Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
File:                     hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft (raw, json)
Hash identifier:          7vqlG+pVEK3JVhQnDnAv1J1wLBiBozlPzTbUv4ZLrns=
Subject key identifier:   98:0C:37:FE:BF:73:C6:4F:6D:3A:12:DD:71:B2:4A:28:FD:26:62:65
Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
Certificate issuer:       /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
Manifest number:          71
Signing time:             Wed 23 Sep 2026 07:41:41 +0000
Manifest this update:     Wed 23 Sep 2026 07:41:40 +0000
Manifest next update:     Wed 30 Sep 2026 07:41:40 +0000
Files and hashes:         1: hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl (hash: RQTt4KLNdkIZjPUU6Avc+JGxQ2QPPYXMjhm7ZiX6udc=)
                          2: B735FEEA118411F1951E019C333D8C67.roa (hash: qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 07:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
        Validity
            Not Before: Sep 23 07:41:40 2026 GMT
            Not After : Sep 30 07:41:40 2026 GMT
        Subject: CN=6ab382b4-880b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:e9:18:a1:38:5b:72:98:b0:55:54:64:8a:
                    ff:56:ec:42:2c:7b:92:8d:f9:eb:b1:10:0d:72:fc:
                    15:f2:a7:6d:c5:1d:4e:b7:b2:0f:f0:1e:ca:3b:c2:
                    2c:20:dc:f9:4b:12:ca:a4:3d:85:5d:4d:c6:3b:99:
                    5f:dd:28:78:9b:65:1e:05:ed:00:b9:5c:43:1f:3f:
                    d2:39:88:9a:45:69:ed:cb:ca:00:2a:6c:ed:ce:0d:
                    e1:a7:64:43:eb:c5:fe:fa:a4:04:60:3e:28:46:c0:
                    8d:96:c4:7f:45:55:49:89:3d:71:60:d3:10:11:b3:
                    4d:92:dc:c0:15:9e:a5:12:b1:c4:bd:7d:7e:a3:32:
                    25:71:17:d0:6b:e7:af:30:8d:65:22:70:37:af:31:
                    98:bc:aa:35:19:75:ff:9f:cb:d3:26:63:1b:23:87:
                    4a:fc:9e:0a:66:d1:fd:8d:c6:c0:93:99:a3:08:f5:
                    64:b6:45:cd:27:f0:47:15:b5:c5:73:26:06:96:6c:
                    3e:44:58:73:23:a5:54:90:0c:e6:b9:14:c1:24:06:
                    1b:ac:fe:87:14:7a:10:74:82:f4:9c:0b:c2:13:4a:
                    51:48:31:da:7c:d6:32:a4:4a:22:0d:91:a3:b7:a7:
                    df:c9:0d:6d:bf:8f:96:6f:ba:97:07:c9:48:2e:66:
                    ab:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0C:37:FE:BF:73:C6:4F:6D:3A:12:DD:71:B2:4A:28:FD:26:62:65
            X509v3 Authority Key Identifier:
                keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e7:72:2a:ec:7a:a5:14:d8:e7:2c:80:1c:4b:58:6e:27:ff:
         1c:c0:86:19:ee:6d:57:47:6d:a1:8b:6b:d1:12:25:8e:98:01:
         62:ff:44:7e:07:d3:e6:eb:de:ec:98:ca:66:a6:4c:05:45:12:
         08:dc:18:1b:27:05:d1:81:1f:ce:b9:23:eb:38:81:27:dd:64:
         91:db:be:38:9e:69:7d:d2:3b:71:c5:ac:0f:15:ac:37:dc:bf:
         c4:63:8f:0e:3e:7d:14:8c:22:7c:0a:d7:1e:4a:56:c6:04:dd:
         71:22:2d:29:75:df:61:92:63:cd:46:54:ad:b1:17:84:48:44:
         9e:96:13:5e:70:0f:a5:3f:0e:e7:ad:cf:cf:3c:0a:5d:c0:68:
         7f:cd:a9:8d:93:bb:5d:28:e4:3d:76:93:33:7b:af:5d:47:74:
         22:33:25:f9:59:0c:f3:c6:1e:27:8e:78:6b:3b:32:a7:01:4f:
         05:fe:ad:e8:27:33:19:b0:24:e6:dd:f0:7d:3b:96:84:05:fb:
         1c:38:52:4b:92:04:f0:7a:f7:b8:02:ae:89:2b:14:f2:e2:4d:
         cd:01:a0:4c:3e:8f:23:32:97:ca:d3:9d:7e:c3:e0:61:ff:5c:
         c1:f0:e0:e7:d2:da:a2:a6:13:b0:80:a3:c9:78:58:07:93:52:
         84:f9:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:11:39 2026 by rpki-client