Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File:                     HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier:          Iq2PEn8FpkpD0fZ0N+HiwFnvdSayQuge84UOAF1Xs5w=
Subject key identifier:   F0:A1:91:7F:30:53:72:95:DE:5F:B3:06:CB:3D:47:8D:59:51:87:D5
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer:       /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial:       3559
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number:          354B
Signing time:             Tue 12 May 2026 14:56:25 +0000
Manifest this update:     Tue 12 May 2026 14:56:24 +0000
Manifest next update:     Tue 19 May 2026 14:56:24 +0000
Files and hashes:         1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: QqKp0+5WnfdICaeV2CWxgJDl3j4FEG1XQYhBDGyLe3M=)
                          2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13657 (0x3559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
        Validity
            Not Before: May 12 14:56:24 2026 GMT
            Not After : May 19 14:56:24 2026 GMT
        Subject: CN=6a033f99-6283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:14:d6:cf:3f:c3:09:a4:40:70:4c:68:ef:
                    f3:85:4a:c4:01:cf:c0:47:33:8f:b9:0d:b0:9d:e2:
                    dc:24:d0:e1:b0:0e:3b:96:85:48:a1:fe:23:aa:f8:
                    d7:9e:6a:c2:47:2f:5d:4c:c9:87:32:97:4c:e6:94:
                    6e:ec:e3:b9:e5:c3:0c:6b:79:44:5b:98:7b:10:e4:
                    e9:87:50:2d:39:df:51:e1:7f:e2:5b:68:01:1a:89:
                    a2:54:14:eb:da:c4:a6:7e:e6:39:d6:13:a0:32:f5:
                    d9:2f:cd:f0:26:41:6d:ea:41:93:02:72:14:9d:b7:
                    e3:a6:c8:e4:60:e0:b7:5d:49:f1:1a:f3:7f:a8:27:
                    20:6c:27:86:b7:b9:f8:01:00:de:6e:71:ee:37:fe:
                    72:ee:3b:1f:4f:db:9e:35:28:b9:03:d7:0d:5b:42:
                    95:66:70:86:8c:db:c7:30:37:14:3d:86:fd:79:04:
                    41:7f:91:7e:97:a1:6a:31:38:52:d6:9f:b9:f8:a5:
                    d8:88:ea:60:2e:aa:3c:63:c8:d9:76:f8:4c:e0:b1:
                    6c:97:a6:a6:a0:c0:db:04:bf:9e:a3:d0:08:d0:5d:
                    00:52:0f:5a:f5:a2:e3:e8:2a:c2:74:c4:9d:1a:97:
                    00:27:98:72:5f:f5:ab:4c:29:6f:02:1e:6c:f0:5b:
                    71:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A1:91:7F:30:53:72:95:DE:5F:B3:06:CB:3D:47:8D:59:51:87:D5
            X509v3 Authority Key Identifier:
                keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:2c:21:80:d3:65:fa:9c:8e:db:f4:09:3b:83:fe:c5:be:
         ec:7b:c1:0d:dd:99:c9:31:9d:43:62:af:62:18:51:e7:3d:f0:
         f7:08:64:2c:38:84:b0:ec:8d:19:4b:ab:61:90:73:1a:8a:e8:
         62:fa:50:38:f0:d3:2d:bb:ba:92:d7:2d:41:ce:1b:a1:f5:a4:
         53:4c:d5:3e:c1:76:ff:b9:62:32:65:10:8e:68:29:27:9c:64:
         b4:78:39:de:09:63:38:d7:65:60:92:38:e4:ab:65:69:31:01:
         f3:f8:f9:7d:c0:02:b2:6d:fa:00:1a:25:2a:2d:bf:f7:19:73:
         a2:57:3d:28:fe:0a:9b:e2:87:bf:cf:86:af:43:2d:a2:aa:b8:
         6a:f8:7b:1a:3c:6b:b8:68:08:37:b3:ef:f4:5c:c8:a3:8d:0c:
         be:44:48:f7:88:fe:87:5e:40:4b:f4:0a:dd:42:d0:89:ec:ef:
         17:b1:2f:28:74:8c:16:46:24:25:ab:82:77:7f:48:27:a5:c2:
         91:20:1f:6a:5b:99:34:e8:34:0d:9e:2e:3c:48:c5:3d:f5:af:
         55:64:27:c5:33:fb:8a:a0:c3:e3:4f:0e:66:44:4d:3e:05:39:
         dd:a7:f6:23:41:79:45:04:eb:fa:6a:9c:ff:b2:5d:51:a5:dc:
         1c:ba:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:13 2026 by rpki-client