Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
File:                     hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft (raw, json)
Hash identifier:          +RyJu1c8oMG7yEW7rQKs2DP3AUO3CHQqtsEYGvZYfaE=
Subject key identifier:   62:70:61:22:4B:7C:7E:FA:AA:35:A8:1F:3A:35:1D:9E:76:24:9B:47
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
Manifest number:          015F
Signing time:             Wed 23 Sep 2026 05:04:58 +0000
Manifest this update:     Wed 23 Sep 2026 05:04:58 +0000
Manifest next update:     Wed 30 Sep 2026 05:04:58 +0000
Files and hashes:         1: hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl (hash: 4AXldxiS33BlxxIDuVMEqCsERWjz3XvSHMciB5NFj6s=)
                          2: 98AEAB84B72111EF8A087D30C4F9AE02.roa (hash: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=)
                          3: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (hash: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=)
                          4: 1A3A1E2C287D11F18C83C945A7833773.roa (hash: ZCfKBgXebATm3jCXx6esyXYyxCluZLc0GUaxOph0UXs=)
                          5: F33309A2B72011EFB3A5D772C4F9AE02.roa (hash: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Sep 23 05:04:58 2026 GMT
            Not After : Sep 30 05:04:58 2026 GMT
        Subject: CN=6ab35dfa-b50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:26:97:cb:c2:1f:57:b5:7d:22:07:71:b9:37:
                    04:f1:df:25:ef:bb:3d:59:af:95:97:09:65:8b:f3:
                    3b:e4:27:93:ef:6f:52:2a:c5:a0:40:7f:06:8e:7c:
                    af:3d:aa:4c:6b:a1:8d:8a:02:2f:12:7a:72:78:5c:
                    02:be:34:9f:76:57:cc:e5:5c:a3:ff:47:e4:cb:2b:
                    f2:39:e6:00:c8:c9:95:d0:26:c9:94:e0:53:3b:13:
                    c2:eb:60:10:77:a0:ee:17:8f:f6:22:a3:f2:9f:da:
                    c1:22:6d:cd:b0:bd:ac:1d:56:6c:74:55:5e:33:8b:
                    6a:0d:c8:86:3c:d5:d6:3d:15:12:ad:3f:11:7b:7f:
                    15:02:0b:9b:ca:3a:e5:14:8b:ba:5b:13:b1:6a:e1:
                    f6:5e:b0:10:97:05:f2:72:0b:6b:c6:7d:8a:5c:6c:
                    c4:0a:4b:10:19:58:71:03:39:f5:78:b6:2b:c9:cf:
                    ac:b3:d8:4b:be:17:ca:bf:35:99:bf:04:66:d2:ac:
                    35:19:5b:8a:de:72:da:9a:d7:a8:b3:ab:6c:43:b4:
                    93:dd:c8:d1:65:ae:b6:2c:05:50:0e:a1:e5:c1:65:
                    03:34:e8:cd:98:67:02:5e:95:57:11:fe:73:31:72:
                    6d:af:3b:ce:1e:9e:2b:47:64:a3:e7:5d:7b:3e:7b:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:61:22:4B:7C:7E:FA:AA:35:A8:1F:3A:35:1D:9E:76:24:9B:47
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:c6:82:b3:1e:8b:9d:1c:67:cb:73:e6:b9:0c:c6:2e:bc:8a:
         7f:6d:bc:20:43:24:fe:fc:cd:3b:b8:de:36:73:e2:8b:2f:8c:
         7b:c9:d9:98:41:1f:0c:97:5a:47:74:96:fc:42:5b:0d:4c:3b:
         a1:9b:3e:84:37:e8:fe:5d:45:3b:aa:7e:8d:0b:b5:45:f6:89:
         10:a3:4f:3b:47:05:5a:4e:49:36:43:f7:40:f5:84:95:42:d7:
         1b:75:3d:dc:2e:fd:69:d3:bb:46:8e:49:02:09:cb:68:63:8a:
         d4:43:53:6c:74:8b:dd:19:1f:b8:95:53:bb:1b:25:9f:ae:b0:
         4a:8e:75:ee:8e:90:64:8b:74:50:cb:e6:c5:33:90:ca:52:af:
         6f:21:1f:46:61:46:12:9e:f7:35:03:06:ac:62:e0:20:ba:57:
         d6:e0:b2:19:76:ce:f3:c1:1c:f6:f1:ac:c8:fd:01:ae:2e:45:
         3b:e2:cf:5d:3d:aa:af:91:90:6b:1e:2e:a4:01:ff:ab:73:86:
         c1:85:63:a9:be:f8:82:33:53:a2:e6:a2:43:fa:6f:53:c7:39:
         38:a1:83:cc:a8:cb:49:0a:5d:ab:82:06:0f:3f:ff:f3:8f:4e:
         ce:87:84:da:48:ad:60:03:d0:38:d0:d4:80:4b:57:82:36:79:
         39:93:d7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:21:38 2026 by rpki-client