Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          bFe6Z9GckSViwPpQcqt7xLwYFdjQcmf48TMCTecGEj0=
Subject key identifier:   BF:4D:20:A1:70:DF:76:57:AB:EF:14:10:7E:F6:D2:3A:16:88:A8:92
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          43
Signing time:             Mon 11 May 2026 08:37:25 +0000
Manifest this update:     Mon 11 May 2026 08:37:25 +0000
Manifest next update:     Mon 18 May 2026 08:37:25 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: QvyLwj66tkFkqBM8UpMoCWoD872w/P4s+E4eN4bIfKo=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: May 11 08:37:25 2026 GMT
            Not After : May 18 08:37:25 2026 GMT
        Subject: CN=6a019545-4c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:a4:45:16:97:b2:20:c1:e4:27:48:4d:47:
                    b7:5a:25:c0:c4:6e:4d:5c:95:7a:cc:7d:af:30:92:
                    71:81:72:00:8b:26:b2:b6:4b:5b:23:17:71:19:79:
                    9f:db:ab:ab:7e:e1:ae:44:9b:3a:1c:d7:d8:4d:09:
                    93:56:1a:df:3a:20:0b:46:5e:55:03:41:35:de:f8:
                    21:8d:33:e4:8b:c8:85:1c:32:b0:af:f7:67:f3:db:
                    f9:3b:90:28:c8:00:5c:ad:a5:4d:44:f5:e7:11:74:
                    ad:e1:9b:cd:f2:d8:ac:cd:33:39:19:b8:15:51:57:
                    1d:23:25:6a:84:7a:fd:33:a0:6a:71:b9:88:2c:f0:
                    e3:d7:bc:5f:a1:59:8e:8a:a6:98:d4:86:ae:c6:07:
                    95:00:f2:c0:3a:ff:e9:52:74:e6:72:ed:ab:18:6a:
                    a5:bf:7f:cc:34:50:de:29:9f:37:81:d3:7f:9b:d0:
                    67:f9:97:90:0c:35:0a:3e:34:2c:cc:ce:b9:9f:ea:
                    d7:ff:d5:32:ad:b5:91:76:a1:cb:94:53:b9:56:b2:
                    e0:4f:5b:ae:c4:fe:20:25:d4:6e:45:e6:25:99:cf:
                    b6:77:b1:00:c3:29:14:cf:46:a4:b4:ce:6b:bd:fe:
                    69:d4:6a:36:fb:4f:a6:33:40:5d:f5:c9:05:f2:52:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:20:A1:70:DF:76:57:AB:EF:14:10:7E:F6:D2:3A:16:88:A8:92
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:9f:92:62:b8:dc:77:f5:62:b9:e9:11:21:1b:e0:8a:53:
         c7:5a:75:69:13:05:18:1e:7d:62:f7:10:df:33:d9:f2:e4:42:
         35:b9:64:f2:bc:4a:35:5d:2c:23:1e:e5:ed:e5:80:46:c5:36:
         65:01:70:a8:da:cd:bf:80:57:9a:b3:e9:f8:5b:c6:cc:c6:6e:
         e9:0e:52:a5:f8:43:22:c5:dd:df:d8:67:d7:f1:82:5e:04:1d:
         cb:8b:ca:1a:00:0d:a5:c0:88:ad:7f:0c:00:92:8e:56:56:d8:
         ec:46:9c:02:b4:0d:ae:ca:6b:23:a8:0b:bd:a1:1c:67:85:63:
         a3:54:98:a7:90:a8:24:8b:f4:5f:12:11:3b:37:d2:84:b2:c0:
         f6:a2:a9:15:55:93:e0:f3:01:c8:4b:c1:fc:28:f5:cf:8f:94:
         ef:15:e8:7a:e4:22:21:33:89:44:14:01:17:46:95:51:dc:d5:
         14:62:0f:d8:02:fd:6b:88:86:fd:7d:8d:8d:9b:2e:8f:0c:58:
         f7:b2:21:c9:ec:96:2b:f6:a4:de:68:90:bf:4a:9c:5e:0f:0e:
         45:f2:d8:d7:f1:9b:2a:31:e7:b5:39:fc:6c:8b:dd:9a:56:b2:
         ef:32:2d:02:34:63:1d:8c:da:65:4e:67:84:d7:33:39:26:56:
         7a:3b:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:35:46 2026 by rpki-client