Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
File:                     HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json)
Hash identifier:          1KOx6PLm3Lqj1YZbDH4/BjOjLOgyy09l5ssYFe7O0iI=
Subject key identifier:   14:69:35:E2:A0:B6:A3:47:B4:68:DB:54:E7:62:C3:56:2F:52:84:4C
Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71
Certificate issuer:       /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
Certificate serial:       1E72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
Manifest number:          1E61
Signing time:             Tue 24 Mar 2026 16:00:01 +0000
Manifest this update:     Tue 24 Mar 2026 16:00:01 +0000
Manifest next update:     Tue 31 Mar 2026 16:00:01 +0000
Files and hashes:         1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: ksa1H+ch1rFdVdIQFAssD1RjAIuCP61j5Qgr7fTQtco=)
                          2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: e4hMYlDnHNsGyWnAsIxka4q6i/J4idktm6GuEoIlVXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl
                          rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7794 (0x1e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171
        Validity
            Not Before: Mar 24 16:00:01 2026 GMT
            Not After : Mar 31 16:00:01 2026 GMT
        Subject: CN=69c2b501-c81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fa:0a:16:18:0f:39:b1:2e:5c:b4:0d:5f:4e:
                    63:af:50:f7:49:13:42:d6:dc:32:ab:65:71:ed:28:
                    31:f8:37:f9:0f:f5:03:9d:f2:ae:72:76:0a:c4:f3:
                    da:56:60:a3:4e:d5:36:df:fc:16:bd:14:93:f4:82:
                    44:69:92:63:74:e6:75:65:3d:46:d2:03:42:8c:9a:
                    88:d2:e1:20:ac:ad:ea:21:32:5d:ec:37:ef:2d:31:
                    e7:72:5b:10:9a:cb:af:ef:f7:94:c9:93:05:c6:03:
                    00:0e:9e:fa:41:46:d0:ad:af:96:6b:11:e7:78:05:
                    4b:00:db:20:6d:3c:50:76:77:31:c5:71:5b:39:69:
                    92:32:6d:bd:55:c4:3d:48:56:d9:7d:e6:65:ee:6c:
                    05:6e:72:ef:65:98:d0:91:56:24:fe:4b:bb:3b:ff:
                    d5:7b:74:e1:38:78:5e:06:2c:f6:1f:dc:4d:d6:00:
                    8c:d9:7b:93:a9:60:d4:13:36:14:db:36:ef:0c:36:
                    65:81:63:ca:06:a5:fa:ef:91:58:a7:e8:8c:f7:c9:
                    ca:8f:1d:81:7d:61:5d:db:ab:96:cd:59:06:66:d5:
                    d8:45:d6:ce:ca:dd:9a:54:fb:55:46:d6:89:04:fa:
                    6b:4c:48:93:c1:58:9a:ef:eb:a0:25:16:78:f8:05:
                    8e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:69:35:E2:A0:B6:A3:47:B4:68:DB:54:E7:62:C3:56:2F:52:84:4C
            X509v3 Authority Key Identifier:
                keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e1:60:c8:c0:2a:d7:db:51:ee:eb:b7:ec:8b:71:2b:91:6f:
         82:d3:ec:ce:18:83:ec:9d:f8:b1:13:32:f5:ac:01:d6:71:ef:
         7c:a5:a5:58:54:fa:5b:12:68:51:00:62:a5:f9:44:a3:b7:2b:
         fc:00:eb:2d:bf:e9:51:5d:68:b1:52:c0:fd:1d:ed:eb:9e:03:
         68:6f:35:a6:1c:0d:da:de:0d:c0:8e:ca:3c:44:68:3b:bf:0c:
         5c:8d:a4:60:0b:8c:a3:53:9a:59:9b:50:ff:f6:09:ca:9a:6a:
         a8:97:3c:e9:94:e2:54:07:5f:e1:d2:a9:a1:0a:bf:5b:2a:33:
         96:85:be:7b:ab:95:ec:4d:0f:fc:56:7c:8b:6b:2e:94:5f:1f:
         7c:e8:9b:b9:31:36:fa:a5:3a:e9:e2:de:b9:6b:11:dd:8f:cb:
         31:c9:61:09:86:49:ae:e5:94:c7:d2:0b:ab:83:7e:02:7b:62:
         88:93:b6:02:f1:c6:fc:3a:d5:82:15:f6:5e:8a:21:d9:ac:73:
         29:50:c7:62:a7:df:2b:c9:8c:59:27:43:62:d1:ae:44:ab:c9:
         6b:77:b0:86:b7:ff:1f:65:69:63:dd:06:22:1a:ed:e5:1b:5b:
         70:57:0e:1e:8f:4a:97:9f:96:d4:7c:58:24:b8:3c:41:73:4a:
         eb:17:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:25 2026 by rpki-client