Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          KhOzhU+Idql5HcNzhTLHyB+kegF9xdk6Bn9DuBJm4LY=
Subject key identifier:   24:76:0F:80:06:E5:6F:05:D6:62:D8:96:CB:09:6C:8D:25:B3:CF:93
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       0698
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          0689
Signing time:             Tue 12 May 2026 22:37:28 +0000
Manifest this update:     Tue 12 May 2026 22:37:27 +0000
Manifest next update:     Tue 19 May 2026 22:37:27 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: t10U35YCTynA9jRzm9YWzkwzSAjX52uCGxdWfNTw1mg=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: May 12 22:37:27 2026 GMT
            Not After : May 19 22:37:27 2026 GMT
        Subject: CN=6a03aba8-90aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1c:5e:ae:cb:92:c2:36:6b:9c:1c:33:b3:33:
                    f2:0e:54:a5:f8:35:fe:de:fe:71:95:e3:0a:3d:6c:
                    5c:0d:75:0a:1a:20:e0:7f:fc:fc:13:90:43:ad:da:
                    17:25:60:73:35:20:e4:44:ce:3b:2d:10:ce:2c:ff:
                    bd:f0:db:df:6c:7e:93:2c:d2:99:5c:c5:70:7a:c9:
                    c8:45:53:6c:cc:22:60:74:06:60:58:6c:0c:68:93:
                    a2:c8:bb:8a:be:31:4d:f9:dd:fb:ce:cd:f3:6f:cf:
                    01:55:bc:d8:ae:55:be:e2:8e:4f:e0:46:a2:eb:94:
                    6c:de:bc:32:4b:d6:42:fa:76:46:bc:3c:4f:4f:54:
                    c0:44:95:cf:80:60:5d:92:b0:f2:a5:d0:76:0a:62:
                    75:47:7e:2d:7c:f7:e5:6b:7f:7b:a6:de:28:1e:e1:
                    b4:b7:1f:3a:ce:3d:5f:4b:ea:cb:9a:48:5f:5b:50:
                    b3:d8:29:5e:91:2f:a3:84:83:23:14:2b:2b:06:6a:
                    c5:22:24:5c:7e:7c:a2:3c:b0:c0:d3:1f:fe:eb:23:
                    5c:c7:78:58:e1:f3:d2:a4:87:71:06:db:85:0d:5c:
                    91:3e:d3:1d:ca:24:cc:f3:91:3a:fe:5c:12:1a:7a:
                    c6:c3:a3:d8:27:61:a4:3d:bc:ee:8e:62:65:e6:bb:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:76:0F:80:06:E5:6F:05:D6:62:D8:96:CB:09:6C:8D:25:B3:CF:93
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fc:37:2c:b7:35:27:04:fa:7e:03:2e:4c:87:d3:9a:a8:cc:
         b5:5c:1f:f0:30:df:01:2c:58:6b:a8:d8:5e:f1:5f:4a:73:03:
         dd:3d:98:95:89:0b:cb:6f:0c:97:1a:c4:15:63:33:49:d9:a0:
         54:aa:f4:2a:34:5b:b2:2d:99:ce:d6:11:df:e1:3d:4d:dd:d2:
         0e:19:20:f7:85:9a:56:35:b7:57:4e:53:62:fb:c3:a1:39:da:
         82:96:3a:d3:8a:52:5e:9d:d1:1a:cc:eb:73:b0:1d:69:60:49:
         a7:fb:18:91:a7:c2:72:c6:7a:f6:d3:4b:ed:e2:d7:3a:ad:6f:
         cc:de:1b:87:5c:fd:b7:d2:42:2e:8e:b3:38:d0:87:71:be:a9:
         aa:08:b6:ed:00:a6:c8:ff:c4:bb:5c:c0:ea:a4:db:f4:f3:80:
         af:d8:46:b4:84:42:dd:58:57:f0:4c:6a:ba:16:86:85:a7:78:
         7b:a1:70:31:35:8f:cf:3a:ba:68:01:60:b9:dd:22:c1:cb:7a:
         0c:6e:ae:97:75:d5:a1:ba:e4:ed:7a:59:c1:c5:15:27:9d:b8:
         04:6c:f1:bd:0d:80:1f:f3:f1:37:72:b3:31:5e:ec:85:23:f0:
         ac:86:18:3b:26:87:20:f3:cc:09:42:78:01:e1:84:09:48:a0:
         75:a9:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:14 2026 by rpki-client