Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
File:                     HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft (raw, json)
Hash identifier:          xH97Ts9ZsySHRtEQc4QfxjkoigHjZanO/GN3f2SaFR4=
Subject key identifier:   7C:A6:8B:CC:10:6B:83:D8:EA:5A:34:62:52:06:F9:98:13:E4:59:63
Authority key identifier: 1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E
Certificate issuer:       /CN=A911D848/serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
Certificate serial:       013D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
Manifest number:          012F
Signing time:             Mon 11 May 2026 05:51:51 +0000
Manifest this update:     Mon 11 May 2026 05:51:50 +0000
Manifest next update:     Mon 18 May 2026 05:51:50 +0000
Files and hashes:         1: HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl (hash: MuK51FlqZK9g1S9dAL9f/rq69oNm+9mwyvjKQYMkUzA=)
                          2: F0C8DB1CA54E11EF8592FD66C4F9AE02.roa (hash: N51VbptkWVgsgU5QWmECxTG7x4Sh2baOj7rAhNlJuzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl
                          rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D848, serialNumber=1DD1B8687886924C4613116050EE90E9D494269E
        Validity
            Not Before: May 11 05:51:50 2026 GMT
            Not After : May 18 05:51:50 2026 GMT
        Subject: CN=6a016e77-5edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:1e:05:78:63:5d:08:c3:e4:d5:50:9e:e3:
                    74:07:e8:fb:ba:86:14:23:da:cb:5a:aa:5e:ad:be:
                    0a:02:16:82:4c:b4:cf:03:00:34:28:03:68:8d:6d:
                    eb:c2:fe:60:9e:23:f8:37:d2:5f:ae:83:fe:ec:da:
                    5b:a6:5e:77:24:2f:fd:ac:6d:b2:9a:84:a6:5e:e6:
                    ae:8a:57:00:4d:29:f7:24:84:28:30:46:91:3f:b7:
                    34:7b:17:7b:31:af:1c:72:68:a8:97:52:3d:db:07:
                    cd:18:e3:39:44:dd:54:f4:7f:26:08:09:67:60:0e:
                    47:b3:9a:f2:c9:47:91:af:e8:c2:47:0f:99:40:3f:
                    8d:38:b9:5b:a7:ac:5a:4d:17:29:22:ed:b9:0b:77:
                    80:d0:e4:76:16:c8:36:8d:ed:71:51:8b:d8:11:87:
                    71:dd:19:c8:77:ea:e3:ec:14:fc:a1:96:c9:2e:a1:
                    75:4b:2e:3f:5c:94:fc:c0:36:3f:9c:b0:86:82:91:
                    65:59:31:ce:9b:29:5b:43:d4:96:54:b3:fb:d3:c7:
                    e8:b5:a1:81:f2:d2:2e:2e:b7:6c:b9:c7:c4:64:96:
                    d5:3c:bb:6d:07:5e:22:3b:92:c0:28:26:65:97:b0:
                    cb:d8:ff:67:9d:b4:51:e7:d8:61:bd:37:e1:27:76:
                    e5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:8B:CC:10:6B:83:D8:EA:5A:34:62:52:06:F9:98:13:E4:59:63
            X509v3 Authority Key Identifier:
                keyid:1D:D1:B8:68:78:86:92:4C:46:13:11:60:50:EE:90:E9:D4:94:26:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdG4aHiGkkxGExFgUO6Q6dSUJp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D848/C251B5B29B1011EFA72BA020C4F9AE02/HdG4aHiGkkxGExFgUO6Q6dSUJp4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:4f:9d:9b:cc:f8:f4:48:57:eb:f1:be:dc:f1:b9:05:f7:
         f6:e4:40:52:69:a1:35:14:ab:38:70:67:1c:d7:15:2e:ca:74:
         fb:24:db:da:27:64:52:81:d4:83:18:ad:fb:01:fd:a8:23:e5:
         d8:a2:6e:24:29:49:7b:85:3f:d4:bc:31:2e:42:df:f7:fa:e3:
         8b:32:f0:a2:d1:f2:c2:ec:67:66:9d:b8:5a:f1:a1:56:27:17:
         54:14:a1:f1:b8:bb:c3:b7:25:23:55:36:23:3d:43:d4:bd:3a:
         a0:e5:ba:2b:b7:2b:0d:f7:9a:72:f3:66:7c:7a:8f:22:51:55:
         25:54:63:63:39:08:0b:c4:eb:cb:e3:38:d6:98:c5:c5:19:54:
         e6:14:a5:81:6f:55:5e:cb:34:08:df:94:c3:d2:96:b5:bf:b1:
         40:01:a5:c6:a9:78:f9:4a:3e:87:04:1a:1b:a9:7b:03:f5:a1:
         d7:99:ac:8f:38:bd:77:f7:10:7b:fa:fb:07:11:67:ba:6d:cf:
         3b:74:8e:df:f1:3e:cb:98:98:69:4a:7a:fa:ea:74:ea:48:67:
         b0:03:5a:7a:f2:06:b2:c1:37:e0:1f:63:9e:58:f8:9a:3c:b4:
         40:c7:ca:7c:3e:c6:ec:5d:0e:7d:1c:e1:5b:dd:46:d3:3d:e7:
         7a:85:1a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:17 2026 by rpki-client