Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File:                     HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier:          FW/IEjD3viNC0/um3vE0i8LQh1KvQOObdgBpYXyw30Q=
Subject key identifier:   A4:9F:B5:DA:80:E6:DB:45:5B:09:49:9C:4F:F2:F5:EF:D8:3F:37:E0
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer:       /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial:       1230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number:          1218
Signing time:             Thu 26 Mar 2026 17:06:43 +0000
Manifest this update:     Thu 26 Mar 2026 17:06:43 +0000
Manifest next update:     Thu 02 Apr 2026 17:06:43 +0000
Files and hashes:         1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: 9cn1/qGHYYSdJz+gXudJdEwdlteYeVDRWFsQirivuns=)
                          2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4656 (0x1230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
        Validity
            Not Before: Mar 26 17:06:43 2026 GMT
            Not After : Apr  2 17:06:43 2026 GMT
        Subject: CN=69c567a3-6749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:45:b7:38:d7:60:de:ab:7a:f8:80:79:a7:f0:
                    45:55:a1:cb:da:9d:75:39:09:82:85:eb:c9:e1:19:
                    4c:91:63:7e:a2:8a:68:94:21:6b:37:e2:1b:8b:86:
                    0e:00:f6:27:2d:26:6f:90:e8:a2:59:d9:de:16:04:
                    03:02:71:17:1e:36:21:da:18:a8:c6:cc:12:10:fb:
                    f1:79:29:6d:ee:ab:9d:5f:85:23:6d:da:16:67:7b:
                    6f:ca:f0:1c:93:19:e9:c9:60:ab:29:90:78:67:36:
                    d7:83:c0:93:d9:fb:13:b9:ca:17:68:24:11:b0:21:
                    c6:f5:59:a8:cd:06:e0:77:9c:5b:d3:b2:f5:f7:62:
                    73:a8:27:84:c3:87:fb:18:c1:2e:5a:e8:66:ea:3b:
                    2c:a4:5e:43:51:60:48:72:66:ce:95:66:a1:db:eb:
                    6b:32:7e:48:0e:8f:80:55:3d:03:c9:c9:66:60:0d:
                    74:92:7c:d9:32:ef:00:77:8e:e9:26:71:f4:85:fd:
                    62:eb:8b:c6:ef:49:d5:f0:1a:6f:53:a1:03:43:c7:
                    28:b1:cc:91:2b:28:0b:f1:bc:47:82:5f:3e:e2:87:
                    2d:6a:eb:d9:af:32:da:90:d3:ed:5f:22:26:fe:7d:
                    16:c6:3a:2b:1d:c6:29:07:be:49:82:22:55:7e:ea:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9F:B5:DA:80:E6:DB:45:5B:09:49:9C:4F:F2:F5:EF:D8:3F:37:E0
            X509v3 Authority Key Identifier:
                keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:21:9e:68:8c:26:72:00:fc:6a:98:f6:8e:3d:ce:1a:fa:f9:
         1d:fe:42:66:6c:c2:6e:12:7c:96:9e:10:21:df:48:fd:4d:96:
         66:49:ec:9f:b3:a6:76:91:26:52:40:11:a0:1e:59:0b:4b:cc:
         2a:22:0d:24:8c:10:3d:4e:ef:6a:8d:2d:01:86:a0:28:da:21:
         be:34:c7:48:b3:e0:08:d4:ca:4d:fd:57:30:ca:24:fd:3d:c0:
         13:06:ca:49:b8:af:ac:18:d2:0a:63:65:a8:0f:12:da:15:fe:
         66:1a:6f:45:c2:14:ba:40:e3:9b:fe:3a:0e:5b:94:fb:c6:ba:
         5c:50:6b:c4:df:7d:87:4f:6a:9a:ba:18:cc:5d:13:4f:b4:a1:
         af:bd:92:ed:6f:24:bb:c1:70:59:cf:9b:f4:bc:49:ff:79:21:
         44:b8:26:f6:47:43:28:c3:d9:35:af:26:bb:e9:fb:fb:eb:00:
         37:3e:9c:36:2c:56:76:1a:e4:5f:06:cb:33:28:25:7f:dd:87:
         4b:98:67:2f:fb:aa:fd:9c:38:a8:cf:97:f0:de:2a:ee:c1:de:
         89:34:6d:02:88:89:17:12:f1:01:22:89:44:56:4c:e9:4d:ce:
         85:f6:4f:a1:41:22:01:53:76:2d:55:26:d6:91:8f:95:fd:83:
         12:f0:a0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:31 2026 by rpki-client