b8:6a:5e:0d:5e:16:c5:ff:39:41:07:5e:b1:
                    59:cd:f8:5b:f7:f3:b0:82:cd:c4:1b:05:dd:6e:02:
                    74:0c:61:fb:b4:55:64:66:fb:9b:47:1e:a9:5e:02:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C3:55:71:CA:38:3C:14:72:78:F8:6F:AC:85:04:E8:B5:F7:E7:82
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:26:4b:39:2d:b4:d0:ab:c3:ae:7d:d1:f5:94:74:70:1b:
         d8:7b:b5:8c:29:6a:cd:13:52:b5:bd:8f:6a:b1:9a:2d:0e:d8:
         4c:0f:b8:cb:25:7d:2d:d1:91:e4:6e:f0:60:8a:91:ed:b9:94:
         00:a8:b5:8d:73:46:cf:45:2a:da:bd:5c:b3:c8:17:86:44:54:
         2b:33:66:f6:00:df:0c:80:a0:04:f6:f1:23:d7:e7:25:8c:16:
         b4:a1:e5:09:df:60:6c:04:05:39:b5:4b:05:ee:b3:90:ce:53:
         d7:2f:43:23:7b:54:1b:b2:41:d3:bb:f3:74:91:45:a2:73:66:
         15:c3:72:5d:c1:aa:5a:07:61:4c:78:e3:f1:07:ce:fa:06:1a:
         17:0c:3f:b5:56:c2:3d:bd:b6:9d:ba:e2:29:81:3f:01:cf:8e:
         4c:e3:cd:7e:8b:22:f3:a0:79:3f:96:ba:93:11:75:53:73:29:
         8e:35:f7:12:23:7e:f3:b0:e7:df:f5:0c:85:6e:4e:0c:d9:48:
         a3:c7:4a:00:df:e9:7a:3c:fc:47:90:84:bc:83:c5:f6:e7:73:
         78:66:6d:4e:99:58:06:70:fd:1b:d7:68:03:fd:71:79:1b:ea:
         80:ed:85:56:57:3b:bf:cc:5d:eb:12:a5:97:30:e1:9d:2c:3a:
         9e:76:44:3e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2MDYxMTAvBgNVBAUTKDFFMTZGODNEMEM0MDMzNUQ3OTZCRTVCQTIxQzkwQ0JF
RTk5NzU5QkMwHhcNMjYwODE4MjE1NzI3WhcNMjYwODI1MjE1NzI3WjAYMRYwFAYD
VQQDEw02YTg0ZDU0OC0yYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtWXZ8VzybXOzKcvwAMR1FaXt9BhiTbQ0pkWpW7l6tF0mpqExxWePJv+v9M8D
j/YbJePGGgbKU7B9CQIFsB7iLKp4Ipp9/JU3PoyC7nI9O3ipefHQfYKK03ak2Eug
Dy5IT+7oR6gGNiAVhOqzu5YE2kpeEHsLl2VGYiPm0vrzdTPrvYngEDGq4AUAxz82
gfQW45Tg56ihzyZ8Inrzu1p6b4HWOy8ebt78IQtgq4MdSE5nLVpxbQ+5m6P5xYjN
qTXkwZDTKWab5Lop8S4UCvJN7wWcUbhqXg1eFsX/OUEHXrFZzfhb9/Owgs3EGwXd
bgJ0DGH7tFVkZvubRx6pXgIThQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKDDVXHK
ODwUcnj4b6yFBOi19+eCMB8GA1UdIwQYMBaAFB4W+D0MQDNdeWvluiHJDL7pl1m8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTYwNi85NDBDNUQ5Qzcx
MDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0xMTVhLVc2SWNrTXZ1bVhX
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hoYjRQUXhBTTExNWEtVzZJY2tNdnVtWFdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTYwNi85NDBDNUQ5QzcxMDIxMUVCODcwNzNCNzBDNEY5QUUwMi9IaGI0UFF4QU0x
MTVhLVc2SWNrTXZ1bVhXYncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASx8mSzkttNCrw6590fWUdHAb2Hu1jClqzRNStb2ParGaLQ7YTA+4yyV9LdGR
5G7wYIqR7bmUAKi1jXNGz0Uq2r1cs8gXhkRUKzNm9gDfDICgBPbxI9fnJYwWtKHl
Cd9gbAQFObVLBe6zkM5T1y9DI3tUG7JB07vzdJFFonNmFcNyXcGqWgdhTHjj8QfO
+gYaFww/tVbCPb22nbriKYE/Ac+OTOPNfosi86B5P5a6kxF1U3MpjjX3EiN+87Dn
3/UMhW5ODNlIo8dKAN/pejz8R5CEvIPF9udzeGZtTplYBnD9G9doA/1xeRvqgO2F
Vlc7v8xd6xKllzDhnSw6nnZEPg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:43 2026 by rpki-client