Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
File:                     HUA-MjAeWHgKBwV8syty7K9G19k.mft (raw, json)
Hash identifier:          BHQq2Zh0nxG2fL3RKaQHtlEskNHwCbjXPDT5KAhaq84=
Subject key identifier:   26:2D:53:5F:E6:48:EE:C7:3A:0E:EA:F7:F8:BC:00:3C:C2:F4:E4:71
Authority key identifier: 1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9
Certificate issuer:       /CN=A91FA645/serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
Certificate serial:       04D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
Manifest number:          04C2
Signing time:             Sat 03 Oct 2026 00:09:12 +0000
Manifest this update:     Sat 03 Oct 2026 00:09:12 +0000
Manifest next update:     Sat 10 Oct 2026 00:09:12 +0000
Files and hashes:         1: HUA-MjAeWHgKBwV8syty7K9G19k.crl (hash: 0rfu3KgFWOE1uJrJ3w+jlCRNLyk1kkn1i2RWEw47qfI=)
                          2: F4639D76356211F09A66C487C4F9AE02.roa (hash: TehIHcI/Ic2jvt9hXJYMUfF6bLFAclzND5P83ugZSbo=)
                          3: 76EBCD3E8C9911ECB051A327C4F9AE02.roa (hash: OGqOgm3nQncPcQUxx+QCyB0KfEtllMtvhNbnJdM5GOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl
                          rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 00:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA645, serialNumber=1D403E32301E58780A07057CB32B72ECAF46D7D9
        Validity
            Not Before: Oct  3 00:09:12 2026 GMT
            Not After : Oct 10 00:09:12 2026 GMT
        Subject: CN=6ac047a8-50e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f7:14:f1:a2:66:10:be:c1:56:b6:a2:a9:27:
                    69:45:c0:9a:86:fa:63:72:18:c8:a2:a5:40:59:5f:
                    40:f1:0e:bf:be:75:33:d8:ad:46:70:5f:ab:14:f4:
                    0d:3a:0f:d2:f0:8a:8a:fd:27:cb:1f:8e:13:b4:bc:
                    eb:5c:32:f4:69:55:b1:45:d6:65:dd:69:0a:39:0f:
                    1c:dc:cb:41:b8:5f:f0:e2:da:40:99:c9:80:c3:f0:
                    17:78:25:19:e9:82:df:a5:60:2e:60:3c:46:fd:d6:
                    9f:04:98:27:d9:d4:12:8c:53:d8:62:0f:ed:27:a3:
                    e8:21:52:ac:e5:2a:e8:aa:ac:33:9f:1c:31:e3:cc:
                    fa:4e:aa:b8:14:c5:5a:62:11:47:4f:ee:bf:8b:23:
                    f5:19:c6:76:46:03:e5:5c:d4:a3:f2:b3:67:5a:a3:
                    e8:f0:30:6f:cc:42:72:1a:3e:a3:52:08:73:25:65:
                    7d:f9:ed:8e:4e:ae:27:12:c1:2d:a8:4e:c2:84:76:
                    e4:f5:8b:b5:bd:3f:80:ef:75:ac:fd:be:b5:68:ec:
                    3c:e9:c0:9f:94:8e:56:2a:f2:bb:de:6b:c0:2d:a9:
                    b2:53:98:8b:6b:4b:80:9f:07:66:99:3b:97:29:33:
                    83:6e:33:78:03:81:86:7a:7f:e2:60:78:4f:a2:4b:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2D:53:5F:E6:48:EE:C7:3A:0E:EA:F7:F8:BC:00:3C:C2:F4:E4:71
            X509v3 Authority Key Identifier:
                keyid:1D:40:3E:32:30:1E:58:78:0A:07:05:7C:B3:2B:72:EC:AF:46:D7:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUA-MjAeWHgKBwV8syty7K9G19k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA645/E0D9F3648C9511ECAE4F1D23C4F9AE02/HUA-MjAeWHgKBwV8syty7K9G19k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:51:65:9b:e5:55:a3:98:b7:41:8a:af:91:7d:f7:da:f3:
         e3:3c:dc:5f:32:39:cb:fc:3a:b5:0a:0d:80:b4:72:37:8e:78:
         37:e4:95:f2:54:a7:17:4c:37:95:bc:53:7b:a7:d7:a1:a2:1b:
         9f:aa:0a:b5:58:f9:82:6f:18:f4:4f:24:3b:ea:e5:3d:d7:4c:
         f7:67:6e:11:5e:39:9c:64:63:5f:1e:65:5f:f1:42:7a:db:71:
         82:38:17:8f:9e:63:9b:50:2c:4f:8c:a9:83:32:58:07:f7:a2:
         1f:42:10:b7:bb:c1:f1:d6:83:51:39:ba:9e:10:65:03:ca:6a:
         ad:f6:e3:9e:aa:cf:1e:0b:73:a2:ca:67:a9:ac:e2:67:1f:34:
         14:2a:21:71:2f:74:d3:22:64:d8:cf:80:39:eb:96:79:29:2e:
         9d:4c:15:97:33:5f:30:e3:2c:52:60:3f:a9:fc:86:00:46:12:
         9b:35:ae:0a:88:c9:0f:e0:29:df:20:2b:a3:c5:5b:e8:e8:1c:
         e0:7f:e3:84:67:73:4d:66:0e:90:02:a6:5c:0b:8a:34:56:11:
         10:5c:1d:d5:a4:58:d1:62:5c:e9:9e:aa:d5:e7:13:89:79:52:
         f8:27:ab:8a:87:9c:0e:e2:f8:75:40:86:29:26:81:25:89:38:
         49:f2:36:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:39:22 2026 by rpki-client