Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
File:                     HAQwdyQVc864WNlR8CsiBXujluc.mft (raw, json)
Hash identifier:          0y/QDuKpiXR1p6szz3LYSsIWhr748RsEa+YmuMPfO6k=
Subject key identifier:   78:E4:CA:9A:9B:BF:89:AE:8A:94:B4:76:CB:20:A5:7A:C9:BD:B7:E2
Authority key identifier: 1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7
Certificate issuer:       /CN=A91D45A2/serialNumber=1C043077241573CEB858D951F02B22057BA396E7
Certificate serial:       04E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
Manifest number:          04DE
Signing time:             Tue 22 Sep 2026 23:24:27 +0000
Manifest this update:     Tue 22 Sep 2026 23:24:27 +0000
Manifest next update:     Tue 29 Sep 2026 23:24:27 +0000
Files and hashes:         1: HAQwdyQVc864WNlR8CsiBXujluc.crl (hash: isA3oyX5RjGi2ViNpqumTwH3zR7axhWKGToZCpO1Gv0=)
                          2: 4AB730E0800B11EC84B3FA3BC4F9AE02.roa (hash: xOj/wZXPscupT3ElrTmBaHlsw670Pw+Hr4mehf5CVBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl
                          rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D45A2, serialNumber=1C043077241573CEB858D951F02B22057BA396E7
        Validity
            Not Before: Sep 22 23:24:27 2026 GMT
            Not After : Sep 29 23:24:27 2026 GMT
        Subject: CN=6ab30e2b-04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:c4:c8:2c:cf:e8:aa:b7:38:89:3a:a9:97:
                    33:bb:32:39:32:54:a4:7f:1d:ed:6d:a8:00:f8:1c:
                    13:18:40:f5:9f:dc:2f:4f:a1:b9:f7:0e:e4:4f:40:
                    e2:d4:79:44:d4:97:6d:4d:31:6d:cb:11:05:33:e0:
                    6e:66:5f:07:33:41:eb:d3:02:65:01:a1:52:4a:c4:
                    08:ad:23:80:15:18:12:fe:83:8f:ee:f1:4b:f0:91:
                    4d:9a:32:a3:b1:97:da:b5:e4:63:f5:d3:40:2f:86:
                    f9:43:42:b5:66:c5:35:9b:d5:53:6f:04:cd:19:41:
                    55:42:82:ef:a7:b1:95:9c:2f:a9:84:6f:3f:9d:4a:
                    d7:64:e5:b7:05:52:c4:51:22:30:c7:10:0a:b8:7b:
                    f3:41:41:bf:f0:ff:97:09:5f:d9:58:2f:0f:cb:1a:
                    e6:b3:99:a6:f7:6f:99:63:71:2e:de:b3:10:08:3d:
                    3b:c8:5a:77:91:44:96:93:27:05:68:00:34:a9:d4:
                    b6:63:75:42:45:a4:0c:7c:ca:71:2d:f0:e7:bd:d3:
                    77:bf:84:f4:44:d5:3e:20:21:74:00:ba:18:21:37:
                    03:89:95:e2:ab:66:0f:c8:94:f8:88:5a:57:9b:71:
                    3c:b0:80:74:7a:b3:4b:33:bf:9b:49:85:68:c4:09:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E4:CA:9A:9B:BF:89:AE:8A:94:B4:76:CB:20:A5:7A:C9:BD:B7:E2
            X509v3 Authority Key Identifier:
                keyid:1C:04:30:77:24:15:73:CE:B8:58:D9:51:F0:2B:22:05:7B:A3:96:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAQwdyQVc864WNlR8CsiBXujluc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D45A2/A3D2DCAA800711EC908AA967C4F9AE02/HAQwdyQVc864WNlR8CsiBXujluc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:44:7a:34:86:0f:01:48:03:11:de:23:36:de:d3:aa:87:1a:
         0c:b8:c5:b6:bb:6f:41:66:25:84:52:f4:60:59:d6:44:6d:24:
         68:b0:31:23:84:23:be:05:49:68:07:97:ae:7e:f7:39:cf:c7:
         f9:0b:29:af:0c:3b:69:56:69:f8:a3:3b:74:1f:04:b4:fb:0a:
         82:69:13:96:1e:ed:50:cf:ce:62:d1:5c:6c:4d:91:fc:c3:d7:
         e5:61:2f:03:84:c1:fb:77:c0:72:fe:17:76:79:7a:fc:d1:d0:
         cf:f9:bf:a6:9b:0c:b7:47:2c:22:ae:a6:b6:91:63:ff:b5:56:
         6b:4c:40:5b:64:42:a2:31:6a:31:0c:44:7e:7d:53:c9:6c:29:
         ea:22:e3:96:ff:dd:31:7b:10:d9:ba:50:d0:40:38:b1:bc:1d:
         82:f2:ab:82:ea:be:a5:09:0f:0c:2f:02:16:bc:b5:e3:4e:12:
         77:b0:5c:26:49:0a:2e:c1:12:7c:8a:14:31:ae:54:77:a3:a8:
         58:9b:5b:dd:7e:15:bc:25:02:db:36:d1:65:61:4f:25:be:25:
         f6:09:e9:c7:5f:f2:9d:d4:a2:59:64:9a:5c:bb:24:61:e9:a8:
         5f:d7:9d:7d:43:ca:38:2a:a4:4e:73:9b:5b:b4:73:61:9b:66:
         47:7f:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:31:32 2026 by rpki-client