Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          qEC4d5sYnTDP8Lce45LNgAVWGjcZtwKBMcDlnePNMZ0=
Subject key identifier:   A8:BA:1C:31:30:9A:71:DD:A9:AA:BA:98:2B:68:81:9E:D2:CD:CD:0D
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          53
Signing time:             Sat 13 Jun 2026 08:19:58 +0000
Manifest this update:     Sat 13 Jun 2026 08:19:57 +0000
Manifest next update:     Sat 20 Jun 2026 08:19:57 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: PjFCUQMCbtwGHAN5Nw98ZXDB7iv8HEo3ozZPcIUkfRU=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Jun 13 08:19:57 2026 GMT
            Not After : Jun 20 08:19:57 2026 GMT
        Subject: CN=6a2d12ae-804a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:92:a5:43:b8:b1:a8:c2:1e:86:c4:00:bf:
                    c7:38:df:3e:d7:ab:e2:e8:2d:f2:dd:79:16:96:49:
                    be:e7:1f:8b:6c:8d:f9:58:5d:06:0a:23:67:49:12:
                    09:5f:60:f0:c5:c6:c0:f5:b3:ec:de:e5:1d:ac:02:
                    a6:6e:b5:a4:75:91:04:f9:8f:21:af:d1:70:b4:a8:
                    1c:1c:11:1a:6c:d7:10:13:9a:d5:20:32:18:26:3b:
                    ed:9b:97:72:fc:46:4f:32:40:3b:14:5c:3b:ee:67:
                    b0:7b:9b:56:3f:56:60:26:a8:8b:c5:af:93:d0:03:
                    ef:1c:33:59:08:e2:cb:d8:26:22:a2:59:27:9b:be:
                    6c:ae:73:d6:fb:c9:b9:c6:e8:79:5c:9e:ea:a9:2e:
                    10:b8:eb:24:cf:fe:5e:fd:a3:1c:90:e7:ee:b5:f9:
                    ba:63:05:e0:23:37:84:4a:3f:2d:dd:33:a7:2f:b2:
                    d7:86:0e:47:4c:59:10:96:24:d2:2f:a7:62:6b:a6:
                    e3:0a:07:09:6a:29:f0:b9:b4:0f:e4:2c:6d:c7:2b:
                    7e:eb:92:3f:6b:ab:84:b5:8e:88:b1:a7:e9:bb:d9:
                    b0:ef:eb:02:a0:3b:02:1b:8a:b1:5b:80:d0:f8:be:
                    a8:f7:f3:a7:a1:ae:0e:b9:78:34:73:f4:bc:49:d3:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:1C:31:30:9A:71:DD:A9:AA:BA:98:2B:68:81:9E:D2:CD:CD:0D
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:19:6b:56:d4:65:c1:f9:8c:8c:a4:2b:c2:03:9b:c6:c9:f7:
         79:8f:a4:c1:7a:f7:44:ff:a7:63:a5:ea:10:fc:21:49:04:0e:
         0b:2f:c9:78:77:18:cb:9d:a7:79:7a:90:3b:bc:7f:28:b5:fc:
         11:96:27:0a:5f:98:ae:d2:30:d6:d9:66:a7:38:2e:d4:4c:6e:
         ba:74:9c:79:4e:52:08:61:c1:9b:e5:96:43:c2:39:1b:8c:32:
         49:28:90:e5:8b:ab:fa:df:b0:14:55:db:28:96:06:b0:2a:cd:
         76:a4:b6:ce:17:3d:ed:ad:76:84:a9:a6:f2:f7:4c:d0:e2:68:
         f1:06:b1:bf:2f:e3:b3:6e:53:b4:3e:81:3f:08:f2:85:cd:3e:
         f9:46:a2:8a:62:ee:05:81:d1:86:4b:9c:56:2c:6f:15:db:09:
         e2:8a:1d:4d:74:de:2a:db:16:72:82:30:16:45:54:ad:bb:33:
         ac:2c:01:38:1b:f5:55:bf:1d:43:0f:c0:61:f0:05:81:72:42:
         88:af:f2:dd:da:a8:86:e0:b6:03:34:ef:3a:c0:ea:f9:e7:37:
         da:87:b1:f2:62:0f:cb:12:4f:d5:49:a6:01:66:33:94:88:56:
         db:9f:71:18:65:f0:cb:79:77:60:e5:8a:1b:9e:33:48:63:d9:
         88:9a:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:04 2026 by rpki-client