Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
File:                     HNLU8yahhKSHvyKs14rVwGj0ZmE.mft (raw, json)
Hash identifier:          NCKu3KO5gQOrnrFiiGGMmWJRYUmEg7wcT6nRWoXtcQ4=
Subject key identifier:   FC:71:7F:91:07:1C:F2:14:C1:96:F7:0C:D1:A5:E2:75:F5:28:64:F3
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Certificate issuer:       /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
Manifest number:          FB
Signing time:             Fri 25 Sep 2026 06:21:05 +0000
Manifest this update:     Fri 25 Sep 2026 06:21:04 +0000
Manifest next update:     Fri 02 Oct 2026 06:21:04 +0000
Files and hashes:         1: HNLU8yahhKSHvyKs14rVwGj0ZmE.crl (hash: G8CvNCyjzfqZp446J2t9wvoqPdlmpZGw1NZu+KLuuP0=)
                          2: 447A88023DDC11F0ACD9F475C4F9AE02.roa (hash: yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:21:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
        Validity
            Not Before: Sep 25 06:21:04 2026 GMT
            Not After : Oct  2 06:21:04 2026 GMT
        Subject: CN=6ab612d1-2802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:60:ab:35:48:72:26:eb:af:5f:08:6a:bc:
                    05:01:b0:a3:7b:f2:36:93:8a:96:17:ff:3e:98:93:
                    82:77:49:6f:dc:43:cc:95:59:c0:94:74:28:0b:6b:
                    56:5e:b3:1a:ab:75:7e:27:92:86:bc:47:8a:0f:82:
                    4c:07:de:f0:15:9c:46:40:a3:29:a5:33:d2:18:c7:
                    f6:2a:98:03:ff:f6:85:8f:07:76:64:db:ef:a3:a6:
                    43:d3:03:c1:3c:26:45:69:71:17:1d:fd:15:1d:26:
                    bc:f9:d5:61:65:6d:c7:3b:f9:d1:20:b7:4d:b5:48:
                    2c:93:bb:1a:03:68:38:10:c1:b4:39:7e:bb:45:63:
                    ea:19:f9:87:e8:6c:93:ee:54:98:23:29:3b:a6:4e:
                    ce:24:b5:12:09:88:3c:b2:72:54:3e:66:e3:5a:aa:
                    c6:50:8f:2e:ea:2d:96:d0:f0:53:af:ee:8a:b9:1f:
                    84:87:31:2e:8e:1d:e9:d0:73:ae:58:21:99:58:11:
                    a9:c2:cd:b5:cc:66:9e:06:73:1b:ff:61:0a:48:db:
                    f0:56:53:7b:44:d4:19:f6:f6:d6:6c:18:98:c8:3f:
                    ba:89:bc:59:b4:10:42:e9:9e:49:6e:04:17:96:fa:
                    76:30:09:c5:a6:3f:b3:3e:63:91:3a:9a:f4:cd:4b:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:71:7F:91:07:1C:F2:14:C1:96:F7:0C:D1:A5:E2:75:F5:28:64:F3
            X509v3 Authority Key Identifier:
                keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:e5:65:35:8c:84:0f:61:86:b5:96:b0:d8:38:5a:3d:76:
         8b:5e:b2:f2:59:c4:97:67:18:82:b8:b7:cd:1a:5d:0e:58:e9:
         36:81:60:77:7f:ad:90:db:21:8b:52:3f:47:ea:ee:d0:21:1d:
         57:aa:c0:b0:ed:86:0a:c4:dc:77:a8:8e:63:19:02:42:06:46:
         4e:4e:c8:48:1a:1c:93:f7:e5:87:d1:ee:45:6f:a8:b5:94:fc:
         74:91:21:d3:14:94:be:76:93:7c:d6:51:e4:b8:94:4d:13:70:
         8e:fa:f8:9d:91:21:4a:ea:d2:51:ac:7e:3d:42:00:2a:03:4d:
         06:0c:70:1b:f4:32:6e:eb:6d:5f:2d:f3:f3:eb:d2:4d:a2:43:
         74:26:b2:4f:be:6b:e1:a4:7c:a1:64:b5:91:a3:c1:fd:61:04:
         1b:54:57:a5:b0:58:34:36:a6:14:3b:d7:35:96:bf:57:a1:d6:
         ad:7d:05:1b:19:ad:6b:06:48:1e:7d:68:3f:9c:ef:0b:73:70:
         0d:e5:28:76:1f:0d:0a:85:51:20:2a:4a:ea:b0:c1:35:af:69:
         a8:45:cd:f0:f6:12:cc:d3:74:15:ba:3d:9c:41:5f:16:15:dc:
         f0:0c:48:6f:53:47:4f:85:11:0d:1d:37:89:26:d9:80:9e:e1:
         32:4d:cf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:18:11 2026 by rpki-client