Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
File:                     HG_z7AmClLQtl58ltpYFkj4czu8.mft (raw, json)
Hash identifier:          i5fIX4LHsIbaGOkqsi+RidY2tj9ZJYapTmnRZACIxOM=
Subject key identifier:   67:9F:24:79:54:FF:AD:65:63:9D:28:D5:44:67:A0:02:6F:74:8D:BA
Authority key identifier: 1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF
Certificate issuer:       /CN=A917C81C/serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
Manifest number:          54
Signing time:             Tue 12 May 2026 23:06:14 +0000
Manifest this update:     Tue 12 May 2026 23:06:13 +0000
Manifest next update:     Tue 19 May 2026 23:06:13 +0000
Files and hashes:         1: HG_z7AmClLQtl58ltpYFkj4czu8.crl (hash: yzWON8RXKZwqy6fJLjtYx/igVvokMnrXhz4ScVy4j8k=)
                          2: EB9160CCDFD811F08F00FF64536F56BC.roa (hash: F8WI3I+cVK027+UsBVl1Tcfy5kv9U/Wvm6A/E5S0bZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=1C6FF3EC098294B42D979F25B69605923E1CCEEF
        Validity
            Not Before: May 12 23:06:13 2026 GMT
            Not After : May 19 23:06:13 2026 GMT
        Subject: CN=6a03b265-e001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cc:00:ee:73:dd:6c:76:ad:67:92:f0:f3:3b:
                    4b:a2:86:ac:5e:fe:87:0a:a3:16:c8:64:cf:3d:50:
                    26:50:d3:47:e6:3f:aa:5c:48:ad:b5:f8:7e:80:4e:
                    e1:0c:e1:62:30:a3:66:6f:85:4e:f9:88:e8:9e:0b:
                    d4:21:6d:fb:37:c8:a1:a9:dd:24:51:8a:83:6f:0b:
                    17:cd:9e:61:d1:49:d7:87:91:e8:c6:82:c7:b0:af:
                    b7:c2:9d:92:ad:66:65:88:e4:1c:e5:90:a8:3c:7c:
                    85:e3:2c:dd:10:58:14:b1:84:e4:ff:74:0a:b3:64:
                    58:54:0f:18:7d:e6:b9:e9:9d:1c:a4:60:6c:59:2d:
                    3f:2a:9d:68:08:7f:bf:25:39:8a:ae:c6:5b:57:10:
                    38:f8:74:dc:8a:a1:92:33:8c:16:44:c9:49:83:68:
                    78:89:64:49:8e:fc:d9:47:a4:55:64:86:e0:b3:b1:
                    bf:7f:fc:55:93:ce:f9:41:69:b3:59:a2:f2:44:fc:
                    8e:4b:29:3d:e4:18:9b:d4:e3:5a:fa:97:46:5b:a9:
                    10:fa:2a:85:ef:ae:5e:a6:43:34:93:ed:74:66:14:
                    02:90:a7:3f:17:a1:06:cf:ca:49:6b:66:da:bb:93:
                    6b:a1:62:3b:25:3a:43:ad:d6:ab:ce:1a:12:d4:35:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9F:24:79:54:FF:AD:65:63:9D:28:D5:44:67:A0:02:6F:74:8D:BA
            X509v3 Authority Key Identifier:
                keyid:1C:6F:F3:EC:09:82:94:B4:2D:97:9F:25:B6:96:05:92:3E:1C:CE:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HG_z7AmClLQtl58ltpYFkj4czu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/8620FCA6DFCA11F0A45548564F6F56BC/HG_z7AmClLQtl58ltpYFkj4czu8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0a:86:0f:e6:1f:6b:d4:68:b4:f0:33:2e:28:05:00:5e:53:
