Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File:                     HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier:          8BO+FkCbk/WK+9yMolAvBE8cCVPAAjni8jlRFZ0wRb0=
Subject key identifier:   44:E0:99:E5:3E:A3:56:93:3B:74:6E:62:CC:DA:BC:4D:7C:B2:AA:CD
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer:       /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number:          0126
Signing time:             Sun 27 Sep 2026 06:16:38 +0000
Manifest this update:     Sun 27 Sep 2026 06:16:37 +0000
Manifest next update:     Sun 04 Oct 2026 06:16:37 +0000
Files and hashes:         1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: yq71cTjqfQybnW0JZo6NeOutWsDzhyVLkauwoaCWkiI=)
                          2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: J85gs2PwspStHZ1QSJgFlpSUo7AYF6KcJxoS8YQ7YiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 06:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
        Validity
            Not Before: Sep 27 06:16:37 2026 GMT
            Not After : Oct  4 06:16:37 2026 GMT
        Subject: CN=6ab8b4c6-b63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f4:38:e8:40:41:04:02:83:59:45:1e:63:f6:
                    46:f5:3d:be:f4:1c:97:75:6f:b4:8a:53:d6:be:16:
                    b5:3b:3b:de:75:b5:6b:ba:ad:b4:7c:83:46:d1:d9:
                    eb:e3:7d:44:b6:66:cc:7a:17:ba:8c:92:03:8d:83:
                    f3:3e:d3:b0:cc:3d:e3:08:07:91:23:46:1e:ed:31:
                    04:3d:93:b8:7f:08:9e:3c:2f:18:cb:10:f2:2b:f5:
                    dd:59:3e:ec:e4:b3:57:54:07:00:45:3e:f6:59:62:
                    f8:ec:bd:9a:35:15:2d:06:14:8b:60:f2:9c:e2:a4:
                    61:96:02:db:9e:d7:b8:d3:07:71:1d:d7:9f:96:88:
                    80:86:3c:48:87:e0:ac:03:53:db:cb:67:2a:72:17:
                    f7:34:0a:bd:78:55:2d:b4:13:37:46:ee:58:33:31:
                    57:24:f3:27:95:f2:cf:b0:40:9a:6e:c6:e9:0d:b9:
                    6f:80:60:c3:2b:41:1e:4e:e4:e2:28:a3:39:3e:bf:
                    69:5c:3e:b1:47:40:a5:f9:90:95:f0:69:ed:54:e4:
                    73:27:2e:cb:0e:4f:19:f1:d4:05:3d:17:91:7c:42:
                    4a:8c:07:64:fd:d2:af:07:47:07:02:14:3e:fa:35:
                    62:64:f9:95:8a:49:c8:fd:e7:0e:6d:13:6b:69:77:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E0:99:E5:3E:A3:56:93:3B:74:6E:62:CC:DA:BC:4D:7C:B2:AA:CD
            X509v3 Authority Key Identifier:
                keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:f7:bc:c4:dc:79:0b:0e:b4:d1:1f:fa:5c:00:c7:99:10:d2:
         4c:be:fd:a9:99:72:4b:44:6a:e0:d9:27:26:de:e2:d7:bc:77:
         37:d9:0f:fa:7d:60:aa:36:7c:e4:8f:52:92:48:a0:90:fb:97:
         00:74:3f:88:bb:44:82:6e:a7:33:b8:a2:b8:69:cc:00:f2:99:
         f5:47:e6:a3:f9:04:08:df:1d:58:8d:fe:6c:4f:1a:e4:73:09:
         5e:4f:48:f2:4e:a1:11:d0:2c:d8:a1:08:cf:43:84:48:62:4e:
         c1:5d:72:da:b5:58:16:0d:3e:f5:1a:57:79:ea:c3:1c:74:a2:
         e8:14:a9:d7:b9:fe:24:8f:27:4b:36:54:3d:c1:f4:7c:8b:0c:
         f4:81:09:31:b9:34:e9:0f:43:cf:aa:cc:92:e0:15:c5:18:2f:
         d9:5c:f6:af:23:10:85:00:ca:6d:94:53:01:73:9a:f9:50:b0:
         cf:62:9b:15:8d:76:e0:4a:15:57:c2:2e:07:2e:06:1e:43:10:
         83:5a:3e:ff:b2:83:02:24:a1:a3:5a:7e:af:86:c5:fe:c4:35:
         6d:f8:37:c5:d7:6a:8c:8a:c5:ff:f4:44:74:4a:e7:bf:f8:fc:
         c7:f0:22:f5:54:d2:a1:02:96:92:a1:c5:f9:60:05:0c:91:a9:
         be:16:34:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 02:31:11 2026 by rpki-client