Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
File:                     hpeZugq_YN3ywa2PwMH2YASWqRY.mft (raw, json)
Hash identifier:          WM1eg3bTjkZknsCuVy9dZ42E5xhf+AwtV1TS0p2YfzM=
Subject key identifier:   A6:57:20:E0:71:CA:57:47:94:A1:09:35:CE:9F:24:C2:62:25:56:53
Authority key identifier: 86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16
Certificate issuer:       /CN=A917972C/serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
Manifest number:          1A
Signing time:             Fri 17 Apr 2026 08:38:07 +0000
Manifest this update:     Fri 17 Apr 2026 08:38:07 +0000
Manifest next update:     Fri 24 Apr 2026 08:38:07 +0000
Files and hashes:         1: hpeZugq_YN3ywa2PwMH2YASWqRY.crl (hash: DHJEQvQSBnT/WPsouuNEiiDFax67tJu9o5GhE06RNMc=)
                          2: 825F950215E711F19073865B1E3D8C67.roa (hash: oGyiESQ7qU7ebQT5CqWkjJS5cSJPxn6IEfAe1EVNZtw=)
                          3: 81DF53EC15E711F19073865B1E3D8C67.roa (hash: +SRcsIgiU2NuCS0kORpgl7wKzP04VyN5f6Ac6d+EidI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl
                          rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917972C, serialNumber=869799BA0ABF60DDF2C1AD8FC0C1F6600496A916
        Validity
            Not Before: Apr 17 08:38:07 2026 GMT
            Not After : Apr 24 08:38:07 2026 GMT
        Subject: CN=69e1f16f-b131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:ca:33:ab:1d:48:d3:95:e8:b6:f5:2f:b4:
                    c5:24:08:54:c9:fb:4c:79:c8:26:47:4c:e1:0b:91:
                    71:4a:04:2e:c1:67:ac:76:a9:b3:b6:59:03:ed:a7:
                    01:63:ef:fd:3f:28:b2:26:8f:25:3f:85:48:a7:b6:
                    14:2d:86:75:e8:09:ad:fd:00:69:65:b7:2c:f3:37:
                    ed:d6:ef:cc:27:58:d8:d1:a5:1d:1a:aa:ff:6a:57:
                    8f:e6:3a:9b:ea:81:76:32:3f:f9:fe:14:38:6e:8c:
                    8f:a3:90:d3:de:18:9b:9a:b4:d7:7b:1b:0e:3d:22:
                    f2:46:96:39:b7:80:11:f2:3f:ea:84:52:aa:c9:fa:
                    64:38:b8:80:90:63:37:50:07:43:7b:a5:10:28:52:
                    79:37:d6:c6:e9:33:61:0a:1c:8d:8c:c7:b5:6a:e3:
                    75:1e:11:0a:53:0f:54:94:de:7e:c4:2a:82:8e:c6:
                    00:51:7e:67:01:d9:8b:08:a0:79:3d:fd:17:21:db:
                    21:9b:76:5f:c6:2e:b6:c4:7c:b1:4c:da:50:0b:80:
                    88:82:0f:3e:a3:3a:6c:6d:87:37:0a:8c:43:de:40:
                    3f:fd:f8:6b:5c:7a:32:d8:8a:d2:a9:6d:77:2f:be:
                    bc:e4:27:8e:52:41:be:e1:0c:43:6e:e4:7c:6f:5a:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:57:20:E0:71:CA:57:47:94:A1:09:35:CE:9F:24:C2:62:25:56:53
            X509v3 Authority Key Identifier:
                keyid:86:97:99:BA:0A:BF:60:DD:F2:C1:AD:8F:C0:C1:F6:60:04:96:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hpeZugq_YN3ywa2PwMH2YASWqRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917972C/4AB4C94215E711F1BA4BB9DF1D3D8C67/hpeZugq_YN3ywa2PwMH2YASWqRY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:71:bf:98:d4:1b:e4:09:b4:4b:d5:81:b2:93:00:d9:ae:4b:
         76:06:df:25:da:42:12:79:07:ce:fa:06:33:c8:55:4e:67:96:
         e6:17:93:6d:f8:1a:86:f9:d5:13:e8:3d:81:8a:a7:1d:74:06:
         43:f6:e0:c3:8d:be:9f:ad:3b:0b:a6:2e:28:3a:f1:e7:d3:91:
         38:bf:71:74:5b:1c:87:ef:39:4d:93:1a:86:54:1c:ed:4c:09:
         9c:d1:c2:1d:c3:19:76:00:12:14:96:35:7b:f6:5d:04:60:34:
         82:3e:6f:86:dc:46:8f:e6:ec:85:1b:15:1c:71:d9:d9:0c:13:
         14:4c:b2:b7:a1:01:c9:51:55:31:54:94:0a:c4:c4:d6:54:00:
         29:07:49:f6:79:a4:17:e1:cc:01:f6:cb:da:e5:5e:41:05:90:
         4d:ac:2e:0a:58:ac:ee:06:cb:47:99:c8:30:29:d0:b5:3f:81:
         d4:90:1c:aa:c9:f1:87:8e:18:52:7d:e4:57:a8:97:99:a3:2d:
         18:a7:8e:a9:1e:d4:82:08:50:19:7b:2d:fd:21:c5:a9:51:99:
         83:73:a7:0f:90:d4:3f:3b:d0:9a:70:0b:e8:a3:df:be:77:89:
         e8:81:5b:46:98:40:4c:d4:6a:b0:c0:a1:f3:ca:b9:a6:2b:8c:
         e2:b2:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:25 2026 by rpki-client