Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
File:                     HLQwTtZoyPcWQT79ZhdMOGcMics.mft (raw, json)
Hash identifier:          xN2ZhIQ0GoiWiCslb2qDTFhq36ATprpgP0AROGeAH7s=
Subject key identifier:   5F:8C:F2:EB:E4:03:CF:0E:24:AB:29:49:5E:63:AF:A8:A9:DC:7D:D9
Authority key identifier: 1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB
Certificate issuer:       /CN=A91B4286/serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
Certificate serial:       14C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
Manifest number:          14B8
Signing time:             Tue 12 May 2026 16:52:06 +0000
Manifest this update:     Tue 12 May 2026 16:52:06 +0000
Manifest next update:     Tue 19 May 2026 16:52:06 +0000
Files and hashes:         1: HLQwTtZoyPcWQT79ZhdMOGcMics.crl (hash: 7nHCpcd+7JQQf8SEN1g4aRN3eNUQ4iYuBRyXbtFhUrI=)
                          2: 1CA71D84493D11EAAB30C638C4F9AE02.roa (hash: WIOTnnHZpCOfxDVsg8g5aDJ6JWSGnelmuPFVOIcEOGE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl
                          rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5315 (0x14c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4286, serialNumber=1CB4304ED668C8F716413EFD66174C38670C89CB
        Validity
            Not Before: May 12 16:52:06 2026 GMT
            Not After : May 19 16:52:06 2026 GMT
        Subject: CN=6a035ab6-dc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:54:92:5f:fe:a0:8a:e5:5d:93:6e:16:c6:6b:
                    1a:c2:e0:7c:98:12:1c:38:2c:22:76:c7:f1:47:2b:
                    a9:bf:69:71:0f:64:67:72:63:31:19:1b:27:6c:f2:
                    d9:98:df:31:0a:c5:18:9f:9b:17:9d:5c:b7:06:89:
                    45:a4:47:29:12:13:0d:d5:18:4a:df:e7:37:31:a2:
                    32:6c:1c:c7:43:2c:25:50:7d:87:b0:77:87:09:1d:
                    c0:68:46:42:37:bf:cf:cd:fb:a0:6f:02:6f:e3:e4:
                    db:bf:cc:41:0d:d8:36:d6:3c:47:4c:e3:9c:57:b3:
                    75:85:9c:28:14:4e:cc:d2:a9:e9:69:8b:7f:5e:29:
                    3a:79:0b:91:fb:15:82:b4:db:6b:64:10:0c:94:69:
                    05:ac:ae:d6:cd:d9:93:0d:c7:1f:6b:6a:c2:84:11:
                    64:a8:2c:40:22:38:d8:29:a1:0d:65:60:1b:b7:61:
                    0d:e7:e5:fb:2d:3f:54:d5:96:1e:d5:e4:ef:9c:b4:
                    92:94:70:97:38:9d:de:39:6e:8c:ff:2a:3b:ae:90:
                    60:9f:8d:fe:2f:4e:0e:f1:be:b3:6e:85:ea:ed:79:
                    88:d7:56:62:60:35:5d:94:ee:11:85:63:b1:c3:84:
                    ca:b1:b0:ba:ec:e7:c4:8c:b7:2f:96:5b:9d:e0:d2:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8C:F2:EB:E4:03:CF:0E:24:AB:29:49:5E:63:AF:A8:A9:DC:7D:D9
            X509v3 Authority Key Identifier:
