Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          mTKlSlDYXR654Br2C4CumUaJH+X7zpEReKSVoYbQh4o=
Subject key identifier:   32:1B:EF:A7:78:F7:53:EF:17:B8:1A:34:FA:5A:DB:2B:81:B2:83:31
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       09C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          0996
Signing time:             Thu 24 Sep 2026 19:56:33 +0000
Manifest this update:     Thu 24 Sep 2026 19:56:32 +0000
Manifest next update:     Thu 01 Oct 2026 19:56:32 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: YUbxqsfzZSTgwzy8fE1DFkbexzYL/dReKUZ5hvX3hNk=)
                          2: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: mH/kM+3rqWh6tWSsikS5qDnxx87ieq8dd2YHV0YNADM=)
                          3: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: zsuR744HDeiJUJylgCdTayAjz/Y4ffc8R/05GsGBd50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 19:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2498 (0x9c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep 24 19:56:32 2026 GMT
            Not After : Oct  1 19:56:32 2026 GMT
        Subject: CN=6ab58070-5610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:3a:04:19:71:ac:77:c3:97:8f:82:d6:65:
                    3b:ee:5e:95:2f:a9:8a:06:38:e8:82:7a:b1:fa:55:
                    e6:c2:71:d9:33:81:d8:4b:9e:06:74:21:dd:05:d1:
                    68:7d:a1:e3:7a:11:e4:82:65:ad:e4:12:54:f5:0c:
                    95:b0:48:7d:83:09:eb:4e:f0:9f:57:ee:a7:ac:d9:
                    a8:8d:af:b8:7a:6b:f8:35:d3:71:28:52:9e:5e:ca:
                    00:20:28:96:f8:d6:72:82:5d:b0:d7:38:9c:d1:8d:
                    58:ab:59:04:77:c8:e2:2b:25:53:0e:7f:6b:84:b1:
                    c3:73:98:31:bf:99:06:45:5e:53:28:c5:47:0d:a2:
                    e6:d8:d0:fc:23:a5:0c:98:36:0a:7c:25:f5:7b:bf:
                    a3:28:14:4a:f6:5f:d0:a5:cc:d4:d7:f5:1d:ac:b9:
                    bf:41:69:16:34:75:73:28:13:61:09:fc:35:b2:c4:
                    55:96:a3:eb:61:60:dc:16:84:85:0d:93:bd:48:03:
                    a0:38:40:00:b6:85:43:c2:02:2c:2e:5e:39:82:34:
                    dd:4d:48:44:ca:74:e2:6c:c8:ac:ad:a6:9b:aa:f2:
                    77:4a:49:ce:06:0c:4e:20:5f:94:47:66:c1:f1:56:
                    e6:32:de:48:40:f9:e9:fa:4a:b1:cb:d9:d4:c8:54:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1B:EF:A7:78:F7:53:EF:17:B8:1A:34:FA:5A:DB:2B:81:B2:83:31
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:02:ed:e8:e9:ef:df:34:e6:0f:60:7b:a0:f1:4e:c8:0d:
         8b:5c:3a:37:de:47:b4:c8:d5:31:1a:5b:b7:59:50:15:96:63:
         62:41:d2:fc:f8:cc:81:7c:1a:a6:37:99:17:6c:47:66:36:56:
         27:c1:90:56:e5:2c:69:d2:40:a7:87:03:17:cc:7f:81:26:5b:
         62:76:33:22:59:2c:34:6d:0e:25:74:f9:01:a2:8c:53:e1:76:
         d2:c8:b5:d5:83:d0:eb:0c:dd:26:e3:cf:1e:9a:00:ce:74:8c:
         f7:b3:a6:5a:d2:58:36:85:c4:f5:d4:cd:7a:79:36:fe:d5:ad:
         82:0a:c8:19:1a:46:7a:ec:e9:cc:37:c3:69:39:bf:10:42:6b:
         2a:3a:8f:d7:b3:54:d1:de:f9:c1:1b:b6:72:38:6f:19:ba:29:
         a8:fa:78:f1:a1:66:24:c6:27:c2:8e:ea:e5:a0:88:79:29:4b:
         d5:a2:c4:26:eb:ea:55:fb:dd:e7:d3:cd:55:9b:e3:5a:4d:38:
         1e:eb:f3:24:ed:d9:f0:c3:27:c0:31:5f:19:d0:63:10:e6:bd:
         89:97:59:46:74:dd:60:79:eb:2f:34:a0:64:e2:a0:11:ae:8b:
         cd:05:d7:4e:72:02:79:a2:9b:fd:d8:75:5a:b3:0b:ae:6c:e1:
         2b:0f:32:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:45:07 2026 by rpki-client