Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
File:                     hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json)
Hash identifier:          yKZvkM/O9lT6UYeQQiv7xyIP4P5lAodu/PQofMZudtg=
Subject key identifier:   F3:2F:2F:67:63:D2:31:3D:24:6D:4D:0B:7C:B1:68:05:27:69:F8:60
Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3
Certificate issuer:       /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
Certificate serial:       0762
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
Manifest number:          0755
Signing time:             Fri 02 Oct 2026 22:07:54 +0000
Manifest this update:     Fri 02 Oct 2026 22:07:53 +0000
Manifest next update:     Fri 09 Oct 2026 22:07:53 +0000
Files and hashes:         1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: KJLOWHIwpT1Vf03/Mqm67EEWd2hIkjYvOWp00F1RBtE=)
                          2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: ViFrg5wOh95Ixt6WgSbJ0P48D8DiHVTNhf0f6qrl96I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl
                          rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 22:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3
        Validity
            Not Before: Oct  2 22:07:53 2026 GMT
            Not After : Oct  9 22:07:53 2026 GMT
        Subject: CN=6ac02b3a-7b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:05:fb:1f:e7:08:9d:24:9b:98:b5:d1:4d:
                    1a:4a:4e:ec:3f:7c:86:d2:8b:55:58:0f:a3:1d:5a:
                    6a:a5:ac:74:0f:db:d8:35:e3:33:4e:0b:97:b8:b3:
                    28:fe:35:cf:47:b5:aa:62:7a:36:83:00:cb:0d:47:
                    7f:29:f2:25:99:36:ed:6d:34:4c:f4:e2:36:cc:f0:
                    ad:3b:fa:5a:53:50:34:3b:0e:30:d6:8f:00:46:b2:
                    d4:03:4f:5f:bb:2f:d0:5f:a9:c8:f7:d7:5b:30:9e:
                    98:21:5f:84:a0:3b:f5:04:80:d6:f0:16:f6:40:4a:
                    9b:26:1d:77:a0:07:96:06:c0:29:02:66:96:16:46:
                    ca:c7:53:2e:80:a7:08:e5:1d:c8:43:37:40:82:39:
                    71:c8:73:2a:58:a5:fa:3e:a6:89:09:72:c8:35:b2:
                    17:01:9a:d7:05:54:e5:b0:e8:76:25:3a:b9:dc:4e:
                    08:35:43:5c:e3:3c:8f:c2:59:a0:53:8f:9c:26:f4:
                    a9:73:4f:9d:fd:86:0d:be:0c:a6:5f:99:c9:2d:90:
                    86:b1:4a:2a:6f:7e:14:71:ad:04:4c:7a:aa:65:f5:
                    0a:6b:87:dd:a4:fe:29:1d:8e:71:85:33:db:85:4d:
                    3c:19:5a:30:fb:e6:49:b1:f6:90:96:a5:ac:7e:29:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2F:2F:67:63:D2:31:3D:24:6D:4D:0B:7C:B1:68:05:27:69:F8:60
            X509v3 Authority Key Identifier:
                keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:48:fe:35:29:2c:23:17:c7:0e:db:dc:85:3a:a4:2b:53:
         49:36:d3:ea:90:a6:99:90:1f:48:a5:54:82:56:51:a6:58:aa:
         b3:de:17:f2:b6:40:86:0f:ab:72:95:d3:91:3c:b3:89:8d:18:
         a7:a5:be:01:b1:0d:7f:7b:81:dc:1e:44:91:a0:e5:03:07:24:
         36:8a:23:ed:97:c7:25:26:ba:be:fd:81:0f:f0:1e:c8:1d:72:
         cf:7a:b2:3d:29:8d:ee:6e:3e:70:bd:20:d8:b7:6a:b0:0a:78:
         10:b8:95:5b:87:f1:ff:37:6c:49:b5:ca:8b:a7:4b:d8:9c:23:
         f3:37:42:75:03:30:b3:77:c1:08:a3:62:c3:48:a3:30:ee:43:
         57:6e:63:35:3a:41:96:e7:06:cb:dd:59:e2:c5:be:6d:24:f2:
         67:c9:35:59:99:92:cc:16:ac:03:01:34:65:3b:0c:64:a8:31:
         36:f3:d0:02:1b:98:b7:0d:c0:d5:8e:19:98:33:11:3c:bb:3d:
         c1:a1:e2:02:99:5d:e2:68:49:60:a4:31:d6:cd:b8:78:03:9d:
         8e:90:83:73:1d:50:c3:b2:5f:6e:94:38:9c:c3:16:55:eb:f5:
         b9:4a:63:93:3e:39:2a:6d:c6:4b:8e:d8:7b:6a:23:be:e0:16:
         bb:f9:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:17:20 2026 by rpki-client