Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
File:                     Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft (raw, json)
Hash identifier:          76TFTLMm2oqDTx7jlY5Yc6S/HYFdoEc/zoq04CvKNrQ=
Subject key identifier:   8E:DE:65:F5:3A:50:E3:16:26:5A:5E:D8:1C:4D:F9:A5:8F:D5:58:93
Authority key identifier: 1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4
Certificate issuer:       /CN=A913B5C2/serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
Certificate serial:       07EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
Manifest number:          07DA
Signing time:             Sat 18 Apr 2026 21:16:00 +0000
Manifest this update:     Sat 18 Apr 2026 21:16:00 +0000
Manifest next update:     Sat 25 Apr 2026 21:16:00 +0000
Files and hashes:         1: Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl (hash: DvHWwTZShY9x92dUX9ZreMoOvVqm/TjbApM2meYFuI4=)
                          2: F704E032765811EE8C17A621C4F9AE02.roa (hash: bI3B3K0Bao6H6vIWYDPFQgKE5GK2hXxIjwYY6Qiwf6c=)
                          3: 5010A55A8C6411EE9E586967C4F9AE02.roa (hash: 7G+75bZAu53kyXyw+g5eEhk2ynB5kEClTZZuT/txCrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl
                          rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:15:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B5C2, serialNumber=1EED263F0428D84E3FBE51753D16D4B3D62797C4
        Validity
            Not Before: Apr 18 21:16:00 2026 GMT
            Not After : Apr 25 21:16:00 2026 GMT
        Subject: CN=69e3f490-48c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0c:6a:db:d8:e3:45:17:83:43:3c:08:27:77:
                    12:e9:27:e0:33:f8:e7:20:f4:39:15:8c:fa:52:bf:
                    97:42:b7:a0:b0:69:f0:1c:cb:04:f6:bd:ba:58:db:
                    69:b2:4c:af:61:95:11:eb:b8:a3:17:ff:7f:dc:0a:
                    72:e5:d8:93:ab:12:bc:40:cf:1b:ba:f3:6c:60:9d:
                    b6:16:fe:bd:07:30:5a:6f:c2:87:b9:83:c7:04:26:
                    bf:52:7f:26:23:44:c6:e9:ee:a8:69:9c:8a:ac:96:
                    de:d5:48:c4:cd:e5:c8:17:19:eb:e6:b2:8c:93:38:
                    96:3e:22:71:dc:ad:16:9e:48:f8:8d:22:3c:d9:a2:
                    18:49:36:98:7a:15:34:6d:cf:07:47:63:8e:1e:5a:
                    b0:40:45:96:72:27:0a:d5:35:a3:0a:eb:c1:2d:2b:
                    5d:97:e0:d5:3c:ad:41:a1:90:80:37:33:11:59:c7:
                    f9:dd:e4:5b:7a:93:fc:bb:14:a3:3a:ae:bb:46:29:
                    5f:45:54:b2:a7:41:75:6e:19:99:80:49:77:03:ed:
                    8e:51:1b:69:ca:d6:b7:36:7f:3b:24:96:af:99:19:
                    78:2b:46:a7:c5:9b:09:4c:d6:a2:41:f8:0a:32:6c:
                    eb:3a:fc:b8:ef:e0:0c:ef:ff:9d:19:72:5f:87:14:
                    4f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DE:65:F5:3A:50:E3:16:26:5A:5E:D8:1C:4D:F9:A5:8F:D5:58:93
            X509v3 Authority Key Identifier:
                keyid:1E:ED:26:3F:04:28:D8:4E:3F:BE:51:75:3D:16:D4:B3:D6:27:97:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B5C2/779D04A0364111EB8499D219C4F9AE02/Hu0mPwQo2E4_vlF1PRbUs9Ynl8Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ff:33:75:02:e1:7a:3f:9d:83:89:a2:ea:5a:17:9b:92:25:
         f7:1e:3b:7f:93:ca:07:ad:00:bc:39:8f:0a:5e:c1:76:ed:57:
         49:52:19:2c:f9:cd:fb:86:f2:63:e6:f8:95:54:54:42:e8:45:
         a2:cd:01:99:9e:94:fd:6d:1c:9f:51:b0:7f:20:d3:ae:13:f6:
         aa:83:e1:9e:80:55:63:29:8a:02:e0:1a:e4:08:27:26:88:ac:
         fa:5e:02:df:10:0e:4e:36:66:59:52:f0:55:4d:9d:04:09:1d:
         a4:34:90:76:1d:e6:59:85:8c:85:95:be:13:cd:be:f2:49:8a:
         bf:3f:74:07:bf:73:a4:77:35:a0:90:31:12:d1:71:df:9e:29:
         0d:6e:ed:52:f6:3e:7d:fc:eb:99:02:5a:d1:97:88:be:55:68:
         aa:65:ca:d6:98:7e:a8:11:d0:0d:eb:21:5a:e4:4e:0d:c7:63:
         cf:b2:2a:73:78:82:d9:aa:e5:a6:f6:a9:e4:57:0f:55:f8:e6:
         c6:1c:91:39:ea:68:9b:aa:1e:8c:1d:7b:03:aa:60:97:70:8a:
         85:eb:15:0a:77:23:94:3f:3d:07:8d:02:3a:06:df:16:6b:7d:
         07:04:f5:0a:50:4e:b3:31:c0:43:2e:d1:ce:8a:7b:54:21:00:
         32:28:b8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:32:03 2026 by rpki-client