Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
File:                     3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json)
Hash identifier:          qka3W55EeElYWD7l3RD4vr77PcIWvJANDRYtO2ZM9j8=
Subject key identifier:   B6:69:31:A4:8C:71:D7:3E:87:A9:F4:18:FC:90:3E:07:8E:67:4B:C6
Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA
Certificate issuer:       /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
Certificate serial:       02B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
Manifest number:          02A0
Signing time:             Fri 17 Apr 2026 01:25:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:25:51 +0000
Manifest next update:     Fri 24 Apr 2026 01:25:51 +0000
Files and hashes:         1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: th1W+Ag86gjIDzdVJr/vxffNcJ9PnkL1iLUidnpE8sg=)
                          2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: BAOBkKZtpbq/G6PoYc426BCsunY7XqqvxMwNsb4LUyU=)
                          3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: VOHh+ssncP1FDRjkZmMf0XUMa05f8S3klU4wKyghAMM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl
                          rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA
        Validity
            Not Before: Apr 17 01:25:51 2026 GMT
            Not After : Apr 24 01:25:51 2026 GMT
        Subject: CN=69e18c1f-173c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:dd:3e:36:21:32:61:65:6f:19:58:0e:bd:
                    4a:d8:aa:82:5e:d3:db:c0:4e:af:db:b1:e2:b7:2e:
                    1b:a8:1a:c7:f5:50:c6:86:40:73:77:4d:24:ab:fa:
                    fe:77:bd:ba:13:8e:f1:14:51:ce:bc:53:ac:3d:ba:
                    35:55:00:01:34:59:bd:47:72:09:05:f9:5f:e5:11:
                    ec:82:5c:69:03:21:f9:89:34:4d:28:e4:be:dd:cc:
                    a8:5e:17:d8:5e:f8:69:45:10:e1:8d:1b:78:06:e1:
                    10:95:a8:3d:86:af:9d:bc:ae:f1:71:21:08:1e:48:
                    f6:97:3a:05:c4:25:7f:fb:b5:54:6f:a8:37:e7:74:
                    ba:c9:a9:0f:80:aa:bb:fa:b4:de:39:a6:bf:9c:d2:
                    1f:39:a1:12:a5:6c:0a:c4:86:80:59:a9:fe:94:1e:
                    79:81:aa:ff:82:a7:8b:fd:ff:e0:7a:df:10:98:b0:
                    ae:bc:44:c0:16:21:8f:58:e7:fd:26:c9:e4:77:fd:
                    cf:e0:9e:7a:8e:2c:4e:53:e4:3e:f0:d0:ec:f8:67:
                    62:57:95:b4:f2:24:8b:85:55:0f:48:8c:03:7a:9b:
                    88:ee:12:fc:c2:67:2a:5e:18:52:0d:e5:c7:6c:ad:
                    1d:fd:96:bd:20:b5:e8:92:7c:2b:e6:70:73:f0:81:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:31:A4:8C:71:D7:3E:87:A9:F4:18:FC:90:3E:07:8E:67:4B:C6
            X509v3 Authority Key Identifier:
                keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:fb:d3:25:db:8b:02:c2:c6:a0:30:6f:46:fc:a9:09:46:
         99:9d:96:30:23:8c:89:fe:e4:72:3d:c9:bf:93:cc:27:4a:b0:
         da:79:34:a6:cd:ed:ea:17:f2:e8:d2:52:1d:c8:53:eb:a8:2c:
         17:03:99:a7:e9:6f:2e:de:ff:45:c9:98:0a:3d:11:be:15:fa:
         e6:f2:c5:a8:40:20:4a:7c:e9:ef:27:78:9d:a3:be:bb:d3:04:
         6b:8f:be:35:b1:74:39:14:4e:99:2f:0e:ec:3f:8c:2a:8c:82:
         c1:47:d2:01:70:21:9d:f9:87:6e:f1:5d:e4:fb:14:98:80:40:
         dd:04:6b:eb:86:ba:d0:40:25:68:4d:a6:78:70:d4:bd:97:b6:
         30:db:c9:28:4e:64:62:da:4d:f3:ac:33:8e:a7:4b:2a:a2:e0:
         78:b8:7b:13:07:5d:d4:c7:a9:11:59:c4:f6:ce:7a:c0:71:3b:
         7f:04:13:41:3e:b9:3d:d7:c2:9c:7a:2d:47:4a:96:b4:5b:22:
         7c:ec:3a:40:c4:84:35:47:6d:7d:27:e2:c4:40:c9:0e:57:37:
         e4:4c:45:85:28:1d:f9:3e:8a:65:19:37:a3:30:30:e0:1a:57:
         d4:ad:7f:e5:8d:cd:23:74:2e:58:c1:9b:4d:5e:2d:fe:d9:49:
         80:85:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:49 2026 by rpki-client