                keyid:1C:B4:30:4E:D6:68:C8:F7:16:41:3E:FD:66:17:4C:38:67:0C:89:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLQwTtZoyPcWQT79ZhdMOGcMics.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4286/B21AA0947F4911E888D35642C4F9AE02/HLQwTtZoyPcWQT79ZhdMOGcMics.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:75:11:77:11:51:8b:7e:5f:aa:e7:f5:1f:04:7f:d2:26:
         2a:d6:06:83:6f:b9:a1:40:b7:5a:96:c0:f7:fd:07:56:1f:58:
         fa:94:5f:0c:87:6a:51:2b:d1:6b:4f:f3:b6:29:32:4a:38:b9:
         c2:67:bc:3d:b4:35:bf:e9:98:97:eb:5e:86:b3:12:3f:ad:ea:
         5b:8d:5d:80:fd:62:4e:1d:6c:fb:d0:ec:d1:79:1b:97:44:3e:
         d3:a3:36:3a:f3:aa:0b:2d:7b:0f:05:8c:8d:71:40:ca:45:b6:
         be:c7:28:b9:7a:ac:59:cc:ef:38:d6:ad:05:20:b0:ed:38:50:
         fb:1e:c2:a5:9d:fa:b9:a2:53:77:34:5e:e6:65:a0:87:09:51:
         2d:a5:b1:41:59:8d:fb:44:55:a8:d7:b5:c6:37:ab:02:66:c6:
         b1:cb:3b:5b:87:b3:4d:f4:cb:d5:78:41:75:45:10:4d:aa:3a:
         ac:96:33:7f:75:1d:a3:85:9c:0c:b4:84:69:d4:37:43:7a:e2:
         38:54:b8:bd:ff:54:dc:a5:24:f7:3b:c4:10:18:7a:25:1f:34:
         f8:92:c1:9c:83:62:9e:71:1a:ff:58:6e:1c:f0:cf:94:22:99:
         13:b7:f8:31:e4:17:3f:d6:ff:54:4a:db:b4:68:4c:4e:2f:26:
         53:6b:bd:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjQyODYxMTAvBgNVBAUTKDFDQjQzMDRFRDY2OEM4RjcxNjQxM0VGRDY2MTc0QzM4
NjcwQzg5Q0IwHhcNMjYwNTEyMTY1MjA2WhcNMjYwNTE5MTY1MjA2WjAYMRYwFAYD
VQQDEw02YTAzNWFiNi1kYzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFSSX/6giuVdk24WxmsawuB8mBIcOCwidsfxRyupv2lxD2RncmMxGRsnbPLZ
mN8xCsUYn5sXnVy3BolFpEcpEhMN1RhK3+c3MaIybBzHQywlUH2HsHeHCR3AaEZC
N7/PzfugbwJv4+Tbv8xBDdg21jxHTOOcV7N1hZwoFE7M0qnpaYt/Xik6eQuR+xWC
tNtrZBAMlGkFrK7WzdmTDccfa2rChBFkqCxAIjjYKaENZWAbt2EN5+X7LT9U1ZYe
1eTvnLSSlHCXOJ3eOW6M/yo7rpBgn43+L04O8b6zboXq7XmI11ZiYDVdlO4RhWOx
w4TKsbC67OfEjLcvllud4NLhZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF+M8uvk
A88OJKspSV5jr6ip3H3ZMB8GA1UdIwQYMBaAFBy0ME7WaMj3FkE+/WYXTDhnDInL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Ni9CMjFBQTA5NDdG
NDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQY1dRVDc5WmhkTU9HY01p
Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hMUXdUdFpveVBjV1FUNzlaaGRNT0djTWljcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NDI4Ni9CMjFBQTA5NDdGNDkxMUU4ODhEMzU2NDJDNEY5QUUwMi9ITFF3VHRab3lQ
Y1dRVDc5WmhkTU9HY01pY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA0Ct1EXcRUYt+X6rn9R8Ef9ImKtYGg2+5oUC3WpbA9/0HVh9Y+pRfDIdqUSvR
a0/ztikySji5wme8PbQ1v+mYl+tehrMSP63qW41dgP1iTh1s+9Ds0Xkbl0Q+06M2
OvOqCy17DwWMjXFAykW2vscouXqsWczvONatBSCw7ThQ+x7CpZ36uaJTdzRe5mWg
hwlRLaWxQVmN+0RVqNe1xjerAmbGscs7W4ezTfTL1XhBdUUQTao6rJYzf3Udo4Wc
DLSEadQ3Q3riOFS4vf9U3KUk9zvEEBh6JR80+JLBnINinnEa/1huHPDPlCKZE7f4
MeQXP9b/VErbtGhMTi8mU2u9pg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:21:58 2026 by rpki-client