Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          cbUQC41pBm0FzpOac0zYan9u98ypeh+ylSnnNotd6Oc=
Subject key identifier:   66:6A:80:80:04:5F:DF:57:38:70:A1:DD:15:EA:B0:9A:60:D4:8D:0F
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          69
Signing time:             Mon 27 Jul 2026 10:16:07 +0000
Manifest this update:     Mon 27 Jul 2026 10:16:06 +0000
Manifest next update:     Mon 03 Aug 2026 10:16:06 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: dEKEPfLz0eAnvHE2hSQ2y5Oj6Hw/mMVsGazl1UIb2uo=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Jul 27 10:16:06 2026 GMT
            Not After : Aug  3 10:16:06 2026 GMT
        Subject: CN=6a672fe6-470c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:68:1e:49:14:51:b8:a7:aa:b7:fb:88:5d:
                    aa:c1:d3:c1:6c:d1:32:65:c6:6c:25:7e:29:f1:84:
                    12:45:10:f4:0d:c5:8a:0a:1c:0c:6c:36:07:ca:d5:
                    e4:16:c3:c8:7d:ec:a2:c1:52:a1:78:b2:f9:2c:69:
                    ba:9c:79:9b:bf:de:d1:53:f0:9b:12:37:62:7c:99:
                    de:01:a3:3b:8f:fd:39:19:be:c7:03:4a:98:cc:3b:
                    07:d2:d5:bc:2b:6c:4f:a8:4c:ee:28:b1:1c:ea:71:
                    d1:ce:7b:ba:83:de:14:92:ab:39:d9:22:6c:ad:9a:
                    ba:db:1d:90:4f:13:05:2c:ce:5c:ec:f6:24:de:86:
                    cd:54:5f:df:92:c6:bf:01:35:fa:b0:d4:5b:ad:f1:
                    b7:7a:c2:85:28:4d:37:d4:3e:01:ef:6e:e0:ad:ba:
                    1c:53:ae:a3:b0:d6:98:3a:60:af:8e:99:01:eb:76:
                    de:f3:1f:ff:10:1d:ef:39:5e:9e:bc:18:40:20:21:
                    44:8e:f3:29:f4:b1:ce:6e:bd:c2:3b:36:cc:73:8c:
                    59:eb:62:47:c0:b6:98:b4:d4:0b:98:0b:20:dd:40:
                    ef:56:cd:ad:a8:0f:3c:70:38:98:d3:66:56:37:d4:
                    85:ab:0c:f1:dd:0e:23:99:c2:22:22:08:31:e1:d7:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:80:80:04:5F:DF:57:38:70:A1:DD:15:EA:B0:9A:60:D4:8D:0F
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:a6:4c:95:d6:d5:03:db:52:62:7a:e9:cf:c3:51:76:0a:
         53:74:42:9e:7f:b3:22:6f:21:74:09:4b:cf:c7:f1:d1:8d:7a:
         f4:8b:23:79:32:7a:e4:67:b0:fb:83:fc:a2:84:6c:0d:5b:15:
         47:fe:04:57:83:e4:2d:a6:d9:9e:1c:f5:7c:38:31:46:50:86:
         37:5f:2c:0d:35:cd:f6:bb:0d:d6:5e:e4:10:fb:7f:a7:16:ef:
         50:64:bb:d3:80:33:c3:2b:bb:74:f3:08:06:15:b6:9c:14:a6:
         02:5c:a2:f2:04:7b:16:d4:0b:fd:60:e3:59:a9:3d:16:d8:17:
         52:b5:16:e7:f7:ec:62:9f:09:7e:0e:bd:5b:2c:78:64:4e:7c:
         9c:07:63:13:41:92:d2:ae:bf:39:e2:34:42:72:d0:95:7a:f2:
         57:be:f5:44:cd:57:43:f3:1e:05:4a:69:05:99:7e:f1:1a:c1:
         4e:4b:a4:14:94:30:ee:b0:36:81:a8:2f:8d:33:56:66:1b:60:
         38:05:dd:08:1e:7b:d7:c7:53:1a:0e:3c:60:91:5e:76:8b:a7:
         d9:55:29:9e:e7:8b:9d:4a:99:21:c9:d1:3e:fb:2e:6b:83:0d:
         29:98:fb:79:f3:3a:30:ec:f4:98:05:fd:09:6a:8c:d1:e2:c4:
         a3:a1:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:47 2026 by rpki-client