Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File:                     HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier:          zjtxSVDi393tohiUgZ2IskzIPzZYGElqgfzOWfn6zJ8=
Subject key identifier:   9E:CF:B9:7D:71:5E:BA:59:CB:EA:FD:99:E8:E4:29:54:4C:32:B9:97
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer:       /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial:       61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number:          59
Signing time:             Mon 11 May 2026 08:22:36 +0000
Manifest this update:     Mon 11 May 2026 08:22:35 +0000
Manifest next update:     Mon 18 May 2026 08:22:35 +0000
Files and hashes:         1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: a0/sMXOi9C97UkY5myc2UZYoZmk6pTZl+kPV1+c/ZTI=)
                          2: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=)
                          3: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
                          rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
        Validity
            Not Before: May 11 08:22:35 2026 GMT
            Not After : May 18 08:22:35 2026 GMT
        Subject: CN=6a0191cc-d5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:a2:2c:b5:65:91:7d:e6:c4:b5:e1:cb:76:
                    1f:fb:27:3a:84:79:b7:51:0b:8e:fc:28:a3:90:23:
                    eb:3a:ea:6e:87:7e:8a:9f:ef:c2:ee:55:7f:bb:93:
                    ab:cc:fc:9a:8d:3a:97:b8:8a:ad:b9:80:eb:ce:10:
                    3e:50:7f:c9:48:16:3b:2a:fd:cf:24:df:2e:b4:77:
                    0f:38:45:42:22:45:f9:02:04:0c:10:a5:e8:b2:7f:
                    80:7e:1a:e2:fe:9f:ef:c8:14:a6:63:07:ae:16:d6:
                    4b:d8:9a:f0:be:16:23:34:c3:02:56:b4:47:74:20:
                    19:ec:55:b3:01:83:86:4f:64:c7:4a:d3:42:da:e1:
                    f6:a5:bd:b1:33:d0:c9:93:f7:c1:37:0f:97:87:8e:
                    73:c9:8a:3c:4e:3e:d1:d2:02:45:be:65:98:49:81:
                    70:68:53:ff:9f:17:0d:33:e6:48:4a:48:86:95:fc:
                    f6:47:f9:de:b0:21:43:8b:5f:4c:17:62:41:7f:5a:
                    79:da:24:87:e1:2f:69:c4:3f:cb:02:4b:bb:bb:45:
                    45:37:63:97:29:83:3c:ca:f6:dd:26:2b:34:73:d0:
                    63:51:09:06:4a:36:6b:54:4b:c5:d3:37:8b:9b:cb:
                    5d:95:0e:dc:ef:b6:5d:f7:67:06:ab:77:38:b0:fb:
                    43:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:B9:7D:71:5E:BA:59:CB:EA:FD:99:E8:E4:29:54:4C:32:B9:97
            X509v3 Authority Key Identifier:
                keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ba:b2:f1:a1:f1:ae:b8:85:47:08:6f:dd:88:42:22:b5:ec:
         82:92:e7:0a:c1:d0:fc:49:18:eb:28:82:c3:1f:e5:e2:31:bb:
         d6:53:0d:29:24:b5:65:6a:e8:45:4c:f1:b1:35:6e:6e:e4:8d:
         b3:35:cc:be:f0:c2:a7:f3:44:f2:16:b8:20:f7:d9:22:ab:65:
         43:0f:ba:4a:a8:e8:37:d3:25:54:01:cd:6a:45:28:84:5d:cd:
         2f:b6:b3:bc:21:8f:17:61:14:e1:19:61:9d:cc:8d:ee:71:6a:
         21:95:27:06:c6:31:18:60:6e:b8:96:dc:f5:80:d2:37:63:ad:
         62:b4:f9:ea:e0:49:8c:1a:60:ad:f5:e5:96:19:20:51:b6:e7:
         b8:02:4d:2f:db:ea:5e:b6:14:7b:34:a5:0b:6a:98:53:40:05:
         a1:80:19:49:d7:03:ec:13:03:78:aa:d3:53:b3:21:38:9e:18:
         47:09:e7:94:f1:e3:20:73:23:a2:54:cb:dd:cc:8b:32:76:e5:
         d9:d5:53:0b:18:de:5e:68:b6:c8:17:1b:2e:ba:8d:a1:0e:8b:
         48:ba:06:d2:fb:0a:a6:01:97:21:9f:9f:37:cc:15:ae:72:f6:
         28:c2:d8:0a:fe:ef:b1:2b:8b:89:4a:be:cb:22:02:06:c0:4b:
         24:79:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:12 2026 by rpki-client