Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
File:                     HN4SRMu7llQubIsJo9rBwbRDaNc.mft (raw, json)
Hash identifier:          8dV1IghnRNTFBB4qlLRlxXKMPDYbcGVvXi2XKLUEKps=
Subject key identifier:   73:A5:2A:38:58:9D:14:D7:A0:7D:36:4E:7F:64:FC:DB:FE:C0:8D:82
Authority key identifier: 1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7
Certificate issuer:       /CN=A918A498/serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
Certificate serial:       CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
Manifest number:          C8
Signing time:             Wed 25 Mar 2026 06:02:47 +0000
Manifest this update:     Wed 25 Mar 2026 06:02:46 +0000
Manifest next update:     Wed 01 Apr 2026 06:02:46 +0000
Files and hashes:         1: HN4SRMu7llQubIsJo9rBwbRDaNc.crl (hash: hd3/p/AJldryZMfHc8EmDvhaMUpBYNU9t5vGWZEjgQA=)
                          2: 62C86698F80A11EFA400AC2FC4F9AE02.roa (hash: U4LLMJ0m7hitnKHAojnOcr6u6PFK2WR9WUoRdlPrdFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl
                          rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A498, serialNumber=1CDE1244CBBB96542E6C8B09A3DAC1C1B44368D7
        Validity
            Not Before: Mar 25 06:02:46 2026 GMT
            Not After : Apr  1 06:02:46 2026 GMT
        Subject: CN=69c37a87-3685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:67:62:1e:87:05:19:5c:63:f9:d2:33:ac:
                    37:ee:02:4f:29:05:f7:6a:11:92:14:90:be:8a:bc:
                    1d:4c:c2:d4:f5:ad:fc:06:8a:58:be:d1:91:21:1a:
                    cc:14:ca:81:ff:22:fc:fb:88:1e:d6:8f:02:c7:71:
                    0e:fa:a9:fa:08:04:df:c6:37:2e:c1:70:38:88:66:
                    b7:0d:e0:48:e6:c0:e9:79:c7:66:e1:1c:4b:22:d4:
                    da:60:14:20:cf:1b:18:6a:1b:71:76:dc:c0:5d:99:
                    09:2e:4b:d6:c6:09:12:e7:b9:6b:e1:88:88:49:24:
                    cb:24:67:cc:90:88:66:9b:53:91:35:94:11:b4:6a:
                    48:4f:22:34:4f:00:f9:dd:96:f1:44:ac:d3:ac:eb:
                    76:3b:b1:2c:24:df:58:32:d9:9b:ef:72:fc:c5:fc:
                    f9:89:b0:6e:57:8f:ac:b4:58:08:53:26:88:dc:bf:
                    c7:fc:19:31:a6:3f:76:3e:61:58:a9:e7:a1:b8:fb:
                    8d:eb:59:e4:56:c7:27:70:4c:5e:d6:db:a3:25:6e:
                    99:ee:e4:60:84:69:57:cd:00:82:84:9a:15:67:b6:
                    b7:06:25:28:00:37:23:da:98:09:bd:1b:3b:eb:ac:
                    fb:d4:07:ff:20:d9:40:b9:86:18:79:66:1c:57:fd:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:2A:38:58:9D:14:D7:A0:7D:36:4E:7F:64:FC:DB:FE:C0:8D:82
            X509v3 Authority Key Identifier:
                keyid:1C:DE:12:44:CB:BB:96:54:2E:6C:8B:09:A3:DA:C1:C1:B4:43:68:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HN4SRMu7llQubIsJo9rBwbRDaNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A498/D2DED346F80911EFA5281B16C4F9AE02/HN4SRMu7llQubIsJo9rBwbRDaNc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:ce:c3:f3:c0:5b:d1:03:a1:56:6d:20:4e:76:75:50:bf:04:
         0a:7a:6a:2f:a1:24:7d:03:42:b6:92:ed:8e:0a:09:0b:85:52:
         c8:86:ea:23:24:a8:9a:dc:7a:62:f7:52:a5:f2:19:4a:86:54:
         93:4f:02:53:d1:c7:86:39:e0:20:4f:c9:65:f5:f5:71:a2:5a:
         bf:f1:64:81:49:ae:4b:fc:8e:26:9e:e1:f0:56:19:91:a6:eb:
         73:81:ae:1c:d7:d8:3d:37:92:bb:e4:e5:7a:d2:62:23:96:cf:
         48:2c:2c:65:db:c6:d2:7a:c4:f8:17:e8:81:c1:10:d4:a4:5c:
         85:a5:cf:fa:2f:b2:3b:e1:f6:1d:3b:7d:e9:53:99:4a:fb:5c:
         e1:f2:e9:73:23:ab:34:49:52:23:d1:e4:47:81:0c:34:54:57:
         82:78:1a:60:ad:3f:8c:9e:a6:c3:4f:bd:05:24:38:d7:a2:3c:
         8d:6d:7e:b0:57:d8:7a:7f:0b:cb:ba:09:96:20:51:62:bc:c6:
         84:d4:79:1f:17:61:74:71:f0:e0:1d:0f:8a:fe:32:91:cf:8e:
         da:0c:da:d8:16:6e:b6:9d:f9:a4:56:2c:17:6c:c6:a1:85:2c:
         75:3a:d9:e5:57:38:ff:6c:1c:76:0d:0f:85:f7:8d:81:f0:a3:
         f3:ea:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:31 2026 by rpki-client