Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          VsVR62WiS9ZB2VEq1k9XfL/65w4gVfU4lblyx5ztez8=
Subject key identifier:   9E:C5:11:FD:B2:92:AD:E1:14:E7:F2:50:88:8B:60:46:E0:9D:80:E1
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       0680
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          0671
Signing time:             Thu 26 Mar 2026 22:26:30 +0000
Manifest this update:     Thu 26 Mar 2026 22:26:30 +0000
Manifest next update:     Thu 02 Apr 2026 22:26:30 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: JmGsituWHOCcSLBXCWsQ0h5w0xf5ojuVN57NkAkuE8I=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 22:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Mar 26 22:26:30 2026 GMT
            Not After : Apr  2 22:26:30 2026 GMT
        Subject: CN=69c5b296-8ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:e9:12:0e:76:22:b2:f5:d2:4e:c0:98:12:
                    6e:53:c3:6b:4d:c3:2e:fa:ed:55:65:a2:77:be:a1:
                    b7:49:d3:46:c8:31:51:39:a5:56:a9:fb:5a:58:c7:
                    37:67:19:e5:6f:db:7e:bc:16:ca:07:1c:af:2b:81:
                    9a:c2:f3:bf:c9:bc:1f:81:b5:b4:0e:a5:3f:95:12:
                    d5:ea:94:d4:c1:ae:6c:8d:87:ba:0d:b4:9e:69:bc:
                    a8:1c:0f:db:d1:62:bf:43:be:a5:82:b9:60:f2:64:
                    65:96:87:2c:91:d2:7f:50:97:f5:db:23:3f:2c:e4:
                    87:22:ae:40:a8:26:3b:43:19:bb:e2:57:08:d3:3b:
                    94:66:da:5b:55:07:42:b9:9d:74:d8:8e:14:9b:42:
                    c7:04:ef:8b:d9:60:1d:af:27:ab:de:dd:cf:cf:b2:
                    5c:a3:9d:b0:eb:7d:71:4f:a8:19:11:94:4b:25:7d:
                    5e:f6:07:6b:a5:1a:7a:50:08:90:68:a1:f8:7e:76:
                    30:a1:11:50:9a:32:04:05:19:f7:a6:1e:84:f3:17:
                    31:9b:db:76:8c:41:1c:64:d3:21:45:0b:62:c2:b3:
                    b3:0b:d3:de:67:22:5e:c7:85:2c:00:fc:02:15:76:
                    1d:80:62:53:88:17:92:4a:e5:81:2b:e3:05:9a:0d:
                    a7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:11:FD:B2:92:AD:E1:14:E7:F2:50:88:8B:60:46:E0:9D:80:E1
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:cd:e4:bc:16:0d:03:6f:c3:5c:ff:e3:9d:0b:90:80:e9:d3:
         61:47:04:3e:e1:1a:f8:19:4d:1d:4a:f2:24:0d:3a:5b:59:8e:
         fa:57:90:7d:a1:ed:6b:bf:6d:c4:48:59:a1:e8:9c:3a:ce:d9:
         a4:89:4a:87:43:b9:6a:da:93:9d:06:a3:c2:05:d9:a6:4d:dd:
         d4:b4:94:a2:d9:d0:57:02:8c:53:62:89:67:69:08:22:8f:d2:
         b1:8a:04:9e:94:dc:07:62:29:e0:2a:62:ac:1e:ce:39:a9:07:
         08:fb:47:35:8c:37:4c:47:67:fd:ae:28:ed:8e:5c:58:79:89:
         40:d0:4f:c4:8c:2b:fb:06:b3:70:32:52:be:91:a8:8b:26:3c:
         69:dd:c9:aa:8a:4d:f8:e3:2a:f9:f0:85:f8:74:fd:d6:70:fe:
         11:54:3b:e3:6b:f0:46:a3:47:40:d1:18:86:8d:32:ac:a8:57:
         f8:fa:31:59:96:ef:07:f9:1b:9e:87:dc:ea:86:68:9c:06:06:
         33:f3:09:bf:3b:73:b3:e7:eb:7c:d7:ad:21:c9:6a:bd:87:c3:
         0f:98:1c:39:a7:50:f4:7b:51:9d:bc:c4:b2:ee:63:3c:ea:8b:
         be:c9:89:cf:5e:6c:3b:b8:94:29:a3:44:44:38:fd:65:3d:4f:
         5b:96:68:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:18 2026 by rpki-client