Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File:                     hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier:          uu+dK406nsI6QWA66DQcbTto8jvj3MoPG9g/HZDSVLA=
Subject key identifier:   6C:5B:A9:83:0B:D4:E2:A2:A9:06:7C:EF:03:BE:BC:3B:09:A4:C9:76
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer:       /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number:          0154
Signing time:             Wed 19 Aug 2026 05:48:33 +0000
Manifest this update:     Wed 19 Aug 2026 05:48:33 +0000
Manifest next update:     Wed 26 Aug 2026 05:48:33 +0000
Files and hashes:         1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: 80q0MaiUX9bg6saNbZ/70eAP6b9SwJ2uph9uCokWf+M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
                          rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
        Validity
            Not Before: Aug 19 05:48:33 2026 GMT
            Not After : Aug 26 05:48:33 2026 GMT
        Subject: CN=6a8543b1-ceed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:38:9d:2c:f9:28:56:1b:28:15:54:32:33:f8:
                    96:cc:26:75:bf:e6:1d:7d:76:b3:f4:55:d1:8b:a0:
                    95:b1:51:6a:d7:f9:7d:58:80:94:63:56:5e:0a:77:
                    33:39:62:cc:4a:48:04:bb:ce:4c:fa:ed:e4:40:73:
                    59:9b:6b:31:45:24:e2:75:a5:cb:4a:b3:a2:a5:59:
                    d4:8d:7a:01:45:4f:b1:6d:73:15:6b:99:f3:ab:6f:
                    5f:bb:e0:ac:b1:54:e8:20:20:d1:4e:85:05:87:75:
                    75:29:86:fa:da:0e:73:6c:14:f0:c4:83:53:b3:81:
                    7e:55:c6:9c:ca:02:d7:b2:73:2e:25:a9:c1:fb:e1:
                    fd:7d:7f:e0:ea:37:46:fe:f2:ad:d5:70:e3:33:00:
                    19:48:54:0d:97:36:37:6c:4d:aa:43:dd:e5:d0:03:
                    e5:d1:78:3c:fd:a9:78:3d:99:44:99:b8:53:7b:df:
                    da:f7:d8:b1:69:f8:66:f8:45:d6:80:5a:52:4d:64:
                    b6:fd:24:8a:e3:17:31:fe:24:27:d6:40:83:ca:77:
                    64:7f:cb:49:c6:63:72:b7:37:00:04:85:07:2b:f0:
                    94:ff:85:5d:a8:ab:53:ab:38:c0:b0:f1:93:5f:02:
                    d1:57:41:a1:19:87:62:65:82:bc:c9:77:a0:49:65:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5B:A9:83:0B:D4:E2:A2:A9:06:7C:EF:03:BE:BC:3B:09:A4:C9:76
            X509v3 Authority Key Identifier:
                keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:10:51:dc:c7:6a:62:05:73:b7:18:0b:35:4a:a3:17:9e:05:
         f9:96:84:9c:8f:35:a0:8b:55:11:21:96:99:10:02:4f:68:98:
         15:b7:f2:a2:5e:93:75:f6:38:ba:8c:5a:c1:30:47:98:81:c6:
         34:1f:fd:9a:9d:ca:5d:28:1a:38:1d:34:53:d3:f8:f6:3a:ac:
         5c:74:e8:06:2c:0a:d4:3b:3a:8e:7b:b0:09:91:f7:1c:97:7f:
         09:7a:c5:5f:9e:ae:96:6a:d8:ef:92:c1:c7:f1:50:63:59:b5:
         0a:9e:68:40:0b:a2:40:ed:33:28:c1:b9:b0:a1:ed:c5:2a:25:
         82:40:59:7a:d0:f0:09:b5:b7:c5:22:f3:58:a0:70:3b:65:a1:
         67:9c:bd:ed:4f:22:96:e7:8c:63:57:7f:b5:dc:a4:16:a9:f3:
         13:7c:6e:f8:2f:bc:a9:48:fe:62:a8:0a:b1:61:be:fd:a1:b0:
         72:3e:9a:be:84:3c:b4:94:ce:00:f8:48:5a:96:f1:f1:1b:b4:
         95:d8:8f:91:c0:d5:77:c9:1c:30:e5:f2:7a:be:b5:d8:8a:15:
         0e:25:bb:f6:c0:a7:90:fe:48:28:ce:8f:e8:54:64:94:a2:98:
         0a:4a:47:16:5e:64:11:9d:16:77:ec:d2:d5:95:35:04:3a:1e:
         14:a6:21:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMyMEExMTAvBgNVBAUTKDg2MzJDRDI1NjY5REQ4NzIyMDIwNDUxNzQwNkUzRjZC
MkYxMjkyNTEwHhcNMjYwODE5MDU0ODMzWhcNMjYwODI2MDU0ODMzWjAYMRYwFAYD
VQQDEw02YTg1NDNiMS1jZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTidLPkoVhsoFVQyM/iWzCZ1v+YdfXaz9FXRi6CVsVFq1/l9WICUY1ZeCncz
OWLMSkgEu85M+u3kQHNZm2sxRSTidaXLSrOipVnUjXoBRU+xbXMVa5nzq29fu+Cs
sVToICDRToUFh3V1KYb62g5zbBTwxINTs4F+VcacygLXsnMuJanB++H9fX/g6jdG
/vKt1XDjMwAZSFQNlzY3bE2qQ93l0APl0Xg8/al4PZlEmbhTe9/a99ixafhm+EXW
gFpSTWS2/SSK4xcx/iQn1kCDyndkf8tJxmNytzcABIUHK/CU/4VdqKtTqzjAsPGT
XwLRV0GhGYdiZYK8yXegSWUdWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGxbqYML
1OKiqQZ87wO+vDsJpMl2MB8GA1UdIwQYMBaAFIYyzSVmndhyICBFF0BuP2svEpJR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzIwQS84MEFBRUQ4Mjk1
NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJISWdJRVVYUUc0X2F5OFNr
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hqTE5KV2FkMkhJZ0lFVVhRRzRfYXk4U2tsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzIwQS84MEFBRUQ4Mjk1NzQxMUVGODVFMEZCMjBDNEY5QUUwMi9oakxOSldhZDJI
SWdJRVVYUUc0X2F5OFNrbEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhRBR3MdqYgVztxgLNUqjF54F+ZaEnI81oItVESGWmRACT2iYFbfyol6TdfY4
uoxawTBHmIHGNB/9mp3KXSgaOB00U9P49jqsXHToBiwK1Ds6jnuwCZH3HJd/CXrF
X56ulmrY75LBx/FQY1m1Cp5oQAuiQO0zKMG5sKHtxSolgkBZetDwCbW3xSLzWKBw
O2WhZ5y97U8ilueMY1d/tdykFqnzE3xu+C+8qUj+YqgKsWG+/aGwcj6avoQ8tJTO
APhIWpbx8Ru0ldiPkcDVd8kcMOXyer612IoVDiW79sCnkP5IKM6P6FRklKKYCkpH
Fl5kEZ0Wd+zS1ZU1BDoeFKYhCQ==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:47:06 2026 by rpki-client