Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
File:                     HxGmFtcy5BY7RP62KF7-7lh8bdI.mft (raw, json)
Hash identifier:          c0nfRPJcvN36YDpdgHUOLW41jyuYi6IqbW9z57AsNQc=
Subject key identifier:   8F:3F:F2:9B:30:98:21:E5:EF:38:C8:2B:55:9C:56:62:2A:85:EF:0E
Authority key identifier: 1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2
Certificate issuer:       /CN=A91C113B/serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
Certificate serial:       04ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
Manifest number:          04DF
Signing time:             Tue 12 May 2026 23:54:47 +0000
Manifest this update:     Tue 12 May 2026 23:54:46 +0000
Manifest next update:     Tue 19 May 2026 23:54:46 +0000
Files and hashes:         1: HxGmFtcy5BY7RP62KF7-7lh8bdI.crl (hash: l63pzLNcEDpR4PiWBWLol+OHx/5WVpBMFFwFd9v9QF4=)
                          2: F45C79E262F711EC8184F344C4F9AE02.roa (hash: 31ILuWSDcxMEoCJtg/DemIqgF6JDQtA4+Gr57AYJDnI=)
                          3: 30E0A83C62F511ECA1FC5A6CC4F9AE02.roa (hash: 2RxAlS/oLuf7Y3VMI5wk5JfPIc2P4lPgJltprUhrclU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl
                          rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:54:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C113B, serialNumber=1F11A616D732E4163B44FEB6285EFEEE587C6DD2
        Validity
            Not Before: May 12 23:54:46 2026 GMT
            Not After : May 19 23:54:46 2026 GMT
        Subject: CN=6a03bdc7-a2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:ac:71:b2:9b:11:36:c1:1f:35:51:43:6a:
                    e5:79:3e:87:dc:f9:42:86:c3:01:67:c1:2f:1c:59:
                    41:98:09:94:2a:ac:cd:b0:21:6d:bf:96:76:c6:79:
                    90:6c:88:7e:ec:d0:09:db:60:b5:08:c4:94:97:30:
                    84:87:f7:e1:72:f7:cd:e4:4b:6c:9c:74:c7:20:3e:
                    fb:36:55:b5:68:3d:2b:5b:bc:a8:18:82:1b:90:3a:
                    d3:7f:ff:30:37:0b:09:d8:66:36:40:91:03:53:4f:
                    66:f9:58:fc:18:29:4b:c0:74:89:6b:4b:43:06:2c:
                    08:a4:96:06:64:02:08:9e:4b:43:05:d1:df:01:33:
                    84:0a:84:6b:9d:68:db:14:f1:56:2d:ad:8c:ff:59:
                    e4:4a:cf:38:6d:46:a5:b3:5e:c8:8c:7e:d4:8f:43:
                    6c:c8:8e:22:08:5e:ed:0c:df:be:04:5e:f8:e1:34:
                    5f:ae:bf:57:f6:f1:b5:36:21:01:6a:34:63:5c:86:
                    94:b6:42:a6:9c:6b:a4:43:4c:85:f7:1e:b5:21:84:
                    c5:86:f2:67:0a:dd:1f:46:56:0d:a8:c6:34:92:9b:
                    15:22:84:64:12:d8:e8:42:95:6a:7c:58:a5:dd:97:
                    5c:3b:11:6b:3e:a0:a8:c2:f1:11:f6:09:7c:31:fe:
                    65:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3F:F2:9B:30:98:21:E5:EF:38:C8:2B:55:9C:56:62:2A:85:EF:0E
            X509v3 Authority Key Identifier:
                keyid:1F:11:A6:16:D7:32:E4:16:3B:44:FE:B6:28:5E:FE:EE:58:7C:6D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxGmFtcy5BY7RP62KF7-7lh8bdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C113B/7BE7C09062F011EC952B2965C4F9AE02/HxGmFtcy5BY7RP62KF7-7lh8bdI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:97:da:2f:01:f3:6e:d6:35:0c:b6:a6:2e:37:b3:fd:20:e6:
         3a:24:af:5f:33:b3:5c:be:ac:26:e9:ff:cb:f5:26:0e:f5:cd:
         42:1b:04:7b:40:f9:28:d7:eb:1a:14:dc:58:c1:9f:15:d4:ba:
         fb:bb:80:b7:6d:2f:77:2f:1c:62:cb:ff:7f:b4:a4:0a:bf:9f:
         2e:a5:af:2c:da:25:78:75:91:d1:29:dc:77:06:f0:83:90:33:
         9b:e4:bb:8a:84:71:71:39:44:06:c9:26:ce:39:d0:94:9c:76:
         75:90:c4:a4:1e:74:12:6a:b6:d8:b6:ba:ac:13:2d:23:e1:10:
         a7:8c:94:ff:b4:53:99:b0:25:bd:8a:bd:1c:a3:a9:ea:a5:70:
         fc:5f:d6:89:fc:47:1b:d3:44:1a:33:aa:53:a5:46:21:64:4e:
         f4:6f:17:8b:fd:4c:53:1f:a8:53:13:02:f4:e6:09:9f:c8:bf:
         3e:75:8c:96:7b:e0:3a:a2:09:f0:e7:f4:13:e0:b1:6e:d0:2e:
         47:95:1f:df:8b:b9:23:94:7b:35:5d:6d:56:e6:84:8f:68:e2:
         68:c0:78:63:7b:56:4d:d7:82:dd:7e:52:26:50:66:05:d1:77:
         0e:e3:b8:63:fe:7c:4d:01:df:6f:44:90:7b:31:7c:66:8a:67:
         0b:11:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:52:15 2026 by rpki-client