Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
File:                     HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft (raw, json)
Hash identifier:          cBpd+NybtKZfAUplsoQSWtMdkP3q/yZDBQDGqRWL9pg=
Subject key identifier:   77:AF:A2:3C:4E:C5:5A:EF:55:71:4D:81:32:BB:0D:66:B1:F8:10:13
Authority key identifier: 1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB
Certificate issuer:       /CN=A91B727C/serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
Certificate serial:       1248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
Manifest number:          1230
Signing time:             Tue 12 May 2026 17:09:33 +0000
Manifest this update:     Tue 12 May 2026 17:09:33 +0000
Manifest next update:     Tue 19 May 2026 17:09:33 +0000
Files and hashes:         1: HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl (hash: Ev1ZtvqNQUC4rYuqUneAPM52kWMmiABSjOywZqxi58M=)
                          2: B58038B838FF11EAB8D91529C4F9AE02.roa (hash: 1PUveXSVNEFsI6eTf+ATt+sd0I0xyK56lA2WpD1UOWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl
                          rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4680 (0x1248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B727C, serialNumber=1D882C8CF2434CC9BBFD79191DC2C6982926E8AB
        Validity
            Not Before: May 12 17:09:33 2026 GMT
            Not After : May 19 17:09:33 2026 GMT
        Subject: CN=6a035ecd-da70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:fa:b5:8e:67:e3:84:55:bf:ee:c3:5a:e5:
                    20:99:78:aa:a1:65:d3:d4:eb:1b:3b:40:b8:0e:b8:
                    c1:ce:4a:06:a4:79:41:e5:ea:a1:6b:8d:19:a1:f6:
                    bc:57:ca:f4:1b:f0:29:0b:85:9d:82:bb:56:85:6e:
                    3e:f6:f3:99:aa:d3:11:6f:eb:94:f5:2f:3f:cb:c9:
                    3f:61:ea:49:35:77:e8:58:80:60:6a:6a:bc:59:40:
                    b2:39:66:2b:5f:e7:e3:ef:a1:29:15:34:bf:8c:67:
                    76:e8:9d:3f:06:89:cc:59:d9:35:e7:c3:93:23:b8:
                    c5:2c:19:46:bb:f7:c3:a8:59:3d:fa:56:4c:d5:fc:
                    fe:44:9b:37:3a:14:33:bb:02:20:74:a8:fb:2f:b3:
                    fb:7f:6f:15:82:b7:8c:80:a2:85:6f:1b:6f:ca:50:
                    3e:ed:8b:ef:94:65:6c:e8:95:d0:a5:31:00:a3:16:
                    06:d1:9c:a6:77:71:a6:40:07:bb:c1:a0:1e:ad:ab:
                    88:ac:db:74:2c:59:b3:3c:ef:fd:15:5b:c0:17:e0:
                    39:a8:32:0a:a0:11:94:82:05:a4:62:95:05:9a:11:
                    4d:64:e8:c2:56:55:c0:44:24:6e:ea:2d:bb:ef:e8:
                    89:94:22:e8:97:46:68:aa:39:4a:d4:08:3f:46:95:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AF:A2:3C:4E:C5:5A:EF:55:71:4D:81:32:BB:0D:66:B1:F8:10:13
            X509v3 Authority Key Identifier:
                keyid:1D:88:2C:8C:F2:43:4C:C9:BB:FD:79:19:1D:C2:C6:98:29:26:E8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B727C/9D77C6D4028F11E99D81F640C4F9AE02/HYgsjPJDTMm7_XkZHcLGmCkm6Ks.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b3:54:2e:09:77:83:98:ad:9d:d0:ee:e4:a4:8b:a5:56:11:
         7a:80:b1:16:e4:80:77:7c:8c:b1:71:f0:23:14:97:0a:97:02:
         37:a2:17:05:23:d9:f1:b8:40:08:bb:34:a3:b8:d0:08:df:aa:
         6a:12:34:21:55:68:fe:04:99:b9:5c:98:93:f5:75:ea:c2:1a:
         d1:c1:df:d0:98:83:97:46:83:16:c9:20:85:e6:b3:f6:99:bf:
         e8:61:05:ed:0a:18:36:b8:00:71:41:e6:d2:db:f7:9c:e6:7f:
         b9:cb:cb:84:45:02:1c:4b:2a:3c:5c:36:0c:23:2f:47:3f:69:
         f0:b3:ca:16:48:72:9b:bf:ab:6e:3f:00:bf:fc:02:c4:8b:2f:
         c8:4f:d3:fb:d4:9d:c8:15:4e:e4:46:ff:89:a4:6f:c1:48:a7:
         f5:8e:6b:0f:d7:e5:ef:83:14:24:7d:5e:1b:65:8a:45:51:7c:
         e0:78:14:0a:a8:10:60:eb:47:a7:c4:1d:00:6c:1a:60:24:61:
         8c:af:c0:90:8d:25:c1:e1:29:93:c1:44:b5:d2:99:88:05:9c:
         40:26:0f:1f:f8:c3:38:43:65:67:7d:73:e6:95:43:1f:0f:ab:
         9d:30:c3:10:03:f4:7d:3f:64:29:1a:7a:bc:aa:29:3e:22:3b:
         ca:0e:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:39 2026 by rpki-client