Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
File:                     HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft (raw, json)
Hash identifier:          yvXua8xAVu4yI2Ieq3IWxFfVYN+02weI+eLO6HK5iq0=
Subject key identifier:   36:2B:8D:00:DE:02:9C:A4:7C:05:E6:8A:32:44:35:E5:1E:A9:7E:61
Authority key identifier: 1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08
Certificate issuer:       /CN=A91B6066/serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
Certificate serial:       C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
Manifest number:          C6
Signing time:             Wed 25 Mar 2026 06:05:43 +0000
Manifest this update:     Wed 25 Mar 2026 06:05:42 +0000
Manifest next update:     Wed 01 Apr 2026 06:05:42 +0000
Files and hashes:         1: HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl (hash: bRl8YDRBTP5+jCb4uZ3v5zW/XnMCUrNxcuwjD/mW2YQ=)
                          2: CB16EA82FB6411EF90E1E429C4F9AE02.roa (hash: +R/5D0gNthuky+t+krzTmhszjCbndQciERoN4WBmNy4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl
                          rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6066, serialNumber=1D4EC4253313B62C4844916B85DC0FFE4B07D508
        Validity
            Not Before: Mar 25 06:05:42 2026 GMT
            Not After : Apr  1 06:05:42 2026 GMT
        Subject: CN=69c37b37-c635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:98:be:72:d7:da:dc:2e:82:03:bd:4f:be:
                    95:4d:6f:3b:4b:ac:1b:3b:7a:75:e5:e7:ac:69:f2:
                    fe:33:bb:d2:02:32:f2:72:95:24:fa:df:24:b3:a2:
                    d6:f7:8e:f4:12:a0:f9:9e:1f:ee:67:6e:38:08:51:
                    c1:f5:48:8f:b6:32:d7:1e:c0:e4:d8:b2:ea:83:75:
                    71:0d:b7:32:97:8e:9f:8a:01:6e:63:b8:d0:10:3e:
                    7e:db:7d:ad:78:9c:66:35:f0:11:0a:7a:e6:d3:40:
                    0f:3a:61:c3:d4:21:77:7c:c3:a0:be:36:9c:3d:68:
                    88:47:a8:59:1d:74:0c:28:7b:80:dd:52:2d:31:08:
                    8a:ea:82:da:39:e7:32:11:0d:bd:41:27:69:32:9b:
                    89:be:6d:3b:91:34:24:eb:cc:62:71:74:74:ee:26:
                    a3:3a:94:de:70:16:5a:f2:1f:44:78:04:17:c4:64:
                    53:30:c7:99:1c:04:95:3a:77:34:c8:4c:de:02:59:
                    3e:96:b6:3e:f7:46:6f:ef:de:69:98:72:e3:67:86:
                    a8:cd:f5:1b:30:4f:9b:6f:0b:ef:ef:e9:b0:15:b1:
                    64:65:1a:6b:9d:7d:fa:01:b1:43:ce:bb:77:af:c9:
                    d8:5c:7e:a0:a9:4a:e5:ee:f8:f3:bc:69:d4:f0:64:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2B:8D:00:DE:02:9C:A4:7C:05:E6:8A:32:44:35:E5:1E:A9:7E:61
            X509v3 Authority Key Identifier:
