Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File:                     HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier:          TYKDgA9z2jQexhFmaTM9kbjNS4eYlekqFq7wQ0EG6n8=
Subject key identifier:   33:2A:F2:FE:92:CC:7B:13:37:4B:F8:2A:D0:D6:EA:68:44:05:42:48
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer:       /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial:       128F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number:          1276
Signing time:             Thu 24 Sep 2026 17:04:14 +0000
Manifest this update:     Thu 24 Sep 2026 17:04:13 +0000
Manifest next update:     Thu 01 Oct 2026 17:04:13 +0000
Files and hashes:         1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: yZ107FjXfXixhZLXmXya86MlR8YAzqjHeFPVDRUoWts=)
                          2: rU4P7at9ntl2gnj69OM_fFkQ_Rw.asa (hash: psc+5+7o7YR1fz875C8WukUuUUf4mdTKlF0hhWPlCB0=)
                          3: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 17:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4751 (0x128f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
        Validity
            Not Before: Sep 24 17:04:13 2026 GMT
            Not After : Oct  1 17:04:13 2026 GMT
        Subject: CN=6ab5580d-5ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:df:8f:65:c7:73:22:21:52:bd:be:2d:0b:
                    df:c6:d0:ea:5c:c8:46:a2:51:31:2a:d1:c8:85:2e:
                    a6:d4:ac:f1:d5:ef:08:7c:d2:1d:14:9e:6f:2e:18:
                    6b:20:71:48:81:1e:85:35:dc:09:27:e7:97:9f:cd:
                    5f:c1:2b:46:41:b1:6f:0c:90:c4:0b:20:1d:07:38:
                    75:0f:2a:3f:0c:b5:4f:b1:b0:33:18:05:85:a3:46:
                    bd:85:a4:b8:75:16:fe:b1:91:6f:1a:02:2a:e6:e2:
                    15:e8:fb:5a:13:de:55:62:10:d1:4b:07:21:0c:ce:
                    81:a2:6c:ca:ea:e9:88:4e:21:04:84:e8:e9:91:23:
                    f7:b0:0a:7a:04:2b:4a:39:51:1c:aa:a7:74:4c:23:
                    fb:56:0a:0f:5e:38:b3:c2:16:ea:c5:84:38:6b:31:
                    31:45:31:62:1e:64:74:f7:ec:84:36:64:1a:db:29:
                    e7:27:05:c3:8e:48:4e:07:e6:05:c4:0b:c7:2b:84:
                    08:d4:b6:00:49:4a:56:a6:50:6c:a0:c2:9b:3c:e5:
                    47:85:02:75:1b:2e:f6:92:d9:b6:76:b6:7d:d3:f7:
                    ea:90:d2:5e:b4:21:17:67:c4:97:f1:c2:94:a2:39:
                    90:6c:3f:75:b0:ef:cb:0d:be:e2:ed:4b:e3:89:ef:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2A:F2:FE:92:CC:7B:13:37:4B:F8:2A:D0:D6:EA:68:44:05:42:48
            X509v3 Authority Key Identifier:
                keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:58:98:7e:a2:ae:81:6b:2f:40:84:47:c8:42:96:a0:68:
         67:1c:c3:4a:b3:c3:a4:8c:6e:ef:df:c4:66:eb:86:20:47:f2:
         08:80:f8:fa:19:d0:a2:2b:c4:36:49:cc:34:2e:54:96:12:e9:
         40:49:76:dd:d8:44:f3:7f:63:89:63:c3:ef:97:69:49:65:f3:
         6b:60:ba:3f:de:bf:ba:b0:08:fb:42:09:43:58:80:a3:dc:3d:
         aa:d6:51:93:27:a4:c5:30:93:ab:42:79:6e:d9:64:91:0a:1a:
         0e:4b:20:45:f0:d4:ee:80:45:67:b4:b2:8a:fa:8e:73:6a:dc:
         00:01:97:2c:97:59:8d:1d:cd:8c:01:cf:27:30:cb:5a:aa:eb:
         bc:61:8f:e9:3c:87:8d:f8:5d:13:65:3c:3f:59:26:b2:fc:36:
         3a:c1:ad:31:88:eb:85:5c:6c:30:30:6c:a1:c4:ad:94:ca:35:
         c1:a8:2d:18:43:bc:f8:37:23:dc:1d:4d:af:b5:3d:e9:86:4f:
         9b:25:d6:b7:32:83:18:3a:f8:f8:8a:67:e3:2a:62:3a:bf:13:
         ae:e5:ce:1c:cf:f4:24:aa:95:24:59:cc:b8:e1:c3:43:09:64:
         f9:b9:32:e6:b8:01:8c:99:0b:8f:a9:74:d3:a3:79:88:62:cb:
         3a:e9:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:35:29 2026 by rpki-client