Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          f/4eHNkF2BR3sk9E+cTI/O4Zk9qDlTKuBElsz7hq6GA=
Subject key identifier:   C0:F5:37:A1:A7:30:32:7F:43:00:E7:76:13:F6:12:B1:2F:FC:6F:E8
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          2B
Signing time:             Wed 25 Mar 2026 07:56:30 +0000
Manifest this update:     Wed 25 Mar 2026 07:56:30 +0000
Manifest next update:     Wed 01 Apr 2026 07:56:30 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: 1l4psQ74fxmhoe+BZ95DfRsWVmHVxmUxdTZrjHDmsLQ=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Mar 25 07:56:30 2026 GMT
            Not After : Apr  1 07:56:30 2026 GMT
        Subject: CN=69c3952e-4948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6a:25:ec:84:d0:91:0d:78:76:e5:55:5c:66:
                    f6:31:91:c2:01:a0:a3:13:16:ae:32:5f:85:f0:54:
                    1a:40:8a:c3:44:be:cc:91:88:32:83:2b:41:3e:9d:
                    fb:85:b3:00:99:e0:40:9d:18:19:32:ed:e6:75:59:
                    47:a2:04:7b:b6:80:e0:41:40:cc:bb:00:be:fc:a7:
                    12:b8:03:a2:cd:0b:c2:8d:63:9f:61:aa:c6:bc:b4:
                    4c:b3:c3:12:4c:24:82:df:e1:bf:27:eb:e8:08:cd:
                    40:85:23:26:f3:3e:84:1e:5c:bc:90:88:f4:79:3b:
                    0b:c8:d8:d3:7c:09:2b:89:6e:d0:d3:f9:df:5b:b7:
                    90:f2:e7:fd:8a:73:26:79:ad:9e:31:df:13:6b:96:
                    3b:47:1f:93:a4:f9:90:3b:b4:95:0d:b1:1b:97:43:
                    1b:7f:97:b9:b1:96:1c:c5:2e:8c:cc:81:5a:f1:26:
                    ee:69:ca:42:22:3a:b4:da:ba:40:d9:34:70:d1:4e:
                    d2:1b:03:7c:0b:33:9b:1d:69:b0:de:63:24:12:e3:
                    ff:eb:e4:2a:16:e9:e3:a6:c3:2c:a5:44:dc:df:11:
                    64:da:9e:84:80:4f:4c:11:9c:5a:13:ad:7d:37:d5:
                    28:bb:a2:87:b2:c8:21:c6:5f:eb:61:f4:c7:40:ae:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F5:37:A1:A7:30:32:7F:43:00:E7:76:13:F6:12:B1:2F:FC:6F:E8
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:8d:b4:75:ab:0b:77:c0:50:5d:32:8a:60:3b:a9:79:1a:
         2b:2c:48:53:f8:fe:8f:40:e5:40:b8:fd:29:10:1e:e1:e3:e4:
         98:c1:06:d9:a9:8e:b1:a8:81:40:49:cf:bf:26:20:9e:53:f8:
         e8:ad:43:b4:ec:26:8b:ff:27:75:86:66:90:41:9f:2a:b9:25:
         2a:53:24:4c:e8:27:c0:7f:53:11:65:f3:58:d3:c4:7b:12:96:
         7b:a1:64:6e:be:a0:3b:7e:2f:d1:26:62:62:e3:15:cf:3f:5a:
         ef:66:f1:56:6f:3f:0e:91:78:a9:dc:c3:f4:be:fe:a9:65:69:
         92:62:2a:4d:23:4b:fd:f6:38:b7:50:a1:0a:40:cd:9c:10:d8:
         42:8a:32:de:3f:61:d6:7e:27:ac:28:00:6f:94:2c:24:5b:73:
         13:b4:f7:f7:0f:0e:6d:1b:ad:9c:21:cb:b5:16:c3:a5:a9:ea:
         5f:e0:61:0d:f8:54:e5:2b:c7:1e:78:bd:37:9c:32:af:6b:c5:
         c8:ef:d2:69:41:b8:e3:fc:84:a3:4e:d8:e7:f2:d5:f3:0c:ee:
         aa:47:3e:d0:21:cf:96:38:63:2d:d0:4e:f1:d0:ff:e4:3f:84:
         70:de:8f:09:9c:52:06:c5:00:93:d9:df:d7:fc:18:e1:19:43:
         e1:d1:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:52 2026 by rpki-client