         02:cd:20:94:e4:bf:b3:5a:9f:d2:a1:bb:2c:6b:04:c1:35:b5:
         09:bb:b2:e9:f9:c4:5a:d8:fa:5f:ff:df:40:0f:84:f9:12:f4:
         f3:8f:15:78:9f:c8:01:be:a8:66:6c:86:47:2e:14:a5:67:29:
         66:3a:97:ba:42:1f:20:fd:87:c0:c2:a1:07:dc:e9:a5:2f:98:
         4d:a2:7d:9d:5e:ca:6d:1a:ae:71:01:53:cd:46:6e:0e:fa:14:
         3f:1f:00:81:5f:72:11:16:74:52:4e:7b:a9:83:a4:b5:7a:45:
         6b:fe:37:31:fc:28:e4:64:c7:49:5d:19:47:0b:2a:c7:22:c3:
         88:80:24:31:e1:38:8b:99:06:d0:f9:a0:eb:85:57:50:41:a5:
         53:8e:a6:0f:8b:0c:38:ce:c3:f1:e1:d3:d0:45:33:b8:17:75:
         de:79:85:e3:b1:20:04:93:82:e9:6a:ee:3e:89:f1:e5:cc:df:
         45:83:51:e6:63:b6:88:88:b6:01:7d:ba:54:13:d2:ac:40:b5:
         9f:a7:61:49:40:05:b2:65:0a:77:4b:bf:d2:de:97:56:fb:4f:
         b1:e7:37:8d:fd:d6:63:60:2d:d1:73:86:81:5f:e4:2b:6f:47:
         d8:64:40:dd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QzgxQzExMC8GA1UEBRMoMUM2RkYzRUMwOTgyOTRCNDJEOTc5RjI1QjY5NjA1OTIz
RTFDQ0VFRjAeFw0yNjA1MTIyMzA2MTNaFw0yNjA1MTkyMzA2MTNaMBgxFjAUBgNV
BAMTDTZhMDNiMjY1LWUwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDazADuc91sdq1nkvDzO0uihqxe/ocKoxbIZM89UCZQ00fmP6pcSK21+H6ATuEM
4WIwo2ZvhU75iOieC9Qhbfs3yKGp3SRRioNvCxfNnmHRSdeHkejGgsewr7fCnZKt
ZmWI5BzlkKg8fIXjLN0QWBSxhOT/dAqzZFhUDxh95rnpnRykYGxZLT8qnWgIf78l
OYquxltXEDj4dNyKoZIzjBZEyUmDaHiJZEmO/NlHpFVkhuCzsb9//FWTzvlBabNZ
ovJE/I5LKT3kGJvU41r6l0ZbqRD6KoXvrl6mQzST7XRmFAKQpz8XoQbPyklrZtq7
k2uhYjslOkOt1qvOGhLUNfwlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZ58keVT/
rWVjnSjVRGegAm90jbowHwYDVR0jBBgwFoAUHG/z7AmClLQtl58ltpYFkj4czu8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDODFDLzg2MjBGQ0E2REZD
QTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1DbExRdGw1OGx0cFlGa2o0Y3p1
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvSEdfejdBbUNsTFF0bDU4bHRwWUZrajRjenU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD
ODFDLzg2MjBGQ0E2REZDQTExRjBBNDU1NDg1NjRGNkY1NkJDL0hHX3o3QW1DbExR
dGw1OGx0cFlGa2o0Y3p1OC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCXCoYP5h9r1Gi08DMuKAUAXlMCzSCU5L+zWp/SobssawTBNbUJu7Lp+cRa2Ppf
/99AD4T5EvTzjxV4n8gBvqhmbIZHLhSlZylmOpe6Qh8g/YfAwqEH3OmlL5hNon2d
XsptGq5xAVPNRm4O+hQ/HwCBX3IRFnRSTnupg6S1ekVr/jcx/CjkZMdJXRlHCyrH
IsOIgCQx4TiLmQbQ+aDrhVdQQaVTjqYPiww4zsPx4dPQRTO4F3XeeYXjsSAEk4Lp
au4+ifHlzN9Fg1HmY7aIiLYBfbpUE9KsQLWfp2FJQAWyZQp3S7/S3pdW+0+x5zeN
/dZjYC3Rc4aBX+Qrb0fYZEDd
-----END CERTIFICATE-----
Generated at Wed May 13 10:45:05 2026 by rpki-client