Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File:                     s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier:          Kgvp1zSflDv/1L30HTF8X+DCTXlGfT9TJL6AF6JmY3U=
Subject key identifier:   B4:53:DC:52:66:56:E1:64:CF:DD:32:06:54:F7:EC:F1:90:52:45:FA
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer:       /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial:       0145
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number:          0145
Signing time:             Fri 25 Sep 2026 05:25:23 +0000
Manifest this update:     Fri 25 Sep 2026 05:25:23 +0000
Manifest next update:     Fri 02 Oct 2026 05:25:23 +0000
Files and hashes:         1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: FViqqBa/Mjzk7t+0YLqYtC9yTYKqt5jSPPE/KHlOAQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
                          rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
        Validity
            Not Before: Sep 25 05:25:23 2026 GMT
            Not After : Oct  2 05:25:23 2026 GMT
        Subject: CN=6ab605c3-6203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:4d:e2:42:bd:98:80:02:1c:f1:72:20:2e:
                    0f:91:a2:29:77:f7:1e:cc:0b:a0:81:47:bc:63:72:
                    cd:8d:3f:44:c2:74:ee:fe:92:85:85:dc:de:b1:b5:
                    8d:08:b5:db:38:4d:4f:5e:9d:95:39:f1:58:8b:c0:
                    1e:41:1d:a3:44:4c:6c:65:7a:81:64:36:d7:1c:ae:
                    0a:bd:05:6d:24:91:ee:fc:d9:88:d3:93:f3:92:a3:
                    89:7b:a5:a3:d5:1e:33:04:60:26:07:80:b2:7d:0f:
                    de:97:a4:5a:1d:40:21:97:c4:0a:5d:af:44:8d:f4:
                    2b:e0:46:80:c3:08:d0:ac:b3:6a:c9:59:b7:b7:21:
                    dc:2b:86:9a:86:93:b9:d5:b0:0d:ac:a1:e6:0a:d4:
                    f2:45:a5:f4:a5:8b:df:85:75:ed:3e:84:51:3d:bd:
                    3d:cb:ff:b4:b4:22:1c:70:b7:e3:86:54:92:bf:3f:
                    4c:d7:70:45:53:f2:44:09:8c:b6:70:1d:0a:98:7a:
                    1d:c4:2d:8e:35:61:19:f2:bf:d7:a6:dd:9b:51:a4:
                    e5:a3:ae:5e:d5:76:cb:2f:72:df:ae:28:d1:f8:35:
                    14:a7:6c:1c:52:4d:d1:c6:0a:fb:66:33:11:ca:26:
                    0c:35:b9:fd:a0:5e:19:de:97:b3:97:ad:cb:e9:a9:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:DC:52:66:56:E1:64:CF:DD:32:06:54:F7:EC:F1:90:52:45:FA
            X509v3 Authority Key Identifier:
                keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9d:f3:1f:6c:b5:0d:15:66:ad:53:c8:39:df:29:84:c3:00:
         22:24:03:53:cf:d0:1a:8d:e0:d7:d3:17:90:26:78:1c:90:39:
         5e:2d:33:b2:b4:6a:c4:30:01:f5:f4:d2:12:d0:b8:26:ca:1a:
         50:2d:0d:12:a5:a6:f5:05:76:b9:f7:5e:50:6a:02:fc:32:0c:
         7c:db:3e:f5:67:ec:1d:23:c0:12:dc:b8:ca:fb:f3:5a:66:6a:
         5a:af:b9:41:c1:b4:af:6c:c5:24:b3:ed:c2:a9:1f:5f:17:1a:
         64:89:2f:f4:c1:bb:ac:f5:b8:c3:1f:af:24:19:38:7c:a1:02:
         b7:b9:67:7c:e2:22:36:5c:5d:23:90:a7:e3:9a:c0:d8:a9:64:
         6b:7a:25:c4:86:96:85:05:4e:23:42:09:da:85:1c:d1:ba:82:
         8f:f0:78:d3:aa:d1:db:0d:00:c4:ee:a4:2c:69:16:94:39:dc:
         ce:7d:3c:09:73:0b:8b:b6:ad:3e:c0:95:d8:55:6d:ba:6e:68:
         38:f4:fe:80:d6:a2:48:11:6c:7e:d1:f0:c6:25:f1:74:38:6c:
         ce:bb:68:16:5a:4d:d0:d1:cc:7d:8c:be:47:f4:61:1f:6d:bb:
         4c:99:a9:bc:43:ff:7c:35:b6:bb:69:9a:23:57:7a:af:bf:05:
         c0:45:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:20:47 2026 by rpki-client