Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
File:                     hcB2_Z7Aaao764dTTpR6icQ9lso.mft (raw, json)
Hash identifier:          qplTVQ899FqHAXyKZxwOUisJIHfrgD78L16kpcVRa2g=
Subject key identifier:   B7:B6:92:79:D5:85:7D:96:78:5E:DF:49:8D:36:35:58:13:E7:00:EA
Authority key identifier: 85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA
Certificate issuer:       /CN=A91E5EB9/serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
Certificate serial:       32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
Manifest number:          31
Signing time:             Sat 03 Oct 2026 09:24:44 +0000
Manifest this update:     Sat 03 Oct 2026 09:24:43 +0000
Manifest next update:     Sat 10 Oct 2026 09:24:43 +0000
Files and hashes:         1: hcB2_Z7Aaao764dTTpR6icQ9lso.crl (hash: e1EpzktMn+the0eLLEh3WaU+E7Cfd/hzmZw16q0jrUM=)
                          2: 6681AA1A751811F1800E092372A30FBC.roa (hash: 5JMpNNlty75w+8UJcE4/wOIgirIQlenHvY9/D//OZuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 09:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EB9, serialNumber=85C076FD9EC069AA3BEB87534E947A89C43D96CA
        Validity
            Not Before: Oct  3 09:24:43 2026 GMT
            Not After : Oct 10 09:24:43 2026 GMT
        Subject: CN=6ac0c9dc-4ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ed:20:b6:0d:7c:a0:2e:bf:03:5f:d3:1c:83:
                    99:0e:01:42:97:ad:3d:80:ee:58:fa:4a:ee:bf:3b:
                    9d:1b:34:75:d8:a6:05:bb:36:cf:d0:c0:89:f7:89:
                    9d:89:82:c5:77:ae:9f:2c:e8:72:92:b9:c2:af:c0:
                    25:db:04:3f:23:89:62:42:19:f5:43:72:a9:14:c0:
                    51:99:9c:3c:f6:b4:da:6d:37:ee:5b:33:1a:cf:bb:
                    ca:1f:fa:66:3b:ed:1b:16:f0:e9:ac:e9:e0:c4:87:
                    d8:1d:06:83:d6:98:87:65:c1:ec:9b:0b:ba:a6:3a:
                    3e:bf:3c:c5:18:a5:20:c8:e6:62:3c:e2:ca:45:da:
                    59:da:a0:45:9b:24:09:7a:f9:7d:04:af:34:59:98:
                    16:b4:6b:55:3c:55:59:c1:8c:c8:9c:2d:e7:95:b4:
                    b9:d9:f8:95:50:cc:54:39:7d:ac:3d:ba:f6:06:fb:
                    46:88:f8:c3:9e:47:7c:a5:d8:ba:a9:4b:35:99:4a:
                    8c:3b:d8:80:d4:3a:4a:5a:b0:b8:c3:31:0f:2d:1f:
                    62:57:5d:d7:3e:06:d4:16:0a:bd:18:67:cd:aa:52:
                    53:56:f0:32:a6:48:b5:b6:ef:fe:61:fc:bf:df:bf:
                    b2:39:1e:65:e7:49:04:cf:5b:5f:56:ea:9b:e5:1b:
                    ed:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B6:92:79:D5:85:7D:96:78:5E:DF:49:8D:36:35:58:13:E7:00:EA
            X509v3 Authority Key Identifier:
