Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
File:                     USSgTiOq3aRNlKsNSrLAt7IL_HU.mft (raw, json)
Hash identifier:          5b+TLD1FvgL+DguciLn9ZSgZ8srGgUw3Lk8a7AZR11o=
Subject key identifier:   0C:A2:FE:FA:F1:61:7C:C9:4E:55:3B:3D:3B:A0:A0:82:3B:BA:61:81
Authority key identifier: 51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75
Certificate issuer:       /CN=A91A8151/serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
Certificate serial:       0CC0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
Manifest number:          0CB3
Signing time:             Mon 02 Mar 2026 03:02:58 +0000
Manifest this update:     Mon 02 Mar 2026 03:02:56 +0000
Manifest next update:     Mon 09 Mar 2026 03:02:56 +0000
Files and hashes:         1: USSgTiOq3aRNlKsNSrLAt7IL_HU.crl (hash: 6/XKmEbpVPqA4T+4wm9I+ZDseoOm0vQrdM+YTT2ZC30=)
                          2: 4279BBD80C5811EA93151657C4F9AE02.roa (hash: wdDYplfzKaYX22uPvzlPb5qqxZS2nS6LfIySpohKPZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl
                          rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8151, serialNumber=5124A04E23AADDA44D94AB0D4AB2C0B7B20BFC75
        Validity
            Not Before: Mar  2 03:02:56 2026 GMT
            Not After : Mar  9 03:02:56 2026 GMT
        Subject: CN=69a4fde1-eb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:05:c8:af:6e:f6:57:92:88:cc:99:7c:8f:
                    52:3e:f0:2c:1f:f7:32:0e:04:d3:50:f1:6c:5b:e9:
                    6f:ff:02:a9:2e:26:a3:8d:aa:97:50:2d:b8:61:ed:
                    34:39:f0:68:3e:4b:08:2c:f1:d2:7b:b1:6a:3e:25:
                    4f:9c:0e:8b:42:33:e7:e3:c3:6a:85:2e:37:d9:65:
                    ec:15:88:30:b7:9d:be:7f:51:89:d1:4d:74:fa:93:
                    2b:2b:d1:1d:18:e3:10:2b:11:d7:63:62:d0:8d:be:
                    f3:4f:5c:2e:51:23:3e:2f:24:10:0f:8e:8f:71:e1:
                    e5:f8:15:01:0d:ef:45:cd:0e:ff:9a:7b:e4:55:b0:
                    b0:b3:be:82:30:4c:f5:53:97:77:64:86:0e:8b:53:
                    92:3a:2b:6d:02:ef:c5:53:d7:69:06:ea:ca:64:36:
                    67:2a:ab:66:15:09:e2:73:34:9a:e3:6f:2f:69:d1:
                    32:b8:e1:42:e3:2a:0f:c1:ab:03:06:84:7e:8b:61:
                    2b:5d:42:c4:56:b9:77:9d:00:1d:72:47:31:a3:9e:
                    55:72:4e:b4:db:be:db:04:eb:ed:90:9d:70:bf:21:
                    19:46:ba:a6:d0:00:27:52:84:44:13:6b:4f:bf:d1:
                    28:d4:07:a7:dd:7e:0e:a8:8f:46:47:62:48:7b:60:
                    45:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A2:FE:FA:F1:61:7C:C9:4E:55:3B:3D:3B:A0:A0:82:3B:BA:61:81
            X509v3 Authority Key Identifier:
                keyid:51:24:A0:4E:23:AA:DD:A4:4D:94:AB:0D:4A:B2:C0:B7:B2:0B:FC:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USSgTiOq3aRNlKsNSrLAt7IL_HU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8151/70114DAA0C5711EA98510256C4F9AE02/USSgTiOq3aRNlKsNSrLAt7IL_HU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:04:af:d0:98:b8:6f:1c:40:0f:36:cf:9a:30:3d:6b:1c:cc:
         ee:58:6a:47:15:1e:f8:96:3e:ca:34:a9:a3:1d:4e:92:70:ba:
         38:d6:73:0c:75:bb:99:c2:f6:35:a2:33:ac:65:71:76:d5:12:
         56:3d:81:c5:eb:e7:3e:c6:ff:f9:aa:1f:ad:3c:d5:74:ff:17:
         ad:47:d8:40:07:14:93:c7:b6:c4:d0:db:4f:db:dd:7a:60:e7:
         5b:1e:34:76:f6:4b:38:79:1c:b3:e2:21:79:e1:bb:0b:45:2f:
         5d:7a:38:e2:f0:57:34:43:f5:0f:46:c9:2d:5a:9e:20:b3:39:
         29:81:fa:c8:29:81:34:5e:5f:e1:d3:46:fd:eb:5f:c2:50:9b:
         8e:88:6e:e0:2b:bc:cd:fe:83:4c:f6:f4:ec:2b:53:0b:b3:fb:
         72:5c:09:e5:27:a1:ab:e6:98:87:1b:70:53:00:1e:a0:23:77:
         ef:ec:da:fe:95:99:3a:f6:06:79:fd:29:5f:52:32:c7:0f:9d:
         54:ec:f4:5d:ee:96:c2:17:90:0b:7a:99:bc:fe:f4:80:e9:5b:
         05:78:ea:c0:3d:5c:fe:61:26:17:98:ce:5c:60:40:ea:b4:2a:
         94:03:99:1f:65:40:e3:dd:b5:5f:19:c6:bd:b9:5c:4a:d8:f8:
         7d:b6:bf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:12 2026 by rpki-client