Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
File:                     hpBNLQLbigWb7ZOPL46u88Qgb9A.mft (raw, json)
Hash identifier:          Vjv++hXfLMfE5iE6XfR+owH2XtHkflpHX2cyGpfYfs8=
Subject key identifier:   CD:55:9B:5E:57:74:42:8E:6C:DD:B9:DC:96:59:AD:40:D0:39:B5:5F
Authority key identifier: 86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0
Certificate issuer:       /CN=A91D4ACD/serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
Manifest number:          0180
Signing time:             Wed 23 Sep 2026 04:31:21 +0000
Manifest this update:     Wed 23 Sep 2026 04:31:21 +0000
Manifest next update:     Wed 30 Sep 2026 04:31:21 +0000
Files and hashes:         1: hpBNLQLbigWb7ZOPL46u88Qgb9A.crl (hash: covTzFetynPl9jmBPwhFcuigQgDB5DKVuP+NusZHyCA=)
                          2: 388D7E38797D11EF8CA64711C4F9AE02.roa (hash: jDnZhDcL3845Secu0bR+V2OD0F1RLl9nEAFhwuxNGGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=86904D2D02DB8A059BED938F2F8EAEF3C4206FD0
        Validity
            Not Before: Sep 23 04:31:21 2026 GMT
            Not After : Sep 30 04:31:21 2026 GMT
        Subject: CN=6ab35619-b80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4d:d9:08:07:2f:2c:fc:6c:d9:92:4f:df:20:
                    42:0a:cd:ea:ed:fb:f4:3e:b8:84:36:20:16:51:a9:
                    b5:95:93:26:d1:92:d5:03:c0:0f:b6:82:39:1e:0d:
                    1f:ed:73:06:69:2a:a2:43:ae:b8:3f:a9:a6:e7:06:
                    d0:21:f3:42:43:51:00:7b:02:d0:d2:5f:42:60:87:
                    da:12:20:a0:95:63:fe:b1:5f:8f:31:d7:06:ad:e8:
                    71:a3:f2:84:19:41:c4:57:d4:59:6f:f6:97:97:23:
                    a0:9b:eb:ec:46:6e:c8:28:e9:9f:6d:d0:90:08:ff:
                    3e:7b:1f:a2:e4:a7:11:77:a8:2b:23:26:2c:6c:d1:
                    f0:97:b6:c8:d7:34:64:3d:73:68:aa:ff:82:d6:ce:
                    df:1c:c4:7c:10:25:17:8f:48:92:68:76:0b:0b:34:
                    42:84:4a:94:69:bf:9b:f0:f2:66:28:1b:3b:ec:1f:
                    a7:ef:30:b3:b8:6b:58:16:e7:49:a0:f5:cd:fb:dd:
                    10:b6:8a:17:b0:69:ec:f9:99:b7:b2:f6:0d:be:70:
                    6e:cc:fe:07:79:8c:2f:fc:2f:98:a7:3e:57:5b:ef:
                    94:74:22:55:19:67:64:8b:ca:76:0c:e8:89:54:e1:
                    60:3b:04:46:9a:1c:27:0c:91:c6:15:be:74:79:48:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:55:9B:5E:57:74:42:8E:6C:DD:B9:DC:96:59:AD:40:D0:39:B5:5F
            X509v3 Authority Key Identifier:
                keyid:86:90:4D:2D:02:DB:8A:05:9B:ED:93:8F:2F:8E:AE:F3:C4:20:6F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hpBNLQLbigWb7ZOPL46u88Qgb9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/1F53569E756E11EF9CA46E51C4F9AE02/hpBNLQLbigWb7ZOPL46u88Qgb9A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:09:cb:c4:0e:64:d1:a7:d2:9f:06:5c:cf:be:ca:3e:f7:61:
         70:f3:c0:c3:5d:10:9d:96:c6:84:0a:b3:3e:81:50:7d:cc:7f:
         8b:14:63:06:66:8c:07:28:e2:f0:d4:b7:1e:f4:14:2c:b1:b9:
         fe:2e:f1:c9:ed:f5:b1:07:7a:75:26:a1:0e:d6:7d:28:ea:1d:
         29:07:84:cd:bf:ab:f2:ad:98:46:57:e4:3c:d4:49:3d:2a:7d:
         04:9b:ae:99:a9:39:fe:e2:7d:49:01:00:38:61:d8:62:41:74:
         5f:cd:08:2d:67:91:53:e7:49:68:d0:2f:12:ea:b2:d9:ec:75:
         0a:b3:c5:6d:55:d0:9f:9c:6d:9f:80:34:fe:b1:91:2a:36:28:
         8f:b3:f8:ac:07:3e:2e:65:27:f9:34:f2:9e:fd:1d:e9:69:cc:
         03:cb:cf:d7:9e:9f:45:a5:ca:b3:01:d1:fc:a6:77:b8:8d:23:
         f6:bd:f6:0c:de:ed:39:35:82:df:ee:12:92:36:be:3b:59:eb:
         3f:b2:a6:84:ba:78:63:13:b9:af:af:67:e5:bd:ae:5a:b2:2f:
         cc:af:81:a1:1d:54:0d:0c:03:ca:3a:7a:e0:1c:a4:a2:54:de:
         a3:2c:a7:f4:bf:63:4f:3b:fa:3b:1e:58:3d:0b:59:9a:76:2b:
         d7:b3:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:53:59 2026 by rpki-client