Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File:                     hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier:          4FdAfZ9OL12Bc7F3D6DDkItJ/o5sURCbDAcgCnpvAAs=
Subject key identifier:   AE:31:6B:50:C3:EA:0B:F0:D2:33:E1:01:20:21:3B:E8:56:6B:D0:72
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer:       /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial:       013C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number:          013C
Signing time:             Thu 23 Jul 2026 07:03:24 +0000
Manifest this update:     Thu 23 Jul 2026 07:03:24 +0000
Manifest next update:     Thu 30 Jul 2026 07:03:24 +0000
Files and hashes:         1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: e8VOx6G216M/LpMgRFkXwBiSOhl8HQfd9eNyqpNxDHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
        Validity
            Not Before: Jul 23 07:03:24 2026 GMT
            Not After : Jul 30 07:03:24 2026 GMT
        Subject: CN=6a61bcbc-b0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:47:4b:d8:81:0d:c3:a4:12:e1:43:24:ac:26:
                    54:e7:fa:b5:f5:72:a2:da:e4:31:d6:f0:dc:c3:38:
                    a1:df:0b:c8:ad:f7:3c:39:d8:65:c7:15:14:ea:7b:
                    00:7b:c5:4d:93:16:12:dc:f8:43:4d:85:12:61:5e:
                    bf:82:e9:58:b5:33:f8:4b:25:43:d8:97:c2:bb:6e:
                    d9:80:6b:6d:67:1b:e0:75:a0:8e:f4:8b:6d:52:49:
                    75:64:1e:0a:24:c3:8b:d4:f8:ae:84:f4:56:96:ae:
                    d3:39:71:f9:a6:78:bd:72:4a:de:95:34:c1:b1:57:
                    65:dc:1d:57:ea:9c:37:0d:db:39:fe:16:24:ba:53:
                    16:8e:0b:ff:d5:92:53:50:39:98:4b:14:04:2e:d6:
                    51:08:15:db:fa:6e:f1:46:0c:c4:cf:87:de:59:0d:
                    50:ed:eb:f5:70:76:4d:ab:c3:89:47:9b:b2:b0:3c:
                    66:fa:1b:57:9c:c5:96:b8:6a:54:4f:27:7e:46:80:
                    fb:9d:ff:3b:32:8a:88:90:f8:e3:6b:d6:bb:b8:74:
                    81:99:59:1a:bb:41:e4:f8:ca:6e:e2:28:ce:74:70:
                    d0:e2:57:56:16:b0:1c:45:bb:c5:39:68:6d:f7:49:
                    72:23:8b:96:62:46:6b:94:5a:1b:c7:6a:22:81:a0:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:31:6B:50:C3:EA:0B:F0:D2:33:E1:01:20:21:3B:E8:56:6B:D0:72
            X509v3 Authority Key Identifier:
                keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:50:70:26:d4:e3:ed:8d:46:a3:8b:57:17:59:ed:f5:42:40:
         7c:90:cb:1c:7d:7c:a3:80:78:4e:0f:ee:11:85:1d:31:2e:aa:
         a3:1c:dc:da:73:95:dd:0a:fd:57:d3:29:3b:84:f3:b1:d7:47:
         de:fd:c4:b2:59:2b:4d:40:1f:5c:da:31:b6:16:fc:f2:9f:e2:
         1e:08:f7:11:af:c1:a5:e6:49:6a:60:44:1d:0e:02:74:c8:87:
         a1:1f:4a:cf:3f:ce:89:3f:cc:15:4e:1f:b9:0b:c5:f6:dd:03:
         2d:6a:93:e2:34:d4:8b:a8:3d:c9:6c:88:31:e4:51:0e:a3:08:
         a8:6f:0c:2a:6f:a4:23:b8:e0:5d:ce:32:29:87:df:63:d8:b6:
         8d:61:bf:86:ad:9d:3f:72:ad:9f:31:ac:07:a3:3f:05:ac:e6:
         e0:b6:b8:4e:63:66:b3:06:78:04:c8:d4:1e:8e:8e:d6:70:ad:
         fd:f9:f8:1e:92:46:d8:0e:c1:94:3f:b5:c0:63:f3:66:d6:15:
         df:9e:14:bd:3f:9d:13:30:4b:48:10:9e:36:34:c9:f5:fb:27:
         29:cf:99:8f:09:29:75:e4:67:10:41:78:be:30:88:2f:9d:93:
         8c:0e:94:23:23:b0:ab:d5:cb:59:b7:ea:0b:4a:0e:06:a2:7e:
         0c:34:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:49 2026 by rpki-client