Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
File:                     huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft (raw, json)
Hash identifier:          YRlLPhBpJhT9IUzs38mozP1S4f89n1hN7afIC+Fzbaw=
Subject key identifier:   B6:78:EA:50:45:D5:44:2E:7A:22:B5:D6:BA:EF:18:49:D4:3B:D2:E9
Authority key identifier: 86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5
Certificate issuer:       /CN=A91C6A87/serialNumber=86E425237BD23CE43D1198351812609BF40555F5
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
Manifest number:          06
Signing time:             Wed 25 Mar 2026 08:23:40 +0000
Manifest this update:     Wed 25 Mar 2026 08:23:40 +0000
Manifest next update:     Wed 01 Apr 2026 08:23:40 +0000
Files and hashes:         1: huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl (hash: OL+AjSAc88DPOxeHfI8cSpdT2D/s0ByX6CwyfWv0+7Q=)
                          2: 55D930E024C611F1B0EE1E69A6833773.roa (hash: Hw7ENTeCIJUN2Q7kCZRq1jtY4Qdg596dbpso11pOaj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A87, serialNumber=86E425237BD23CE43D1198351812609BF40555F5
        Validity
            Not Before: Mar 25 08:23:40 2026 GMT
            Not After : Apr  1 08:23:40 2026 GMT
        Subject: CN=69c39b8c-4269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:a9:41:16:3e:b3:e9:a1:07:ef:2d:61:7d:
                    ef:1c:af:5b:5b:36:bf:4e:97:3e:97:cb:94:38:47:
                    38:c4:52:40:a9:5e:aa:53:98:e5:ea:b7:26:01:3a:
                    8d:3d:e8:a1:66:0c:f6:cd:10:77:b4:a4:4d:b7:d7:
                    64:0e:81:8d:34:ef:9f:4e:8b:15:01:54:58:62:1d:
                    1a:9e:e1:72:62:96:dd:18:cd:99:1f:83:16:55:a1:
                    c4:1a:e5:39:1f:fc:b2:32:a7:f3:46:c0:87:fa:ce:
                    5d:c4:41:e6:a4:40:1c:83:7c:12:1e:ed:62:ab:91:
                    4f:68:79:5e:07:1a:66:10:96:2b:26:07:73:6f:0d:
                    d9:b3:bf:85:98:8a:0c:66:81:0e:32:4a:a4:2d:0d:
                    71:ae:5b:50:9f:64:23:39:41:cf:6d:d0:ac:b4:c1:
                    55:83:7a:75:32:60:eb:3e:79:64:5e:0a:8a:47:e0:
                    46:66:84:a8:1d:13:79:80:51:cc:97:34:32:7a:ae:
                    ff:83:f7:fc:35:bf:66:d4:58:ab:e2:f1:7a:d4:a7:
                    48:31:1a:0d:20:49:2b:a3:e9:1f:42:8c:49:b2:5d:
                    be:12:fb:9e:68:94:90:c3:16:e5:17:b3:22:6f:c8:
                    99:60:dc:3c:dd:de:35:e5:e4:68:da:21:be:6b:e9:
                    82:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:78:EA:50:45:D5:44:2E:7A:22:B5:D6:BA:EF:18:49:D4:3B:D2:E9
            X509v3 Authority Key Identifier:
                keyid:86:E4:25:23:7B:D2:3C:E4:3D:11:98:35:18:12:60:9B:F4:05:55:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/huQlI3vSPOQ9EZg1GBJgm_QFVfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A87/DA24354E24C511F19A420EEBA5833773/huQlI3vSPOQ9EZg1GBJgm_QFVfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:ea:24:e5:56:73:b7:9e:8b:1c:30:a4:ff:de:ff:76:ab:d7:
         77:79:ff:22:d3:85:9c:c2:fe:fe:f2:b0:04:76:1e:19:b3:d8:
         8b:e0:f3:e6:52:f6:ec:77:ef:04:92:6f:43:84:70:10:18:76:
         30:a4:01:1c:ce:b6:6c:bb:cf:52:f3:f7:15:c0:72:2e:f7:15:
         93:57:09:63:b4:6a:52:33:b3:16:eb:b9:ff:12:c1:cb:53:9d:
         6e:f3:ff:a6:62:df:e8:34:e3:db:57:93:87:be:0d:6f:87:68:
         09:dd:6f:69:10:f6:f5:fd:36:10:35:0f:a4:41:34:4c:6f:54:
         15:4b:56:e3:57:b6:2b:02:00:12:d6:c6:cd:a3:20:ef:5e:cb:
         87:17:ca:04:d4:2c:9a:ff:df:c1:99:86:2a:02:34:c1:e9:3f:
         40:90:1f:f5:30:c5:4c:4a:5f:9d:b0:d9:52:d4:a6:f8:4a:a1:
         26:f7:49:7c:6d:f8:88:af:ce:b5:89:da:c9:8e:0b:d8:d4:25:
         a9:eb:b5:b1:b5:e6:ff:2a:28:9b:3d:f6:fa:87:f3:3a:36:c1:
         6f:b6:fc:6b:95:94:ee:40:78:bf:83:10:e5:9d:48:a6:f2:d5:
         4f:8d:38:8b:51:a5:ab:c6:6a:3a:a6:ce:ef:d0:22:c0:94:c0:
         a4:a2:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:24 2026 by rpki-client