Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          gQ0qsfYgI5EqZ3Ct+P/9N5VGsGDsbtedZDFTre+foLU=
Subject key identifier:   5C:8B:A1:46:25:65:FF:80:1A:46:D5:1A:13:3F:00:E7:D1:E2:72:6A
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          01EC
Signing time:             Wed 25 Mar 2026 02:41:49 +0000
Manifest this update:     Wed 25 Mar 2026 02:41:49 +0000
Manifest next update:     Wed 01 Apr 2026 02:41:49 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: +qosmzOucO6hgw8bd+hgNBWwMlZ3Rpe/KkUI750y3VY=)
                          2: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: FdNaF3+d7P8rDGstXuH8gApZBnIYbbzLiawSXMHrTM8=)
                          3: 1042D952157F11F0BA309342C4F9AE02.roa (hash: fqdoOBIiwQy8idxxM7YMLxvJT+7Eo0Bpc31Gs3WweTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Mar 25 02:41:49 2026 GMT
            Not After : Apr  1 02:41:49 2026 GMT
        Subject: CN=69c34b6d-2ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:68:40:f9:c0:93:4f:04:04:87:ad:4c:df:
                    ae:20:14:93:62:41:7d:6e:bb:b6:7a:5b:68:90:08:
                    32:55:86:8b:ca:ce:de:17:11:f5:da:a5:0a:f9:21:
                    32:47:3a:a3:c6:6f:d5:2b:9a:c4:0d:f8:49:c1:c8:
                    6f:9a:19:c4:c9:a7:a6:4a:3a:cf:96:ec:fb:06:94:
                    3a:34:50:35:d8:49:6c:55:8a:3f:42:aa:4d:b2:07:
                    99:3e:ab:83:36:72:49:7e:a2:05:b1:8b:28:c8:e5:
                    8c:6b:66:f0:43:78:c4:bf:f8:3c:41:d2:16:9f:0f:
                    19:fd:b7:a1:02:f8:01:cd:a8:a0:92:08:5e:a4:e4:
                    d2:03:34:05:59:4c:44:5d:03:fd:5e:80:ce:dc:ac:
                    45:87:05:92:aa:a8:ed:66:e9:1a:f4:9f:56:a2:d9:
                    91:c0:ef:1c:32:29:e7:92:71:f1:42:f7:01:b4:2f:
                    03:1d:0d:83:f7:b0:0e:72:aa:f6:9a:89:b3:67:ac:
                    5b:05:84:a6:6b:5f:ca:11:ba:7c:51:da:3e:36:ea:
                    6a:c1:97:8a:d7:71:f5:7d:f7:15:5b:41:b3:60:5c:
                    fe:5a:dd:4f:e2:c0:e1:28:95:75:a5:db:4a:09:88:
                    6c:40:cf:f4:fd:42:59:d4:d0:af:2c:1d:10:43:8b:
                    79:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:A1:46:25:65:FF:80:1A:46:D5:1A:13:3F:00:E7:D1:E2:72:6A
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:2a:85:b1:ed:57:a2:fc:73:cd:27:69:d6:b3:f4:bf:ad:
         05:fd:60:d1:bf:f7:34:91:55:76:a6:81:ca:c8:68:01:46:85:
         23:3e:e6:42:ac:25:f1:f3:81:f0:40:68:25:06:24:d0:34:d2:
         4a:97:eb:ef:21:44:66:03:cc:c9:84:4d:9b:69:d2:a0:2e:e5:
         78:8a:43:f1:4c:1c:9a:52:75:3c:51:03:6b:5b:e7:4a:3f:5d:
         4d:ca:d2:15:71:79:f4:83:bc:de:cf:86:85:7f:55:49:cf:10:
         ba:c8:80:10:f5:16:f9:38:60:45:e1:da:29:19:72:fa:dc:ef:
         c1:ce:69:21:dd:c2:b5:dd:43:79:5f:98:e3:5c:ff:8b:22:b4:
         7e:53:c9:94:a6:0d:18:92:60:c9:12:24:dd:49:8f:b7:f9:c2:
         19:f3:8e:47:b4:96:c3:dc:46:92:e3:a5:52:20:cf:53:b2:04:
         54:6c:45:d6:af:94:ad:f5:11:44:73:e1:f5:eb:c3:6f:e5:3e:
         d2:a7:ea:23:9f:b8:c5:1d:40:d1:dc:3c:7b:76:00:73:90:fc:
         06:40:85:d6:7c:a4:e6:8c:03:7d:45:28:6d:d9:49:a7:62:52:
         16:04:94:0d:b0:71:c1:b5:f1:95:c9:1b:48:00:75:84:c2:89:
         14:0e:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:35 2026 by rpki-client