Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
File:                     hn09aLZZeAOvVkZcDptTq2Z7cqg.mft (raw, json)
Hash identifier:          NBKzFh0vGGXsAYQHTsUrMfuatp5rHeiLs39Byab3Gmg=
Subject key identifier:   EC:56:0B:12:80:5C:EB:AA:0C:84:E3:B8:6B:36:56:72:D7:94:DF:95
Authority key identifier: 86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8
Certificate issuer:       /CN=A912CDC5/serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
Certificate serial:       076A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
Manifest number:          0762
Signing time:             Tue 22 Sep 2026 21:28:40 +0000
Manifest this update:     Tue 22 Sep 2026 21:28:39 +0000
Manifest next update:     Tue 29 Sep 2026 21:28:39 +0000
Files and hashes:         1: hn09aLZZeAOvVkZcDptTq2Z7cqg.crl (hash: 7de/H+ndkONy/9FAUBjgcnItPG8GT9uMQDY1xui5us0=)
                          2: 4EC5B52480B811EBBEE2CA7FC4F9AE02.roa (hash: oGpaoJnN0XSnyU8TN0NZVM9McHxZfbUaTEUnM8LnSNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl
                          rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CDC5, serialNumber=867D3D68B6597803AF56465C0E9B53AB667B72A8
        Validity
            Not Before: Sep 22 21:28:39 2026 GMT
            Not After : Sep 29 21:28:39 2026 GMT
        Subject: CN=6ab2f308-88d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:0c:46:71:68:de:b2:cc:c2:d6:73:9d:2e:
                    84:ab:1b:cf:14:b0:2e:79:ec:f0:ed:ec:ca:d2:e4:
                    87:4d:bd:ea:87:fe:94:4d:68:a6:cf:0a:4b:11:3a:
                    23:1b:7a:93:a3:62:25:a0:a7:a5:ee:76:11:b4:65:
                    c0:fa:99:b7:9f:1e:77:0c:61:c6:88:85:52:e3:59:
                    f3:a2:54:06:ea:eb:0d:53:32:7d:da:15:a7:f5:5d:
                    6e:b4:03:c5:a7:a4:24:e5:0b:d6:9a:4e:cb:fa:10:
                    23:56:2b:3a:d9:30:c3:db:85:2e:ff:10:46:11:97:
                    71:90:94:a9:43:97:6c:ed:d3:2b:6e:6f:ec:7b:f7:
                    d6:57:34:30:af:fd:fa:12:67:4b:e2:6e:d0:a1:3b:
                    ea:c7:2e:9a:fe:ca:97:a5:a5:a8:1a:26:39:a6:ba:
                    0a:d4:b9:4b:31:1b:13:19:be:77:29:fb:69:be:46:
                    85:76:8c:a7:b4:d9:77:66:c8:8d:c6:60:07:d8:c5:
                    e1:cb:85:dc:79:c5:df:7e:85:6c:e9:66:29:f1:88:
                    f4:9d:07:28:36:0c:1c:77:c1:53:d3:a2:9c:68:77:
                    b0:b1:8a:f6:d2:16:38:81:f1:69:3e:7b:ad:9f:bc:
                    d3:e5:e9:c8:44:e5:67:82:c4:cc:b3:b2:6e:47:b2:
                    76:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:56:0B:12:80:5C:EB:AA:0C:84:E3:B8:6B:36:56:72:D7:94:DF:95
            X509v3 Authority Key Identifier:
                keyid:86:7D:3D:68:B6:59:78:03:AF:56:46:5C:0E:9B:53:AB:66:7B:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hn09aLZZeAOvVkZcDptTq2Z7cqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CDC5/E9F292C680B611EBBECBF379C4F9AE02/hn09aLZZeAOvVkZcDptTq2Z7cqg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:aa:5a:ec:72:be:f7:bf:03:3e:38:fa:3e:8d:40:b6:a3:
         3c:3f:76:c9:2a:7c:dd:37:50:ee:45:2a:5c:1c:8a:1c:bb:4f:
         e3:08:a0:9a:61:af:d4:8c:a0:32:f4:7d:32:f9:95:95:a6:b9:
         68:e1:11:6d:0c:30:97:0b:f5:12:ee:5c:8e:8e:17:7d:de:8b:
         0d:6d:76:0a:80:0c:d5:1e:0b:a5:fc:96:87:8c:5e:eb:05:a5:
         89:a6:47:57:39:2a:7d:37:57:38:b0:e2:4a:dc:03:13:2f:35:
         c0:fd:cc:c5:d6:ce:62:5b:79:79:43:87:68:3b:4d:ec:b2:97:
         4b:94:e3:44:5b:ab:e7:47:05:5b:13:24:3f:50:d4:be:1a:1c:
         70:da:aa:51:dd:de:24:a2:17:ee:3d:0e:a5:87:99:a2:0c:cd:
         4c:1c:81:b5:bd:f3:fa:3d:9b:c3:08:9d:f4:e7:9d:d1:26:92:
         c7:d2:8d:b9:6a:8e:33:bd:aa:3c:77:41:df:9e:50:d0:48:1e:
         7a:b1:a4:fe:ee:76:4d:4c:3e:de:f8:7e:81:81:99:ec:2d:af:
         2a:ea:1b:f4:9e:b1:25:a6:08:99:2d:1f:a0:30:45:6b:35:3c:
         61:9e:85:4d:0d:da:df:41:20:2f:eb:82:34:69:6f:41:f9:74:
         80:fa:54:ea
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkNEQzUxMTAvBgNVBAUTKDg2N0QzRDY4QjY1OTc4MDNBRjU2NDY1QzBFOUI1M0FC
NjY3QjcyQTgwHhcNMjYwOTIyMjEyODM5WhcNMjYwOTI5MjEyODM5WjAYMRYwFAYD
VQQDEw02YWIyZjMwOC04OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmXQMRnFo3rLMwtZznS6EqxvPFLAueezw7ezK0uSHTb3qh/6UTWimzwpLEToj
G3qTo2IloKel7nYRtGXA+pm3nx53DGHGiIVS41nzolQG6usNUzJ92hWn9V1utAPF
p6Qk5QvWmk7L+hAjVis62TDD24Uu/xBGEZdxkJSpQ5ds7dMrbm/se/fWVzQwr/36
EmdL4m7QoTvqxy6a/sqXpaWoGiY5proK1LlLMRsTGb53KftpvkaFdoyntNl3ZsiN
xmAH2MXhy4XcecXffoVs6WYp8Yj0nQcoNgwcd8FT06KcaHewsYr20hY4gfFpPnut
n7zT5enIROVngsTMs7JuR7J2IQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxWCxKA
XOuqDITjuGs2VnLXlN+VMB8GA1UdIwQYMBaAFIZ9PWi2WXgDr1ZGXA6bU6tme3Ko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0RDNS9FOUYyOTJDNjgw
QjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVBT3ZWa1pjRHB0VHEyWjdj
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2huMDlhTFpaZUFPdlZrWmNEcHRUcTJaN2NxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
Q0RDNS9FOUYyOTJDNjgwQjYxMUVCQkVDQkYzNzlDNEY5QUUwMi9objA5YUxaWmVB
T3ZWa1pjRHB0VHEyWjdjcWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfMKqWuxyvve/Az44+j6NQLajPD92ySp83TdQ7kUqXByKHLtP4wigmmGv1Iyg
MvR9MvmVlaa5aOERbQwwlwv1Eu5cjo4Xfd6LDW12CoAM1R4LpfyWh4xe6wWliaZH
VzkqfTdXOLDiStwDEy81wP3MxdbOYlt5eUOHaDtN7LKXS5TjRFur50cFWxMkP1DU
vhoccNqqUd3eJKIX7j0OpYeZogzNTByBtb3z+j2bwwid9Oed0SaSx9KNuWqOM72q
PHdB355Q0EgeerGk/u52TUw+3vh+gYGZ7C2vKuob9J6xJaYImS0foDBFazU8YZ6F
TQ3a30EgL+uCNGlvQfl0gPpU6g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:02:11 2026 by rpki-client