Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File:                     hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier:          kBcSQjr+0FOqhq4bzwdo2uT6ag6DQPCYpEHmdc5BhSI=
Subject key identifier:   5B:D3:B6:8E:F0:41:01:BF:EF:07:55:93:8E:60:2A:FC:94:42:54:FE
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number:          0119
Signing time:             Tue 12 May 2026 13:24:31 +0000
Manifest this update:     Tue 12 May 2026 13:24:31 +0000
Manifest next update:     Tue 19 May 2026 13:24:31 +0000
Files and hashes:         1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: q7+jYenOkHRel29/mmg02cC714cqOa6jYNz2oAUtYFI=)
                          2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: j2Hz+mynGpqLJnmZlqehevWYxoqbcW99ZISJiOfwTiY=)
                          3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: wy1fO8emrrb11LIF29YjzsQF2VR/akidMRTHMxAcTfI=)
                          4: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: Ga/vGf3pYAE0aZeA1OVe1QY6DoiwmNjQ7QadAkBsWIc=)
                          5: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 13:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: May 12 13:24:31 2026 GMT
            Not After : May 19 13:24:31 2026 GMT
        Subject: CN=6a032a0f-5ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:5e:f6:34:6b:77:90:1d:a9:99:7a:a9:85:
                    cd:b3:7c:f0:36:94:f1:c0:e5:02:bb:2a:7b:11:74:
                    4a:e3:94:80:da:07:50:57:94:c4:84:48:4e:7c:e8:
                    2b:b4:04:57:79:07:70:d4:2d:d4:66:89:f6:7b:c4:
                    15:fd:bf:7b:6f:8f:39:61:c7:8f:e2:36:8e:be:4b:
                    3e:15:d9:84:eb:59:0b:c6:a3:5b:c0:d0:1e:8d:47:
                    ae:6e:df:57:b8:3f:cc:7e:b8:3a:11:59:81:f7:42:
                    6a:6a:aa:dc:98:c8:c1:8c:6f:7b:23:67:31:70:95:
                    91:7d:fa:70:42:61:3c:c7:30:9d:62:47:ea:cf:be:
                    09:1e:e4:cd:e4:2e:47:8b:0e:b1:01:fc:e5:9c:17:
                    d5:9b:f6:47:c5:82:05:cd:ad:e4:1b:63:93:4c:f5:
                    c2:41:f5:7e:22:68:64:1d:df:50:55:25:b2:82:1b:
                    d1:32:c7:cd:a9:ce:9a:d4:eb:d5:92:bf:05:fc:ec:
                    99:4f:8d:8e:93:b2:df:1a:10:73:41:2e:96:db:85:
                    ef:a0:87:2c:51:7b:1e:46:2d:87:4c:bc:55:cf:80:
                    b5:7f:c0:f9:71:48:50:53:a1:1f:88:68:49:0b:cc:
                    e0:50:b4:3c:74:8c:99:5b:51:d1:fd:3c:a2:f1:29:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D3:B6:8E:F0:41:01:BF:EF:07:55:93:8E:60:2A:FC:94:42:54:FE
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:44:0f:f5:ab:e6:8d:64:e8:3f:66:4a:2b:7e:12:06:ea:23:
         a3:f6:ec:72:79:ce:71:d6:f1:b4:84:88:8a:ad:a9:16:9a:01:
         31:3d:4f:d5:6e:f0:a1:b8:78:1f:91:f7:9c:ed:7d:b6:17:a6:
         9c:24:8e:05:06:07:0d:51:25:c9:93:2b:42:81:e7:b1:e2:c0:
         8f:8c:cc:c3:32:37:95:cf:77:ab:62:ed:fa:ba:6b:f4:76:b6:
         c1:44:7a:94:35:82:f4:60:1c:03:80:e8:0d:de:8e:fa:04:e0:
         d3:0e:a6:a7:98:e2:07:2a:a7:04:67:44:e0:d2:d8:ca:44:35:
         d1:6b:9d:02:b6:29:4c:18:23:0b:e9:63:ac:f1:5f:d2:9f:f3:
         f2:e6:48:72:c7:eb:12:e3:8f:ed:52:a2:16:97:80:41:37:6c:
         3c:63:6b:98:2c:b4:b3:4d:e5:eb:56:09:8d:ab:5a:4e:bf:a5:
         87:54:c7:9c:13:e2:15:7d:aa:d2:c0:70:47:5a:66:cb:eb:4f:
         7b:cb:44:c5:03:02:b8:82:bb:32:af:90:8a:0f:ca:41:8b:87:
         c6:b0:ef:93:44:ea:70:08:e6:92:b7:fe:42:92:cd:27:d1:2c:
         f5:ed:a3:ce:b3:f7:9c:bb:63:55:9c:23:7e:b4:d7:49:95:80:
         bb:fe:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:29 2026 by rpki-client