                keyid:1D:4E:C4:25:33:13:B6:2C:48:44:91:6B:85:DC:0F:FE:4B:07:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HU7EJTMTtixIRJFrhdwP_ksH1Qg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6066/648A8832FB6411EFBC9B3529C4F9AE02/HU7EJTMTtixIRJFrhdwP_ksH1Qg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:93:4e:1e:88:ec:21:96:c5:b2:f4:98:b5:3e:67:98:a3:a7:
         0a:93:1c:c6:b8:e5:5b:71:03:04:d5:d8:bf:8b:d1:34:b0:55:
         0e:44:42:e1:74:a2:d7:ff:c9:75:ee:be:1d:fd:dc:04:ed:79:
         53:c3:2d:f1:a1:d0:2d:d4:3f:35:ea:f0:5e:ec:5c:ac:07:f6:
         68:89:59:c8:21:88:4b:6c:b9:e4:ba:b6:04:7c:92:14:9e:cb:
         42:eb:5d:4c:21:17:fb:78:fc:74:b2:fd:d8:f5:43:a1:2c:07:
         7b:53:7c:82:75:8e:b4:af:87:9b:f4:0d:b8:70:60:54:42:92:
         d3:b3:4a:48:05:8d:30:d1:72:49:00:01:ff:43:ba:ca:57:80:
         8d:ce:b0:b2:94:03:92:49:8e:93:66:e2:7a:b0:a2:df:a3:2e:
         ae:f6:ae:b6:da:b7:3a:b1:20:a1:7c:eb:09:7d:96:31:47:2d:
         5a:3f:e2:91:c9:6c:c8:80:08:72:aa:dd:97:08:63:6e:1a:db:
         6a:17:e9:b9:62:c6:a7:02:8e:d1:85:2d:c4:f1:9b:32:90:25:
         b8:4c:74:25:40:8e:83:32:1d:32:6d:d3:39:52:f3:ea:06:0a:
         c7:73:11:bd:83:2d:39:87:c3:ec:cf:7b:07:41:7e:40:6d:3c:
         b0:69:4d:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYwNjYxMTAvBgNVBAUTKDFENEVDNDI1MzMxM0I2MkM0ODQ0OTE2Qjg1REMwRkZF
NEIwN0Q1MDgwHhcNMjYwMzI1MDYwNTQyWhcNMjYwNDAxMDYwNTQyWjAYMRYwFAYD
VQQDEw02OWMzN2IzNy1jNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAspWYvnLX2twuggO9T76VTW87S6wbO3p15eesafL+M7vSAjLycpUk+t8ks6LW
9470EqD5nh/uZ244CFHB9UiPtjLXHsDk2LLqg3VxDbcyl46figFuY7jQED5+232t
eJxmNfARCnrm00APOmHD1CF3fMOgvjacPWiIR6hZHXQMKHuA3VItMQiK6oLaOecy
EQ29QSdpMpuJvm07kTQk68xicXR07iajOpTecBZa8h9EeAQXxGRTMMeZHASVOnc0
yEzeAlk+lrY+90Zv795pmHLjZ4aozfUbME+bbwvv7+mwFbFkZRprnX36AbFDzrt3
r8nYXH6gqUrl7vjzvGnU8GQboQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDYrjQDe
ApykfAXmijJENeUeqX5hMB8GA1UdIwQYMBaAFB1OxCUzE7YsSESRa4XcD/5LB9UI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjA2Ni82NDhBODgzMkZC
NjQxMUVGQkM5QjM1MjlDNEY5QUUwMi9IVTdFSlRNVHRpeElSSkZyaGR3UF9rc0gx
UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hVN0VKVE1UdGl4SVJKRnJoZHdQX2tzSDFRZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjA2Ni82NDhBODgzMkZCNjQxMUVGQkM5QjM1MjlDNEY5QUUwMi9IVTdFSlRNVHRp
eElSSkZyaGR3UF9rc0gxUWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAZNOHojsIZbFsvSYtT5nmKOnCpMcxrjlW3EDBNXYv4vRNLBVDkRC4XSi1//J
de6+Hf3cBO15U8Mt8aHQLdQ/NerwXuxcrAf2aIlZyCGIS2y55Lq2BHySFJ7LQutd
TCEX+3j8dLL92PVDoSwHe1N8gnWOtK+Hm/QNuHBgVEKS07NKSAWNMNFySQAB/0O6
yleAjc6wspQDkkmOk2bierCi36Murvauttq3OrEgoXzrCX2WMUctWj/ikclsyIAI
cqrdlwhjbhrbahfpuWLGpwKO0YUtxPGbMpAluEx0JUCOgzIdMm3TOVLz6gYKx3MR
vYMtOYfD7M97B0F+QG08sGlN3A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:31 2026 by rpki-client