Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
File:                     HUkvo_OylYBJWmiA1ATuDDcK2SU.mft (raw, json)
Hash identifier:          p0dXxBS3MEauSII27oRkaF3F2RNW9yl1ZVyfJeJM3aI=
Subject key identifier:   B2:23:FF:3C:C8:7D:DA:72:CC:1E:C6:57:AF:60:C0:B2:72:3B:F9:18
Authority key identifier: 1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25
Certificate issuer:       /CN=A915D963/serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
Certificate serial:       01C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
Manifest number:          088B
Signing time:             Tue 24 Mar 2026 21:59:24 +0000
Manifest this update:     Tue 24 Mar 2026 21:59:24 +0000
Manifest next update:     Tue 31 Mar 2026 21:59:24 +0000
Files and hashes:         1: HUkvo_OylYBJWmiA1ATuDDcK2SU.crl (hash: qlQvE/vtBBiHuJipIBwYXAhTHltbA5pqecPVrgPzOIM=)
                          2: AE497F78EFD311F08FDE80E8366F56BC.roa (hash: X9jPCZEMWoGQ94NhhknprQOWplVin8VAtLLz669e5UE=)
                          3: D458065EF30B11F0A359DAA54E6F56BC.roa (hash: CujWoz7YSR3BrTm8n54jyD4+DKLImLUDsMDTDNYN3Ck=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl
                          rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D963, serialNumber=1D492FA3F3B29580495A6880D404EE0C370AD925
        Validity
            Not Before: Mar 24 21:59:24 2026 GMT
            Not After : Mar 31 21:59:24 2026 GMT
        Subject: CN=69c3093c-da8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:9b:9c:62:f4:9e:a0:3c:20:4d:75:25:87:
                    61:d9:6e:cd:c5:22:dd:3a:11:ce:65:fa:71:05:3c:
                    3d:45:ec:3a:31:b0:ab:ec:51:ff:a8:03:d4:c9:8c:
                    86:b3:4a:0f:41:c5:ca:d8:fe:4b:ca:cf:84:a1:23:
                    2c:41:bf:0b:25:8c:ff:7e:22:da:b9:d3:50:b7:36:
                    a2:55:ca:20:07:87:16:04:47:46:ef:53:e5:9e:86:
                    b9:1b:b0:3c:4c:8e:51:1a:8b:e6:8b:a1:2c:fd:df:
                    57:21:4a:ed:11:c8:4e:53:62:bc:a2:47:c4:59:15:
                    d7:52:e7:4e:9c:2c:41:36:cd:21:ee:c9:99:7b:ec:
                    e4:17:7d:3f:18:2d:99:20:f2:8a:40:46:1f:2e:a9:
                    b0:ba:28:45:13:16:0e:b1:7b:42:ac:0f:1b:8f:13:
                    46:fa:34:60:71:9a:9a:61:07:33:7b:47:3f:96:14:
                    aa:41:67:34:88:22:50:ac:ef:10:36:30:c3:a2:76:
                    79:9b:41:26:3e:00:d4:ed:64:4b:a1:fd:ce:ed:1c:
                    16:9f:70:3c:bc:1b:ef:04:5f:11:e6:85:97:96:c7:
                    67:12:d3:cc:87:58:f3:0e:e6:f1:7b:8b:ab:70:5a:
                    97:1b:4b:0f:21:8f:de:e0:de:a6:b1:ff:cc:f9:f1:
                    21:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:23:FF:3C:C8:7D:DA:72:CC:1E:C6:57:AF:60:C0:B2:72:3B:F9:18
            X509v3 Authority Key Identifier:
                keyid:1D:49:2F:A3:F3:B2:95:80:49:5A:68:80:D4:04:EE:0C:37:0A:D9:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HUkvo_OylYBJWmiA1ATuDDcK2SU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D963/90E80BC897E211EB9B39D531C4F9AE02/HUkvo_OylYBJWmiA1ATuDDcK2SU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:92:8b:8b:f5:b8:7c:8e:2f:83:0e:1b:85:fa:d0:1f:18:
         11:cc:2a:31:f5:0f:f0:cb:44:bd:fd:39:5a:53:97:3b:e9:5e:
         2c:ec:93:36:55:da:10:02:f3:90:bb:69:3d:eb:6b:af:94:12:
         11:b7:c5:0a:e4:9d:fd:36:e2:30:73:74:56:34:5e:0e:09:88:
         54:07:8f:17:ff:ce:3b:56:74:bd:1c:e8:e1:9d:97:70:44:c5:
         22:2f:91:db:11:5e:e3:d6:14:7b:33:f8:d4:ab:fc:3b:82:e8:
         a8:29:38:a6:3e:78:76:2d:43:51:5f:d0:f3:fe:34:69:59:e1:
         8a:1a:d6:4f:d1:3d:56:67:e0:b6:c7:ec:c1:64:f2:6a:12:d9:
         5a:c4:e8:81:07:bd:f2:49:e4:23:12:60:1d:49:d1:1e:08:8a:
         47:75:38:54:2e:eb:c4:23:cd:46:08:be:c5:04:ef:07:f7:1e:
         8f:40:58:44:57:a4:01:a7:5e:55:ad:26:04:cd:6a:f2:26:b4:
         8a:a1:03:87:f6:ff:2f:a5:3e:4a:5f:2e:48:14:86:5a:a8:9c:
         0a:72:38:15:84:9c:4b:da:43:a5:b1:92:52:fa:56:a5:05:ab:
         75:32:9c:d4:7e:0f:ae:21:f4:73:93:cb:cd:49:28:c3:a7:d2:
         01:1d:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:50 2026 by rpki-client