Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
File:                     hELcRgJABgEa1c9IzX5MSLuXoR4.mft (raw, json)
Hash identifier:          RjaTMGvIjQTM2rcOfTXYXHY5mWdAi6N/CmFriBEl3pQ=
Subject key identifier:   B3:AC:28:AA:CD:69:21:76:B7:8D:E3:E7:06:18:8C:BC:D6:10:24:09
Authority key identifier: 84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E
Certificate issuer:       /CN=A9153134/serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
Manifest number:          0169
Signing time:             Mon 11 May 2026 05:13:38 +0000
Manifest this update:     Mon 11 May 2026 05:13:38 +0000
Manifest next update:     Mon 18 May 2026 05:13:38 +0000
Files and hashes:         1: hELcRgJABgEa1c9IzX5MSLuXoR4.crl (hash: XlN2didCwGMAiSXKI2fK2NRlDzYW1NcbIlOorKlrD9Y=)
                          2: F3B36C48545411EFA3BC6B2BC4F9AE02.roa (hash: l1+ZtMv6puo4GNMLOeWesmnYUJqPnxAR7QGxzptAf1s=)
                          3: F32DDE98545411EFA3BC6B2BC4F9AE02.roa (hash: 9spWTKwzhxwWPHkdhJR5HEllKF63m9l363gaTe3qP68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl
                          rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153134, serialNumber=8442DC46024006011AD5CF48CD7E4C48BB97A11E
        Validity
            Not Before: May 11 05:13:38 2026 GMT
            Not After : May 18 05:13:38 2026 GMT
        Subject: CN=6a016582-8f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fd:2f:15:22:24:f7:19:cc:a4:f3:67:1b:47:
                    bd:01:76:77:9f:ee:be:6a:eb:be:8b:79:ab:31:03:
                    7a:da:9a:3b:10:11:10:f7:fa:7d:49:94:92:d2:b8:
                    0f:e4:ce:31:63:75:8a:eb:17:0d:7a:bb:ca:fd:db:
                    dc:57:74:8d:ab:01:e5:bd:f3:bd:b5:56:d7:18:3a:
                    b3:77:ca:d3:29:0d:3b:cb:15:67:83:5c:04:54:dd:
                    75:c7:71:91:27:34:e0:3a:3f:b0:da:40:44:79:f2:
                    9a:b8:ce:24:e4:45:45:65:c7:46:8c:07:ca:cd:98:
                    fb:6b:72:aa:7b:20:56:26:9e:07:98:f6:cb:eb:26:
                    0c:55:e3:5d:15:53:df:45:f3:1c:21:22:d7:19:40:
                    02:f6:f9:f5:16:f1:b3:29:f9:98:c3:b0:e8:65:7b:
                    b5:c3:06:e0:b8:18:08:60:af:84:d2:3a:09:7c:9c:
                    8d:5b:14:89:42:7f:0a:c9:4f:49:bf:4a:00:4a:f5:
                    69:56:e9:be:90:ce:7d:a7:c0:b7:50:9a:19:9b:93:
                    ab:70:3a:a3:76:28:d0:13:64:52:13:f8:21:70:c0:
                    5d:84:ad:de:cf:6a:4f:6a:0c:55:af:a1:2e:0f:d1:
                    9a:94:77:d3:6d:df:83:b4:4a:00:6b:25:1b:30:f1:
                    9f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AC:28:AA:CD:69:21:76:B7:8D:E3:E7:06:18:8C:BC:D6:10:24:09
            X509v3 Authority Key Identifier:
                keyid:84:42:DC:46:02:40:06:01:1A:D5:CF:48:CD:7E:4C:48:BB:97:A1:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hELcRgJABgEa1c9IzX5MSLuXoR4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153134/E65FA8A0545311EF8AD77409C4F9AE02/hELcRgJABgEa1c9IzX5MSLuXoR4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:72:40:cd:5d:d1:50:17:46:9b:b6:b1:13:51:8c:b2:aa:38:
         20:bb:5b:55:3c:b8:04:f5:4c:7b:e7:3b:1b:89:8f:b1:88:0a:
         f7:74:43:9a:b2:f0:86:77:d0:fa:22:8c:32:e1:70:a2:6b:b4:
         56:4e:b4:36:32:de:60:a4:61:3d:ac:16:df:76:db:f0:90:5e:
         57:d0:5a:62:a8:62:65:76:66:1e:51:b0:ff:28:c3:03:27:20:
         ac:36:77:50:5a:34:28:c8:a8:9d:cf:72:f8:20:af:af:a3:a2:
         9e:c3:02:cf:06:d7:38:70:db:fb:36:fa:06:cf:7d:58:70:c9:
         b3:1e:0b:dc:6a:1d:ff:5c:e0:f0:1c:71:fe:85:98:b7:c0:f1:
         27:b8:bb:af:6a:a6:65:4c:9c:65:81:db:3d:e3:29:e7:98:3c:
         5b:99:37:17:8e:19:bc:9e:03:90:4c:d6:7e:43:b4:92:b7:92:
         9c:2c:18:32:45:bd:d8:87:2f:4c:0e:ea:22:77:f7:ab:51:fc:
         bd:13:ae:2f:41:93:61:68:e3:f3:ca:82:a6:ff:13:7e:59:34:
         fa:2f:0b:ff:9e:9e:21:b3:cd:27:29:58:b5:d7:dd:0e:be:5e:
         68:2f:5a:6d:55:79:af:c2:c1:38:d9:10:45:74:22:0b:20:b6:
         7e:cf:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:02:22 2026 by rpki-client