Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
File:                     HgqTik3H07rU9fll3NVeCymMQts.mft (raw, json)
Hash identifier:          VuZTn22oJO/kRAetH+KcJYicPrgZ9X/aNMI1Ykrm6eg=
Subject key identifier:   75:99:E5:76:29:3B:2F:14:62:5D:21:F1:89:80:16:7F:58:FD:FB:97
Authority key identifier: 1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB
Certificate issuer:       /CN=A9174A4F/serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
Certificate serial:       0F03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
Manifest number:          0EF4
Signing time:             Sat 10 Oct 2026 17:41:30 +0000
Manifest this update:     Sat 10 Oct 2026 17:41:30 +0000
Manifest next update:     Sat 17 Oct 2026 17:41:30 +0000
Files and hashes:         1: HgqTik3H07rU9fll3NVeCymMQts.crl (hash: pRJnanb9I5d/+RPsJFAQjouIRX1kYmGcvZKEXRcwOuE=)
                          2: 7592203EB1B111E999187E66C4F9AE02.roa (hash: uuj0NeXtofK/Wq7L6uOJQ8Z949+GsSsOfpPni85+dcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl
                          rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3843 (0xf03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A4F, serialNumber=1E0A938A4DC7D3BAD4F5F965DCD55E0B298C42DB
        Validity
            Not Before: Oct 10 17:41:30 2026 GMT
            Not After : Oct 17 17:41:30 2026 GMT
        Subject: CN=6aca78ca-dba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:df:55:4a:28:a6:2c:b8:58:b7:66:10:d4:b5:
                    a1:e7:d8:81:b5:2c:b2:10:20:e0:82:ed:ba:7d:69:
                    72:52:4f:74:9b:7f:93:93:95:78:3a:9d:90:8d:8a:
                    58:89:1e:86:92:93:8f:d4:20:34:58:99:f9:da:8b:
                    cb:d3:c5:85:aa:60:c7:7d:28:e1:77:e6:d1:e5:0b:
                    03:fd:2f:62:e8:fa:36:6a:3e:bb:93:df:9a:5c:bb:
                    3f:2f:17:4a:9f:b2:48:81:56:cf:8f:de:2f:ad:57:
                    60:ed:2d:e6:e5:c2:8c:84:19:29:33:f0:a6:44:27:
                    2a:c3:9d:f3:9f:39:da:68:74:4d:65:ad:0a:5d:49:
                    34:9f:a5:48:cb:3a:d8:e0:64:dd:ee:09:c8:10:01:
                    d7:4f:7e:1e:c5:3f:50:6c:ea:27:1b:0b:a1:30:c0:
                    20:a0:96:35:83:1c:b8:70:35:b4:42:38:a0:7c:10:
                    08:cb:21:6b:e3:64:f6:2a:61:bb:40:5a:8e:fb:ca:
                    b2:31:bd:81:fc:b3:6c:a8:80:92:57:4b:f9:71:9e:
                    5f:17:72:0c:01:b8:c8:14:bf:d1:ce:7a:20:13:78:
                    9f:17:c1:f8:fe:56:e9:e1:ec:58:a8:10:e7:09:14:
                    ad:fd:44:cd:60:f2:ac:a0:60:44:44:6e:3f:9e:2a:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:99:E5:76:29:3B:2F:14:62:5D:21:F1:89:80:16:7F:58:FD:FB:97
            X509v3 Authority Key Identifier:
                keyid:1E:0A:93:8A:4D:C7:D3:BA:D4:F5:F9:65:DC:D5:5E:0B:29:8C:42:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HgqTik3H07rU9fll3NVeCymMQts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A4F/E5295C48B1AF11E985975A63C4F9AE02/HgqTik3H07rU9fll3NVeCymMQts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d2:e2:82:70:8c:11:69:8a:25:02:07:ae:38:bd:2d:d1:89:
         82:ac:56:ac:8d:63:7d:a3:73:4a:57:6d:a7:53:f1:42:f0:cb:
         25:bf:65:bc:d3:ed:57:a1:93:19:3c:7d:e9:df:8d:db:ba:2b:
         12:d4:13:78:b8:1f:0a:92:2d:b7:56:57:c8:8a:e2:e3:d3:2d:
         b3:db:bb:1d:a5:83:7b:89:25:e8:35:4d:1a:30:df:69:02:a8:
         60:94:04:a5:21:ce:7b:31:2a:1b:9b:57:90:3e:63:91:f9:ae:
         78:8d:98:33:f2:0e:6b:73:f8:ba:96:14:e9:1c:0d:c2:8f:e7:
         a0:c5:25:51:50:20:c2:bd:4e:39:9b:1d:06:56:94:91:21:11:
         85:70:4e:9a:a2:c8:11:bc:91:95:6f:46:b1:c0:47:74:69:43:
         95:a8:73:d4:d9:0e:ca:d0:21:5a:60:43:94:e5:31:ad:b1:54:
         df:1d:a7:be:0f:53:7f:29:37:41:b1:5b:0f:b7:ef:ca:b7:b1:
         d7:a8:ab:08:65:2a:8b:c6:97:57:3b:b7:98:c5:38:36:80:44:
         17:db:f3:33:73:ed:7e:17:10:4c:d8:d7:46:dc:22:39:d1:aa:
         96:13:10:69:07:69:77:3e:0c:d0:23:2d:d3:66:3f:34:00:2d:
         b1:f0:42:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:14:41 2026 by rpki-client