Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
File:                     HUW1iuOmlSERtAmFTag5MXvugjM.mft (raw, json)
Hash identifier:          dI7KlhnKtCRny3UvuxTAUkupW5Vb4C1aEOShG8jtK2E=
Subject key identifier:   A3:8E:D8:3F:B5:17:EB:A3:B9:33:35:A1:F6:93:CA:51:F6:82:CC:7A
Authority key identifier: 1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33
Certificate issuer:       /CN=A9120119/serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
Certificate serial:       11A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
Manifest number:          1A29
Signing time:             Tue 24 Mar 2026 17:05:07 +0000
Manifest this update:     Tue 24 Mar 2026 17:05:07 +0000
Manifest next update:     Tue 31 Mar 2026 17:05:07 +0000
Files and hashes:         1: HUW1iuOmlSERtAmFTag5MXvugjM.crl (hash: NwGHXA6Kdmd89VI/qrxNYkWAVEUrAwtyKzXU2tb0aZ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl
                          rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 17:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4518 (0x11a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120119, serialNumber=1D45B58AE3A6952111B409854DA839317BEE8233
        Validity
            Not Before: Mar 24 17:05:07 2026 GMT
            Not After : Mar 31 17:05:07 2026 GMT
        Subject: CN=69c2c443-d6e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:4d:a0:b4:11:59:7c:a6:fb:7f:31:cb:0d:
                    cd:b0:a5:51:bc:da:2a:cb:1d:7e:4a:63:b2:97:b8:
                    87:7e:1b:4e:2f:36:08:b6:64:c3:ce:9b:5a:e3:99:
                    66:5c:2d:7c:01:b2:27:79:2f:d1:0c:97:5d:b5:7d:
                    68:b0:72:e7:81:aa:ed:9a:de:0d:88:ae:11:e2:c6:
                    4f:d3:4a:32:e3:8d:29:90:30:ba:a8:2d:38:29:65:
                    ac:c1:45:b5:3a:87:39:00:ea:05:0a:44:a5:68:21:
                    fa:a0:e2:df:77:40:d7:38:4c:01:81:57:90:cc:31:
                    d8:81:b0:45:49:07:02:6d:9c:22:1a:f3:fb:c7:83:
                    f8:ba:b9:63:3e:eb:51:12:bf:0d:6b:88:0f:03:e9:
                    f4:c0:dd:60:78:d6:a8:2a:21:c5:44:9e:8b:ed:89:
                    51:a8:d2:b6:89:cc:dd:39:5b:ca:17:2c:35:cc:31:
                    56:76:bd:9f:a4:53:32:49:40:c3:f3:35:c4:ab:37:
                    e1:1a:fc:66:94:d1:53:01:0c:96:8d:30:fc:05:70:
                    21:b1:76:cc:a1:09:f6:d3:74:aa:e6:95:d1:b6:6f:
                    33:93:3a:72:3d:b8:0b:db:c6:47:32:49:41:68:af:
                    9c:3a:f3:3a:57:73:4d:8e:a4:c4:08:7d:e3:26:90:
                    5f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8E:D8:3F:B5:17:EB:A3:B9:33:35:A1:F6:93:CA:51:F6:82:CC:7A
            X509v3 Authority Key Identifier:
                keyid:1D:45:B5:8A:E3:A6:95:21:11:B4:09:85:4D:A8:39:31:7B:EE:82:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUW1iuOmlSERtAmFTag5MXvugjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120119/EEB71BE213F311E9882F9B67C4F9AE02/HUW1iuOmlSERtAmFTag5MXvugjM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:47:36:23:cd:b3:05:a2:39:f0:21:3a:44:5f:5d:08:ce:
         88:e4:4d:a3:dc:d0:af:ac:9b:da:a2:ac:04:ca:16:82:3b:27:
         b8:e2:d3:b9:32:67:e0:6e:bb:7f:cc:74:5e:a0:17:3f:1e:55:
         63:09:ed:4d:da:05:93:9a:e1:09:39:3a:55:33:b3:59:e3:b7:
         ce:3c:e9:c6:9a:7e:b0:97:74:c4:5d:4d:01:2f:d7:11:57:af:
         fd:13:ab:6f:33:4a:a9:fd:d1:b7:8e:d3:99:b4:c6:8b:ac:fa:
         28:df:30:58:9f:8c:02:9a:01:07:75:ed:4c:f2:b5:84:ba:b2:
         82:75:58:d8:dc:f4:e7:f4:cc:79:01:19:00:72:b4:a0:8a:4a:
         1d:95:d4:94:ef:34:d3:11:99:ad:b4:0d:94:69:05:8b:b1:73:
         2c:5f:ef:26:86:08:9b:30:88:0a:0f:ab:27:8f:88:93:2d:bf:
         7e:d8:86:c6:da:ce:1d:60:e5:b0:40:93:22:9d:12:21:48:90:
         61:60:31:17:b0:a7:2e:c6:61:6d:64:07:f8:15:a2:18:1f:8b:
         c5:fb:77:6f:72:a2:b1:75:74:3a:7d:44:20:15:cd:ee:e6:80:
         14:da:a7:5e:03:2d:69:91:b0:90:45:34:7a:32:c6:c6:c7:ed:
         f4:06:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:46 2026 by rpki-client