Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
File:                     HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json)
Hash identifier:          WGztbHphri0b075xZMzwMKEd1aQWPIiophwksnfan0o=
Subject key identifier:   33:BF:7B:4E:AD:7E:87:08:3C:2F:88:2D:1F:46:56:5C:9E:9C:A5:9A
Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12
Certificate issuer:       /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
Certificate serial:       0848
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
Manifest number:          083E
Signing time:             Tue 18 Aug 2026 21:23:51 +0000
Manifest this update:     Tue 18 Aug 2026 21:23:50 +0000
Manifest next update:     Tue 25 Aug 2026 21:23:50 +0000
Files and hashes:         1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: pL+vKXycTW8+8nbVg7/xPLcBZtRcrTc5kUbLvCcvkLA=)
                          2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: 4sy5bo4x5IejnxnpTcgGrJIpJDDeVrJ7W1QqzKsRoZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl
                          rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412
        Validity
            Not Before: Aug 18 21:23:50 2026 GMT
            Not After : Aug 25 21:23:50 2026 GMT
        Subject: CN=6a84cd66-0648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:b5:e6:4d:fa:39:20:6c:26:2c:8b:78:98:
                    4a:c3:65:7c:fb:17:70:cb:24:0d:4c:db:cf:63:74:
                    96:aa:f3:5f:34:22:c6:16:d1:6b:3e:d9:0c:bf:ab:
                    c5:46:97:5c:11:9e:f0:e7:12:b6:95:8c:49:22:c5:
                    2e:be:e0:5e:c6:af:1f:3f:9a:52:4b:59:3f:a8:98:
                    44:2d:0c:ee:0b:de:c9:dd:02:54:49:ec:ab:38:01:
                    49:df:6f:a0:92:4f:90:0a:08:4a:88:14:8c:74:1a:
                    f6:f8:b6:97:9c:cf:e8:49:f9:d1:80:bf:c3:fb:1b:
                    d2:d1:31:d6:28:80:5c:23:a0:36:9b:8c:26:e5:07:
                    97:3a:c5:3a:2e:d9:42:ad:d2:9a:12:fc:7c:c7:95:
                    f0:6e:bf:73:16:9d:49:fb:46:77:92:94:66:00:94:
                    31:b9:c4:9f:4f:3d:96:35:a7:15:d3:af:ab:f8:80:
                    0b:8f:d6:18:c3:e5:85:b0:ff:26:79:28:58:c9:1c:
                    68:82:0d:e7:44:11:07:f2:46:46:6a:a3:59:ae:40:
                    74:68:24:a1:5f:97:5c:26:cf:0e:a1:51:66:7b:20:
                    4d:ef:cd:a4:7a:70:08:85:f7:e3:c2:ea:b6:a6:93:
                    c9:ad:ba:29:73:d5:56:66:6c:3d:f5:b1:a6:92:82:
                    86:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:7B:4E:AD:7E:87:08:3C:2F:88:2D:1F:46:56:5C:9E:9C:A5:9A
            X509v3 Authority Key Identifier:
                keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:be:7f:8e:3a:05:07:dd:96:70:c1:26:ff:52:03:bf:8a:dd:
         be:ff:76:c5:e9:a5:5f:91:94:f2:f1:15:8b:e0:92:20:be:01:
         34:ab:85:7c:e0:0f:41:d0:eb:0b:a9:a7:95:6c:11:e7:4a:19:
         a5:e5:36:e6:01:20:8a:79:b4:6b:29:fe:84:ab:4b:8f:e7:c5:
         91:4f:04:76:d6:9a:98:80:f4:43:d1:f1:0c:39:21:c4:d7:3d:
         25:30:82:7e:20:78:32:4b:2e:7c:2b:96:ad:0f:4f:16:46:fa:
         eb:12:b6:8c:76:05:f2:09:9b:3a:ba:af:6e:8e:4c:80:62:48:
         23:66:cb:6b:76:ea:28:2e:ae:49:90:5c:e3:d6:43:15:34:05:
         d9:c5:b4:d9:12:cc:52:ce:76:2d:0d:d1:4d:d4:b2:2c:79:82:
         62:ae:c2:27:05:54:f3:8d:da:2e:7e:88:bc:0e:ce:92:d4:76:
         31:21:79:69:e3:cc:27:6e:d0:53:99:98:e3:91:50:1e:88:3b:
         00:ac:3f:cb:b2:6e:c3:59:a4:cf:d5:19:97:61:e5:3c:6b:d2:
         86:9a:c4:30:75:a2:06:91:27:93:56:59:a8:04:32:93:f4:eb:
         cc:2c:72:fa:cc:0e:09:59:68:b4:93:b1:ff:33:5a:d1:0d:26:
         b8:63:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:42 2026 by rpki-client