Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File:                     hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier:          F3gvrsl0E/oFvLwEgd4Fpx/mpFcHxFhYmXBgPiIwjx8=
Subject key identifier:   10:1A:94:29:24:F2:E0:90:22:B0:A8:0B:E9:5F:EB:F0:BF:A2:DD:3B
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer:       /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial:       0167
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number:          0167
Signing time:             Fri 25 Sep 2026 05:01:10 +0000
Manifest this update:     Fri 25 Sep 2026 05:01:09 +0000
Manifest next update:     Fri 02 Oct 2026 05:01:09 +0000
Files and hashes:         1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: uT47v993bZB+4G4cuynDNu0iarJ8UTuUAv+febQn3cw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
                          rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 359 (0x167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
        Validity
            Not Before: Sep 25 05:01:09 2026 GMT
            Not After : Oct  2 05:01:09 2026 GMT
        Subject: CN=6ab60016-3dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:09:20:14:75:cf:d9:db:8b:96:10:c6:39:
                    26:90:ba:cd:95:e7:ac:1b:ac:58:6c:c7:f5:49:1e:
                    da:6f:7a:dd:18:85:72:d9:10:8e:cf:9a:69:6f:16:
                    15:b6:57:24:bc:ef:52:30:f8:f1:92:ee:8d:16:00:
                    8c:03:3b:22:41:65:94:d0:80:59:86:2f:40:1e:3f:
                    45:17:ed:8f:40:fe:ba:6d:9a:d5:fb:b4:56:8f:27:
                    f3:1c:bb:51:c7:1a:c9:c5:f8:37:0f:c1:07:9c:a3:
                    85:6c:c9:b2:6c:8c:0a:e8:7c:c9:e6:ed:a5:96:9e:
                    d1:94:cc:9c:94:dc:66:97:7f:35:94:a6:b3:10:93:
                    1b:fd:85:b6:fd:62:56:4e:e3:00:c9:72:12:fe:93:
                    e8:d2:47:25:c4:d2:52:c3:d2:fc:f3:97:35:8f:88:
                    fe:49:74:38:19:52:b2:a1:e4:50:6a:3c:ee:27:b8:
                    9a:82:63:36:ed:e0:90:58:a0:68:fe:5d:17:b7:94:
                    76:3d:11:af:14:ed:86:6c:8f:7b:53:d4:ef:97:e7:
                    8a:b1:da:e7:6d:94:08:ac:6c:01:88:97:55:8b:9c:
                    b8:ca:13:ff:0a:bf:c1:11:a9:01:5a:67:5a:49:f6:
                    b2:bb:65:1f:75:25:2c:01:98:ad:a6:f2:d0:97:68:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:94:29:24:F2:E0:90:22:B0:A8:0B:E9:5F:EB:F0:BF:A2:DD:3B
            X509v3 Authority Key Identifier:
                keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:e7:b3:55:4d:22:cf:cc:ff:4d:de:99:24:58:b5:da:0c:
         a0:e0:33:3f:39:c3:e5:51:86:6b:3c:77:76:bf:c8:e7:bb:53:
         29:f9:93:52:ee:84:f3:c9:aa:09:91:41:a0:6e:c8:d3:4f:10:
         e0:8d:b8:38:02:66:4d:dd:c3:18:57:35:d1:da:f4:01:2c:ef:
         cc:86:6f:a6:0e:e6:5f:8d:76:3e:e2:b3:16:2b:46:2e:8a:40:
         5a:a9:a4:0f:bc:f5:47:42:58:21:9e:c0:51:bc:e2:af:17:a5:
         df:0c:d1:d4:b1:f3:63:88:c3:64:de:b5:84:92:80:fb:72:b5:
         57:76:bf:57:af:bf:78:6c:19:7a:33:70:01:c1:87:41:0c:c7:
         de:c7:c4:c2:59:cb:f7:d1:f9:1d:c9:4f:de:1f:3f:33:15:7d:
         b2:00:9c:2a:6d:d7:fe:21:5c:a6:f8:c1:69:48:0c:0d:00:e9:
         07:df:0d:3a:f1:8e:da:46:51:ac:15:11:07:f3:1f:31:13:10:
         12:a1:60:71:4f:4d:ba:67:2f:d1:9b:52:99:7b:6b:c4:d9:2f:
         e4:f8:a8:fc:ce:ed:98:ed:a9:4f:59:da:1b:e3:66:1e:4d:79:
         68:8d:47:e5:98:2c:18:88:37:45:57:3d:88:c3:a4:7b:d0:2d:
         c0:f5:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:00:32 2026 by rpki-client