Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File:                     HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier:          QYOKncuWBijg60DNq4UYkc9Eniqe4cYJ1i8wZ8cOuHw=
Subject key identifier:   62:2D:FD:12:F9:0E:D5:B9:F3:48:53:20:12:37:42:80:15:D9:FF:5A
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer:       /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number:          03C7
Signing time:             Wed 23 Sep 2026 00:09:52 +0000
Manifest this update:     Wed 23 Sep 2026 00:09:51 +0000
Manifest next update:     Wed 30 Sep 2026 00:09:51 +0000
Files and hashes:         1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: irHkp4UuIwRWQB79rrbxILsefkQwLKigeVD+PADDhU4=)
                          2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: ZS73m8PHc2jdDEHGSUbWmMvRHOgafdSVcGYG1WG2/zs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
        Validity
            Not Before: Sep 23 00:09:51 2026 GMT
            Not After : Sep 30 00:09:51 2026 GMT
        Subject: CN=6ab318d0-c640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:73:fc:2a:ec:4c:03:cd:d5:7e:e0:1a:49:
                    0c:ab:bc:ae:e9:2d:fe:3e:88:3c:ce:63:c4:47:c1:
                    f3:86:77:07:e3:05:c3:23:91:a2:8e:0f:9f:67:33:
                    86:a9:79:a0:fe:8e:90:7f:a0:c3:21:83:44:71:95:
                    42:ba:19:3d:0d:18:f2:f2:63:91:06:04:06:df:dc:
                    37:dd:8f:d0:e1:a5:d8:ac:a6:27:21:7c:87:2e:c4:
                    63:12:09:58:69:10:51:7e:2d:2e:0b:8f:d8:4b:d7:
                    99:95:aa:14:61:b8:1b:37:df:47:b5:ab:30:a0:2b:
                    b6:c4:97:d2:c0:2b:ad:14:48:da:b1:64:4a:62:e1:
                    5e:b4:f6:ff:15:a5:5d:de:c1:99:b0:86:4b:53:b3:
                    fb:77:d4:47:92:3d:0d:49:73:1f:72:0f:9d:7e:97:
                    1c:4e:6d:0e:de:4d:66:9a:ba:34:6a:fb:95:ac:38:
                    9d:e8:cf:b6:7c:9a:8e:32:9a:ec:0a:52:ff:18:aa:
                    53:80:6c:5b:70:5e:7d:19:09:db:1b:51:5b:b0:de:
                    8c:62:21:40:06:97:fc:7f:44:2b:1a:97:18:34:b5:
                    95:16:ec:8b:de:85:eb:0b:b2:12:b5:b0:e8:56:bf:
                    8f:5a:dc:9e:c8:a9:24:b4:9e:e8:0f:14:16:49:11:
                    fe:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:FD:12:F9:0E:D5:B9:F3:48:53:20:12:37:42:80:15:D9:FF:5A
            X509v3 Authority Key Identifier:
                keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:23:ec:62:20:a2:d6:17:8a:47:c2:4e:a6:e8:91:f6:91:bf:
         4e:3e:5a:d9:38:be:36:56:6d:95:b0:74:62:69:de:c5:a0:92:
         37:80:2d:8d:a5:2b:86:36:dc:5b:d5:a5:75:df:ea:07:29:65:
         14:44:3a:05:6e:19:a0:58:2f:54:be:e8:e5:c9:d6:03:a3:42:
         1f:42:cc:62:e5:57:63:0d:3a:ac:03:f8:81:a3:5c:4c:88:ff:
         8a:52:d4:5b:3e:67:ba:7a:16:82:9f:24:85:72:e7:55:56:c1:
         91:62:40:98:fb:98:ce:9d:9a:6e:74:81:2d:d4:b1:87:1a:20:
         d9:12:d3:c6:d5:16:90:bf:2a:ff:3b:e1:d6:92:10:3a:0d:91:
         74:3d:19:cd:02:be:71:7a:5b:79:0b:90:75:3f:bc:91:4a:83:
         d7:d2:14:bb:3f:f3:60:de:ee:45:e5:76:08:8d:b0:84:39:92:
         1b:46:73:78:8a:4c:f1:4e:74:cd:80:18:5a:0a:b0:59:9d:8b:
         b1:27:b3:81:d4:40:a3:e7:3c:0b:05:54:cf:12:3d:3d:cd:dd:
         4a:17:28:f8:16:24:7e:d0:d4:8b:18:d7:f8:6e:ea:07:dd:d2:
         a0:48:74:4b:12:a7:70:d9:79:2b:c4:4c:6b:9e:d9:4b:46:b6:
         ef:73:a9:cc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGMkIxMTAvBgNVBAUTKDFDQkE4RDNEQUE4MDQ4ODkzMEE5OTI4QjE5NkVERUUw
NzVGNDA5QTQwHhcNMjYwOTIzMDAwOTUxWhcNMjYwOTMwMDAwOTUxWjAYMRYwFAYD
VQQDEw02YWIzMThkMC1jNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtjFz/CrsTAPN1X7gGkkMq7yu6S3+Pog8zmPER8HzhncH4wXDI5Gijg+fZzOG
qXmg/o6Qf6DDIYNEcZVCuhk9DRjy8mORBgQG39w33Y/Q4aXYrKYnIXyHLsRjEglY
aRBRfi0uC4/YS9eZlaoUYbgbN99HtaswoCu2xJfSwCutFEjasWRKYuFetPb/FaVd
3sGZsIZLU7P7d9RHkj0NSXMfcg+dfpccTm0O3k1mmro0avuVrDid6M+2fJqOMprs
ClL/GKpTgGxbcF59GQnbG1FbsN6MYiFABpf8f0QrGpcYNLWVFuyL3oXrC7IStbDo
Vr+PWtyeyKkktJ7oDxQWSRH+tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIt/RL5
DtW580hTIBI3QoAV2f9aMB8GA1UdIwQYMBaAFBy6jT2qgEiJMKmSixlu3uB19Amk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUYyQi81MzczMjJGQUVC
QzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJa3dxWktMR1c3ZTRIWDBD
YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMcU5QYXFBU0lrd3FaS0xHVzdlNEhYMENhUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUYyQi81MzczMjJGQUVCQzQxMUVDOTM4NUVDNjJDNEY5QUUwMi9ITHFOUGFxQVNJ
a3dxWktMR1c3ZTRIWDBDYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATiPsYiCi1heKR8JOpuiR9pG/Tj5a2Ti+NlZtlbB0YmnexaCSN4AtjaUrhjbc
W9Wldd/qByllFEQ6BW4ZoFgvVL7o5cnWA6NCH0LMYuVXYw06rAP4gaNcTIj/ilLU
Wz5nunoWgp8khXLnVVbBkWJAmPuYzp2abnSBLdSxhxog2RLTxtUWkL8q/zvh1pIQ
Og2RdD0ZzQK+cXpbeQuQdT+8kUqD19IUuz/zYN7uReV2CI2whDmSG0ZzeIpM8U50
zYAYWgqwWZ2LsSezgdRAo+c8CwVUzxI9Pc3dShco+BYkftDUixjX+G7qB93SoEh0
SxKncNl5K8RMa57ZS0a273OpzA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:15:52 2026 by rpki-client