Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
File:                     huI04uHiOklxRY0qcmFN8TiV4po.mft (raw, json)
Hash identifier:          dc0ZERHInrCN+SIPI5kHurSWZNH2y+KFpqjtubyocbY=
Subject key identifier:   00:A7:A8:7C:7E:73:25:7D:63:7D:6E:DC:C8:A6:BD:D5:23:74:E8:C1
Authority key identifier: 86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A
Certificate issuer:       /CN=A91604A8/serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
Certificate serial:       012B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
Manifest number:          0127
Signing time:             Sun 01 Mar 2026 06:40:18 +0000
Manifest this update:     Sun 01 Mar 2026 06:40:17 +0000
Manifest next update:     Sun 08 Mar 2026 06:40:17 +0000
Files and hashes:         1: huI04uHiOklxRY0qcmFN8TiV4po.crl (hash: BZWZYndSGURO3geQgCkHL8NJo4DMVo154Skto0LWCnQ=)
                          2: D0E3A43EABCF11F0B7733310C4F9AE02.roa (hash: MsUqurlHcW9/f7ZtraQEQ/2qpmD+6AtSK2TKciX51Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl
                          rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604A8, serialNumber=86E234E2E1E23A4971458D2A72614DF13895E29A
        Validity
            Not Before: Mar  1 06:40:17 2026 GMT
            Not After : Mar  8 06:40:17 2026 GMT
        Subject: CN=69a3df52-ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:be:2a:69:2f:a2:d4:f8:47:ca:44:36:89:
                    66:5b:31:43:0e:3f:87:9b:d3:23:93:a2:93:06:3c:
                    f6:56:e7:23:2f:09:ad:ed:15:07:b7:d4:84:a2:87:
                    e3:f8:e2:59:97:0f:de:96:b9:6a:e6:cf:d6:67:42:
                    e7:ba:35:43:3c:3c:eb:5c:3c:a0:5d:95:31:4e:44:
                    5c:15:77:fa:ae:5a:c2:a1:88:69:7f:56:a1:4e:c7:
                    d5:fd:4a:a4:7e:d5:de:a0:7e:e6:25:2a:80:cb:e8:
                    e9:0c:a2:30:65:b5:2c:63:26:3c:57:fd:c4:6e:1c:
                    9d:95:ba:f7:92:79:cf:a4:d4:ff:2d:f8:a9:01:ff:
                    a5:b3:37:97:f2:5c:b0:7b:fd:7a:12:21:66:68:49:
                    ac:85:07:ac:82:ab:8f:1d:5b:71:09:32:bc:6b:3f:
                    59:a1:b7:80:b0:ee:6f:19:b5:c0:3b:38:6f:f9:6e:
                    9d:eb:7d:3c:01:96:f7:2b:d9:a4:bf:fd:7d:50:a0:
                    b2:c9:05:20:17:02:be:52:06:4f:6a:40:5c:04:69:
                    3b:9a:28:a4:d9:1f:00:c6:e0:8c:07:db:d1:0a:11:
                    ef:01:0a:1e:3d:3c:c7:c2:d5:9b:ac:9e:90:0f:f2:
                    c8:e0:99:ef:14:3f:21:4e:33:35:a0:22:32:17:af:
                    0c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A7:A8:7C:7E:73:25:7D:63:7D:6E:DC:C8:A6:BD:D5:23:74:E8:C1
            X509v3 Authority Key Identifier:
                keyid:86:E2:34:E2:E1:E2:3A:49:71:45:8D:2A:72:61:4D:F1:38:95:E2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/huI04uHiOklxRY0qcmFN8TiV4po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604A8/A5F8E8785ADC11EF8F4C9377C4F9AE02/huI04uHiOklxRY0qcmFN8TiV4po.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:16:75:f4:82:8f:e5:f6:ee:8f:05:2d:73:63:c3:ee:43:3d:
         9f:fd:2f:16:7a:8c:09:7b:09:df:e7:d2:63:0f:5f:3d:b1:70:
         4b:90:a1:f7:4d:ce:f6:4d:66:0e:47:d4:8b:c0:c5:88:8b:f6:
         3d:1a:15:5e:92:52:fc:ff:1f:2b:29:54:73:87:20:68:c6:64:
         c8:80:20:da:3e:01:8c:bf:8b:99:75:73:4f:03:8f:fd:ef:07:
         96:bb:63:9f:c1:a0:ee:ee:35:c7:ed:d2:b6:ab:fb:cc:9e:58:
         9b:e6:42:48:64:ed:3b:4a:95:00:40:56:54:1f:db:ea:72:1d:
         09:42:ec:c0:9e:86:c1:f5:d9:70:92:53:02:51:f1:72:8d:0d:
         c2:1e:31:fd:c7:df:d9:6b:ec:33:56:83:d2:3d:08:57:78:f7:
         f9:a3:d1:bd:1f:7d:88:d1:6e:9d:4f:54:04:a6:a8:59:78:cb:
         a0:d5:96:2d:dd:d5:2b:27:72:36:8a:d2:6a:c8:8f:9e:ee:d9:
         ab:a8:16:20:ee:84:c9:a8:8a:d8:46:36:4c:d9:26:89:24:52:
         a3:ee:f8:44:9a:0c:2e:5b:1b:b5:a8:a0:b2:7e:52:c9:c5:ad:
         8c:bc:9b:7c:ae:4f:c3:20:04:f6:4d:34:1f:0e:cf:35:ae:03:
         8d:10:74:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:44 2026 by rpki-client