Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
File:                     HA69woHQL52iTsEXS6nPGEWbk-A.mft (raw, json)
Hash identifier:          TsUUPYUwpjIKSrWrVWvdCBkSeXHqHJ5bFF9pIagvOf0=
Subject key identifier:   51:F1:7F:55:6F:B1:D6:38:80:B0:17:2F:80:FF:59:4E:D1:37:5D:BE
Authority key identifier: 1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0
Certificate issuer:       /CN=A9179D1F/serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
Manifest number:          0443
Signing time:             Tue 24 Mar 2026 23:54:21 +0000
Manifest this update:     Tue 24 Mar 2026 23:54:20 +0000
Manifest next update:     Tue 31 Mar 2026 23:54:20 +0000
Files and hashes:         1: HA69woHQL52iTsEXS6nPGEWbk-A.crl (hash: 21Pu5zDlLleh/4aECHK2W2LgCHT94W55MBhSSjrfSY8=)
                          2: ED816DEC95DA11EC993BD050C4F9AE02.roa (hash: rZv1KMTGOlj4reQzqn5o1UsO9w76HC0DphD5Iy3DD6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl
                          rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179D1F, serialNumber=1C0EBDC281D02F9DA24EC1174BA9CF18459B93E0
        Validity
            Not Before: Mar 24 23:54:20 2026 GMT
            Not After : Mar 31 23:54:20 2026 GMT
        Subject: CN=69c3242c-4746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:e3:96:36:5e:3b:c6:f2:67:97:c8:a2:73:
                    3b:c2:c3:4e:a9:18:44:1e:64:37:0e:bd:a4:f8:a3:
                    fc:ec:c1:b2:ef:9c:1b:52:ce:1b:0f:fb:8e:64:66:
                    a2:68:61:48:64:c1:a1:fb:6d:30:3d:b4:fb:51:24:
                    75:dc:cf:53:10:35:47:75:b1:58:64:c8:cd:39:c7:
                    88:83:62:05:78:cf:89:59:80:41:69:f9:57:e3:3d:
                    3a:48:4f:1a:fe:74:37:02:f8:1b:10:de:95:99:1e:
                    c8:6e:86:bb:a8:30:e5:a1:73:e6:9e:65:e2:31:63:
                    c9:29:84:2f:47:28:03:f7:b8:01:c2:41:45:0d:ab:
                    e6:d1:d1:7e:e9:cd:45:ef:46:6d:a1:ac:a6:f9:ca:
                    f6:4e:1f:b6:a8:33:aa:ef:e8:ad:a7:1d:51:45:33:
                    80:cf:a5:28:ff:0a:6f:8c:97:1c:ca:e0:56:21:4e:
                    9e:87:f2:9a:7c:e4:66:24:f3:8f:3a:76:6f:30:78:
                    ac:e6:af:b9:84:73:0c:ba:36:a9:2c:36:0c:5e:f1:
                    7d:39:0e:15:2a:21:3a:13:cc:d4:02:a4:a2:c1:c5:
                    18:ea:77:09:b1:f3:b2:83:a0:bb:ee:95:85:28:32:
                    ac:a1:f9:b0:8e:41:c1:9f:db:35:05:5b:7d:f1:db:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F1:7F:55:6F:B1:D6:38:80:B0:17:2F:80:FF:59:4E:D1:37:5D:BE
            X509v3 Authority Key Identifier:
                keyid:1C:0E:BD:C2:81:D0:2F:9D:A2:4E:C1:17:4B:A9:CF:18:45:9B:93:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA69woHQL52iTsEXS6nPGEWbk-A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179D1F/D982CB5E95D711EC953F954DC4F9AE02/HA69woHQL52iTsEXS6nPGEWbk-A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:76:94:7d:bd:b6:a9:c8:97:a8:f4:25:05:e1:92:5f:3b:b1:
         1e:31:2a:20:3c:af:d3:c7:7f:ff:e1:c0:8d:3c:50:38:90:f7:
         d9:3c:95:c4:c3:da:4f:b3:aa:4b:33:cc:03:e3:0d:92:47:b3:
         a3:97:8d:ce:b3:b1:ae:da:37:a6:dd:7d:e7:96:57:3c:30:47:
         72:3c:11:3c:8a:05:6f:a1:da:2e:d8:82:a8:a1:f4:95:68:ef:
         4c:c6:f3:cd:c7:af:9d:c6:f2:3e:ab:da:6b:de:9e:ac:8d:8f:
         fd:8e:6a:7e:fc:12:ee:c4:3a:bb:30:29:60:f5:cb:de:50:09:
         84:a9:13:1c:61:be:82:05:0c:d3:0b:0e:59:c0:5a:f0:e9:9e:
         f3:2c:96:4b:df:2c:77:d4:8b:f9:95:bd:a6:f8:7b:97:a3:7d:
         87:7f:77:00:97:3e:97:c4:a6:21:17:9a:47:7e:31:71:7e:34:
         9a:76:04:f1:89:15:07:3e:ee:7a:bf:0f:1b:c1:c4:7e:1d:65:
         18:98:9a:4a:60:fa:fb:97:28:1d:e3:c4:de:0c:af:89:e6:d5:
         e1:f5:ea:93:ae:ae:6a:72:e0:7c:77:cf:6a:f2:5e:62:6c:20:
         76:e7:56:b8:bc:1d:4c:3c:79:9f:35:f8:69:d1:50:60:52:b4:
         16:0f:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:30 2026 by rpki-client