                keyid:85:C0:76:FD:9E:C0:69:AA:3B:EB:87:53:4E:94:7A:89:C4:3D:96:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hcB2_Z7Aaao764dTTpR6icQ9lso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EB9/9F25AC0A751711F188B09F1E72A30FBC/hcB2_Z7Aaao764dTTpR6icQ9lso.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:82:ad:2a:2a:a5:77:75:19:d2:78:51:38:87:60:55:28:3b:
         34:25:62:49:03:6e:13:6a:f6:1e:da:43:11:67:b8:56:fe:3a:
         01:6a:e9:8b:e6:c5:36:29:8e:e4:8b:c0:b7:07:06:73:e9:6d:
         51:5e:b4:d7:dc:42:73:85:72:9c:cf:a8:22:af:45:57:ac:9f:
         7f:1c:d3:df:9a:53:4d:97:2e:81:fd:c3:26:32:f7:04:d8:77:
         73:00:2b:db:43:6f:02:34:6f:05:73:74:b8:b5:5e:6a:be:1b:
         b8:26:bf:c4:89:f1:f8:a8:56:75:9e:ee:51:79:95:d7:4c:50:
         2a:20:59:67:95:99:81:c9:af:4c:19:e6:5c:a9:e0:75:bd:4d:
         f9:8b:07:8b:4e:9f:86:30:69:da:fb:3e:e4:ee:da:7a:7f:f8:
         67:29:b9:a2:01:f6:5a:59:2e:cb:11:bf:ec:43:2a:c3:00:34:
         35:8f:79:c5:db:44:76:76:ab:7c:46:86:46:91:b3:fe:75:48:
         39:ec:50:ed:a9:0f:ee:13:17:f6:b5:7f:c6:8b:b3:8e:eb:2b:
         7f:ea:d9:d7:30:d4:87:08:72:38:09:d0:23:fe:0e:8b:28:43:
         b9:72:9f:1d:d4:7b:59:0f:a6:41:87:fe:96:96:6d:92:44:8b:
         7e:a2:0a:9a
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NUVCOTExMC8GA1UEBRMoODVDMDc2RkQ5RUMwNjlBQTNCRUI4NzUzNEU5NDdBODlD
NDNEOTZDQTAeFw0yNjEwMDMwOTI0NDNaFw0yNjEwMTAwOTI0NDNaMBgxFjAUBgNV
BAMTDTZhYzBjOWRjLTRlYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC57SC2DXygLr8DX9Mcg5kOAUKXrT2A7lj6Su6/O50bNHXYpgW7Ns/QwIn3iZ2J
gsV3rp8s6HKSucKvwCXbBD8jiWJCGfVDcqkUwFGZnDz2tNptN+5bMxrPu8of+mY7
7RsW8Oms6eDEh9gdBoPWmIdlweybC7qmOj6/PMUYpSDI5mI84spF2lnaoEWbJAl6
+X0ErzRZmBa0a1U8VVnBjMicLeeVtLnZ+JVQzFQ5faw9uvYG+0aI+MOeR3yl2Lqp
SzWZSow72IDUOkpasLjDMQ8tH2JXXdc+BtQWCr0YZ82qUlNW8DKmSLW27/5h/L/f
v7I5HmXnSQTPW19W6pvlG+0vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUt7aSedWF
fZZ4Xt9JjTY1WBPnAOowHwYDVR0jBBgwFoAUhcB2/Z7Aaao764dTTpR6icQ9lsow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1RUI5LzlGMjVBQzBBNzUx
NzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFvNzY0ZFRUcFI2aWNROWxz
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaGNCMl9aN0FhYW83NjRkVFRwUjZpY1E5bHNvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1
RUI5LzlGMjVBQzBBNzUxNzExRjE4OEIwOUYxRTcyQTMwRkJDL2hjQjJfWjdBYWFv
NzY0ZFRUcFI2aWNROWxzby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQDUgq0qKqV3dRnSeFE4h2BVKDs0JWJJA24TavYe2kMRZ7hW/joBaumL5sU2KY7k
i8C3BwZz6W1RXrTX3EJzhXKcz6gir0VXrJ9/HNPfmlNNly6B/cMmMvcE2HdzACvb
Q28CNG8Fc3S4tV5qvhu4Jr/EifH4qFZ1nu5ReZXXTFAqIFlnlZmBya9MGeZcqeB1
vU35iweLTp+GMGna+z7k7tp6f/hnKbmiAfZaWS7LEb/sQyrDADQ1j3nF20R2dqt8
RoZGkbP+dUg57FDtqQ/uExf2tX/Gi7OO6yt/6tnXMNSHCHI4CdAj/g6LKEO5cp8d
1HtZD6ZBh/6Wlm2SRIt+ogqa
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:59:55 2026 by rpki-client