Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
File:                     hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft (raw, json)
Hash identifier:          PAIL0EtLxbPwQze+vrKnYvwiRdlfQ+tpMfKA1uOCrQU=
Subject key identifier:   AE:28:75:0B:9F:F6:0B:8B:88:DF:7E:73:18:AA:70:29:3A:42:2E:D1
Authority key identifier: 84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D
Certificate issuer:       /CN=A911C743/serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
Certificate serial:       0EDA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
Manifest number:          0ECC
Signing time:             Sat 28 Feb 2026 17:47:29 +0000
Manifest this update:     Sat 28 Feb 2026 17:47:28 +0000
Manifest next update:     Sat 07 Mar 2026 17:47:28 +0000
Files and hashes:         1: hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl (hash: XaFRmrgewe0DbOnt658hRCW3jszFCcKD/Ne4ZuiTS1o=)
                          2: 2B21EC2EE4E111E981365C17C4F9AE02.roa (hash: MmZvnPTLEUK2uOO8LldttqheyhLmSNsa1D7UmikJt9Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl
                          rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3802 (0xeda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C743, serialNumber=84E4FFB6927F77F5C3F0A252682F71DDB377B11D
        Validity
            Not Before: Feb 28 17:47:28 2026 GMT
            Not After : Mar  7 17:47:28 2026 GMT
        Subject: CN=69a32a31-1db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e9:a4:5c:45:8d:1c:55:6f:3d:35:9b:54:29:
                    81:f2:4f:c6:51:fe:b3:36:1e:4f:ee:6f:3b:76:68:
                    49:d7:31:43:f2:87:7d:d4:c4:2d:16:2c:67:ad:80:
                    e2:c3:d9:e5:ec:27:77:21:56:ad:c5:b9:04:cb:70:
                    14:07:49:fe:b1:0c:42:73:5b:ff:cb:ec:98:e2:ce:
                    f0:1f:cf:fa:d7:fb:06:3e:57:77:0a:22:8f:c2:83:
                    03:98:83:8c:05:71:f6:2f:18:d3:c2:f0:2c:ba:e9:
                    3d:e4:12:06:67:16:f4:8a:08:69:8c:40:2f:85:12:
                    86:11:86:9f:56:d4:e3:86:ff:d8:63:55:13:9c:76:
                    1c:5f:68:5a:53:36:63:2f:70:56:14:b3:ed:ca:3c:
                    f0:f7:9d:a5:51:62:68:20:92:33:9b:92:55:94:8b:
                    89:de:7c:0e:19:bc:e7:ae:9b:ea:77:84:19:39:17:
                    1e:48:82:d2:97:d0:d6:33:63:8f:f8:d8:46:7b:a8:
                    bc:be:00:91:3c:fd:a5:42:25:d7:78:24:3a:da:12:
                    17:e6:2d:b9:2c:e9:2b:35:c9:27:a4:d5:a2:c8:ea:
                    63:aa:5f:1c:1b:9c:d3:00:3c:31:5c:7b:99:e7:22:
                    46:83:ca:38:6d:23:ff:4c:9f:6a:63:11:2d:b0:83:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:75:0B:9F:F6:0B:8B:88:DF:7E:73:18:AA:70:29:3A:42:2E:D1
            X509v3 Authority Key Identifier:
                keyid:84:E4:FF:B6:92:7F:77:F5:C3:F0:A2:52:68:2F:71:DD:B3:77:B1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C743/F8AE2880A21D11E98242AD81C4F9AE02/hOT_tpJ_d_XD8KJSaC9x3bN3sR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:00:11:0d:dc:e4:d1:c1:f5:50:18:5a:36:78:66:92:3e:
         5a:aa:91:1a:b9:28:16:32:e1:0d:2d:10:66:e7:21:06:8d:0a:
         8e:b0:78:16:45:3a:fc:f3:a6:cd:cb:35:0c:5f:58:97:8a:c1:
         fe:6b:12:d2:a3:b3:50:8f:7e:b0:7d:bc:1c:93:d7:30:93:12:
         2d:3e:cc:e1:83:56:14:9b:69:7e:05:a1:3e:5b:0d:40:c6:98:
         54:b2:e7:a9:ca:5f:e2:3a:4b:8b:85:f1:ee:02:87:38:22:b8:
         fd:46:96:15:5f:d8:23:85:6a:b4:d2:40:bf:d6:7b:fc:c3:cb:
         1c:69:bc:61:6f:8b:fa:f3:49:8d:59:dd:df:a1:43:ec:00:65:
         1c:f2:3d:8d:12:98:a6:94:86:69:a8:91:8a:54:b5:5a:ec:99:
         6e:5f:7d:83:e5:1d:db:40:1a:2e:ce:d6:73:9c:44:c5:a3:f2:
         d9:9d:78:ea:7e:6b:7e:10:10:32:0c:af:33:be:91:5f:89:b1:
         4b:95:04:6e:3b:f3:e2:1e:62:e5:5f:61:bd:18:4e:3a:96:d7:
         69:69:cc:f6:af:91:fa:c9:70:13:e5:cd:c2:4a:4d:ee:eb:ff:
         4e:97:39:87:8f:8c:68:25:2b:70:73:e8:9f:02:5b:af:ba:86:
         7a:55:cc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:19 2026 by rpki-client