Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
File:                     hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json)
Hash identifier:          0kQGFoizMSb80re0S5AMjzZbElNG8+SHhf9ZIVJaSm8=
Subject key identifier:   B3:32:8D:99:EC:5E:05:F2:00:56:A7:1C:6B:AD:5C:97:E5:DB:71:9B
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Certificate issuer:       /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial:       0EFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
Manifest number:          0EE7
Signing time:             Thu 16 Apr 2026 17:34:13 +0000
Manifest this update:     Thu 16 Apr 2026 17:34:13 +0000
Manifest next update:     Thu 23 Apr 2026 17:34:13 +0000
Files and hashes:         1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: ePj0rmfIqX96Xrsqc1p3fygLxw1L6GZeFewYbLBvrpQ=)
                          2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: iut8EEVryRG83jh5a/5UJcx3oIfMx7vlVFCC3Vozxn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
                          rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3835 (0xefb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
        Validity
            Not Before: Apr 16 17:34:13 2026 GMT
            Not After : Apr 23 17:34:13 2026 GMT
        Subject: CN=69e11d95-a197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:d8:65:33:6c:61:dc:a8:58:2d:6d:30:10:
                    70:8a:a5:c8:5f:02:87:b0:5b:70:38:45:b0:c3:00:
                    b0:91:e3:e7:a5:6f:98:9e:b0:c8:83:7a:10:1b:35:
                    f7:48:83:be:05:dc:70:3a:c8:c9:86:2c:40:23:ee:
                    d5:91:ed:74:40:49:d8:0a:30:ef:86:bd:ea:53:e8:
                    cb:41:a1:62:c7:95:16:ad:45:bf:65:2b:22:56:ff:
                    cf:54:99:f6:49:d9:92:c3:06:0f:58:bd:c1:16:35:
                    96:e8:a6:25:dd:8b:70:28:50:1e:51:ea:2b:0e:31:
                    d9:29:0f:70:41:9f:b4:4a:ce:53:e6:ab:12:63:98:
                    d9:1c:20:5c:0f:e2:8b:5d:25:f6:82:5a:66:7b:cd:
                    5f:76:8c:df:29:14:9a:2a:af:f2:31:48:9b:6d:28:
                    f5:ef:d3:87:24:91:cb:e3:85:2e:09:c1:45:25:c7:
                    05:0a:49:01:a3:72:4a:f8:cf:ea:66:f7:df:02:12:
                    7d:f6:f1:52:dc:b1:72:7c:8a:28:8d:81:2d:25:9c:
                    23:df:38:6c:fe:de:0b:51:54:18:78:ce:8c:85:21:
                    15:bd:de:1d:ff:e8:1a:8a:f4:04:e6:8b:3a:19:f7:
                    3e:58:03:dc:37:32:f4:c8:18:2a:5e:ab:3b:84:f5:
                    7f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:32:8D:99:EC:5E:05:F2:00:56:A7:1C:6B:AD:5C:97:E5:DB:71:9B
            X509v3 Authority Key Identifier:
                keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:50:48:5d:dc:c3:58:e6:0a:81:a6:c4:ee:4c:66:63:f6:05:
         30:d2:e4:6e:c1:c4:f0:d3:dc:c4:29:77:b9:e9:c5:32:86:23:
         f2:aa:a6:ce:33:47:e7:8c:22:e9:11:b7:f3:f6:5e:a5:23:82:
         a7:58:d2:fa:b2:5d:6e:af:c6:98:ec:33:38:75:f7:67:0d:ae:
         9e:c3:2a:37:b8:b7:10:5e:75:e0:5e:13:dc:45:08:db:ec:e9:
         6a:c3:3f:bb:fd:cb:ca:af:33:b9:ee:e8:9b:76:fd:fb:36:50:
         05:32:6f:d1:40:b6:2b:32:5d:79:78:dc:bc:3c:47:c8:49:7e:
         af:7c:5e:b2:cd:41:40:f9:83:7d:15:20:20:ba:80:31:24:c3:
         0f:33:ad:f5:6b:45:b6:32:48:93:00:7d:a6:a4:a5:b5:61:e0:
         1a:5e:05:2c:ed:f1:a3:da:52:2f:56:04:c8:31:20:04:e2:ba:
         99:7a:54:1e:47:92:dc:13:6c:96:29:99:68:96:47:cd:48:9d:
         86:38:73:f3:05:1e:61:a6:96:c3:4d:98:26:7d:de:fa:6c:5b:
         e6:80:45:63:4e:a0:b2:4e:de:f6:0c:39:ac:c1:98:41:fc:34:
         a8:17:42:f3:33:00:d3:0a:c0:32:af:08:2e:f9:4a:54:88:82:
         ec:c1:7b:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NDMxMTAvBgNVBAUTKDg0RTRGRkI2OTI3Rjc3RjVDM0YwQTI1MjY4MkY3MURE
QjM3N0IxMUQwHhcNMjYwNDE2MTczNDEzWhcNMjYwNDIzMTczNDEzWjAYMRYwFAYD
VQQDEw02OWUxMWQ5NS1hMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztzYZTNsYdyoWC1tMBBwiqXIXwKHsFtwOEWwwwCwkePnpW+YnrDIg3oQGzX3
SIO+BdxwOsjJhixAI+7Vke10QEnYCjDvhr3qU+jLQaFix5UWrUW/ZSsiVv/PVJn2
SdmSwwYPWL3BFjWW6KYl3YtwKFAeUeorDjHZKQ9wQZ+0Ss5T5qsSY5jZHCBcD+KL
XSX2glpme81fdozfKRSaKq/yMUibbSj179OHJJHL44UuCcFFJccFCkkBo3JK+M/q
ZvffAhJ99vFS3LFyfIoojYEtJZwj3zhs/t4LUVQYeM6MhSEVvd4d/+gaivQE5os6
Gfc+WAPcNzL0yBgqXqs7hPV/jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLMyjZns
XgXyAFanHGutXJfl23GbMB8GA1UdIwQYMBaAFITk/7aSf3f1w/CiUmgvcd2zd7Ed
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc0My9GOEFFMjg4MEEy
MUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2RfWEQ4S0pTYUM5eDNiTjNz
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hPVF90cEpfZF9YRDhLSlNhQzl4M2JOM3NSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qzc0My9GOEFFMjg4MEEyMUQxMUU5ODI0MkFEODFDNEY5QUUwMi9oT1RfdHBKX2Rf
WEQ4S0pTYUM5eDNiTjNzUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA1BIXdzDWOYKgabE7kxmY/YFMNLkbsHE8NPcxCl3uenFMoYj8qqmzjNH54wi
6RG38/ZepSOCp1jS+rJdbq/GmOwzOHX3Zw2unsMqN7i3EF514F4T3EUI2+zpasM/
u/3Lyq8zue7om3b9+zZQBTJv0UC2KzJdeXjcvDxHyEl+r3xess1BQPmDfRUgILqA
MSTDDzOt9WtFtjJIkwB9pqSltWHgGl4FLO3xo9pSL1YEyDEgBOK6mXpUHkeS3BNs
limZaJZHzUidhjhz8wUeYaaWw02YJn3e+mxb5oBFY06gsk7e9gw5rMGYQfw0qBdC
8zMA0wrAMq8ILvlKVIiC7MF7eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:12 2026 by rpki-client