Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
File:                     Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft (raw, json)
Hash identifier:          6rmw8tT2X/KJ3V6lRPNcnTIUgdq7u8Z5f6am9OHKahA=
Subject key identifier:   93:FD:29:A9:EE:48:0A:34:45:EE:79:F4:B7:6E:CD:77:CA:12:E5:58
Authority key identifier: 1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7
Certificate issuer:       /CN=A91F5BCC/serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
Certificate serial:       014C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
Manifest number:          0148
Signing time:             Mon 05 Oct 2026 05:44:17 +0000
Manifest this update:     Mon 05 Oct 2026 05:44:17 +0000
Manifest next update:     Mon 12 Oct 2026 05:44:17 +0000
Files and hashes:         1: Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl (hash: mvyxFkYd9w8aF/WaPnjfztgJtbEJKiOJ8zrxeiXAiQw=)
                          2: 7A092C88E9E211EFAD188675C4F9AE02.roa (hash: VYzj3AeenQpibuJcJi+RGSfALT2kN6QBqvlUfKfEKWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl
                          rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5BCC, serialNumber=1E48EFE53E62ED204BA7A694384CBAC9246794A7
        Validity
            Not Before: Oct  5 05:44:17 2026 GMT
            Not After : Oct 12 05:44:17 2026 GMT
        Subject: CN=6ac33931-aeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:85:54:91:3c:cc:1d:86:2a:27:fe:14:c9:
                    2d:cb:7d:87:c5:6c:a8:9f:6b:5e:cf:38:1c:b4:b3:
                    7c:9c:16:bb:b2:e3:50:3a:3f:73:59:d9:a7:2b:e9:
                    01:2f:14:9b:32:3c:ea:fd:0c:40:63:20:f9:3a:12:
                    03:77:75:e4:b2:28:67:a7:90:51:51:dd:2b:91:66:
                    68:31:4a:58:08:52:a5:81:5b:0e:8d:65:6d:bd:26:
                    0a:c5:4b:65:ff:34:7a:c9:bf:c1:cf:0e:0b:eb:30:
                    53:31:db:20:cf:44:78:5d:3f:66:bb:e8:97:c3:5d:
                    c6:83:5a:78:1e:97:4b:20:44:50:87:3e:0c:95:7b:
                    e2:57:9a:db:32:26:f6:0e:34:f3:c0:5d:c1:41:10:
                    cf:1d:74:e9:ca:ad:cd:97:84:a5:b8:be:06:23:fd:
                    b9:86:cf:2b:c1:df:ac:5c:a2:9e:be:22:74:ad:14:
                    30:90:eb:a1:ee:2b:38:b1:9a:90:12:2c:54:29:96:
                    bd:83:d1:71:06:34:d4:bf:47:f4:18:43:a8:e0:f7:
                    6b:e8:d2:a5:18:20:6f:fb:85:0b:a7:fd:4e:da:9b:
                    49:b9:4c:85:d1:c1:ac:00:ad:7e:cf:75:9a:2d:fe:
                    50:ea:95:fb:db:5b:f2:89:87:0a:c6:0f:3c:a9:c4:
                    a7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FD:29:A9:EE:48:0A:34:45:EE:79:F4:B7:6E:CD:77:CA:12:E5:58
            X509v3 Authority Key Identifier:
                keyid:1E:48:EF:E5:3E:62:ED:20:4B:A7:A6:94:38:4C:BA:C9:24:67:94:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B9588BACCE7811EF80EF4D44C4F9AE02/Hkjv5T5i7SBLp6aUOEy6ySRnlKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:5d:14:7e:32:f3:4d:9d:bf:69:9f:b1:bf:7b:18:7b:73:
         6d:68:c1:ad:0a:ef:af:30:4f:4d:4f:48:b9:b9:94:fd:94:19:
         c9:c0:c4:8c:a9:a2:27:a6:d3:8c:76:57:70:24:3b:d1:6d:68:
         fc:d0:05:c9:e6:69:4e:a5:a7:06:57:0a:ea:5b:03:73:74:42:
         d1:ec:d5:d1:8f:76:a2:b2:8d:ae:98:d7:06:58:0d:84:b9:ff:
         e9:a4:7a:3b:a8:58:48:51:57:0c:bc:0a:3d:0c:fc:36:b0:3e:
         e5:d5:0e:20:1c:63:db:8d:43:08:78:a4:75:2c:44:8d:61:a5:
         ec:e4:bf:e4:fa:8a:55:16:2a:c3:88:9d:84:66:d8:89:90:de:
         27:7a:77:54:63:55:8f:f7:71:21:1d:85:51:45:9e:66:cf:bf:
         3b:5a:ca:08:ad:9f:43:48:1f:f7:20:a0:2a:f9:01:89:9b:ce:
         c5:c6:cd:c1:01:1b:ca:af:fa:70:43:05:1b:3d:c6:a0:b9:13:
         83:5c:e7:d7:99:bb:d7:e8:8f:ad:a3:98:4a:c1:fe:69:96:1c:
         03:26:f5:44:74:ed:64:66:75:a7:e7:4f:5d:da:a8:84:2e:bc:
         53:54:d5:db:27:04:e2:c7:5a:70:cc:c7:cc:85:91:fe:40:25:
         86:60:9c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 22:45:45 2026 by rpki-client