Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          yq91L7Q9UD3UVoAmWzIxRzgvRiTJP/2uMFhSVvzddt0=
Subject key identifier:   2E:9B:AD:01:23:47:ED:BA:4D:02:59:5E:F8:E8:7A:3B:05:B7:67:19
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          36
Signing time:             Wed 15 Apr 2026 08:11:12 +0000
Manifest this update:     Wed 15 Apr 2026 08:11:11 +0000
Manifest next update:     Wed 22 Apr 2026 08:11:11 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: wO6TomTi5d4GqGQJ+mD3I8v063U7+wWxVCFoan4NDhA=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 08:11:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Apr 15 08:11:11 2026 GMT
            Not After : Apr 22 08:11:11 2026 GMT
        Subject: CN=69df481f-a775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6e:06:8c:d7:0a:8d:8b:48:71:34:9a:60:40:
                    d4:b3:08:58:f4:cc:11:b0:bf:56:58:89:1a:af:25:
                    82:f3:a8:a9:bc:52:0a:fd:b3:77:13:9b:c7:cc:06:
                    71:69:bc:07:1b:0b:92:11:ff:cd:c3:5e:06:a4:06:
                    ef:bc:64:6b:64:0f:16:94:07:5f:5a:60:43:33:a5:
                    f8:73:d5:fb:03:d5:ad:09:15:55:b5:5b:1d:3e:7f:
                    63:e7:28:44:e8:93:57:74:47:ae:4f:f4:58:31:fb:
                    d2:d2:ca:e1:f2:9a:d0:59:97:d2:79:be:30:1b:1a:
                    1d:50:39:91:26:bc:64:89:44:3b:92:24:f6:90:ea:
                    ad:26:a6:03:7a:2d:96:2a:a6:5b:56:45:d8:2b:fb:
                    19:4f:1f:3e:63:d3:e5:3a:fb:4b:e3:0c:1a:c5:9a:
                    b6:3d:3d:2a:2d:25:5a:aa:cb:16:56:de:b1:6a:da:
                    c4:59:e0:67:29:06:91:93:a7:dc:41:ef:b8:c7:86:
                    cd:3c:1e:a6:32:c0:e5:4d:e6:5c:f6:c7:94:4c:68:
                    bd:06:d8:1f:28:d7:e5:f3:85:fc:cf:1a:a9:35:e1:
                    01:03:23:06:22:c6:2a:44:72:46:fc:3b:38:6e:16:
                    6b:df:54:23:76:0b:92:4b:1f:24:11:34:88:11:ac:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:9B:AD:01:23:47:ED:BA:4D:02:59:5E:F8:E8:7A:3B:05:B7:67:19
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e9:de:7a:a6:56:50:4a:05:6d:0a:0d:45:3b:ed:2f:4e:13:
         52:27:80:a5:02:fa:e2:b9:37:d3:5e:0b:45:77:ef:59:fc:5e:
         ae:c5:7e:b3:70:cf:70:b2:1a:3f:ea:f1:2d:4a:57:2c:2f:94:
         58:9c:00:75:66:5a:2d:d6:2c:d9:62:c2:c7:5b:45:68:d7:68:
         2d:2d:06:24:f3:70:b8:97:a4:af:a8:2c:cb:c4:56:a2:a3:7d:
         13:20:20:ab:4c:5a:18:99:e1:41:97:ff:96:6c:94:c3:69:d2:
         c8:a7:1b:24:57:55:09:ce:89:60:8e:68:3b:ef:c9:53:ea:6c:
         d4:25:db:c9:b9:e0:e3:3b:24:ca:66:be:c5:41:2b:85:e9:00:
         4f:d7:a9:ff:2e:d0:29:94:eb:f9:b8:6c:9d:f3:72:07:53:5d:
         98:78:36:c3:50:b3:c2:40:58:54:56:f9:71:7e:cd:38:25:83:
         8c:9e:71:d4:e4:d0:2c:a3:8f:45:eb:a5:7f:4b:28:9d:04:84:
         0d:74:a3:e2:22:1b:18:ec:56:0a:98:66:d4:bc:85:cf:e9:f0:
         b5:70:f3:51:e7:ce:17:b2:de:21:05:48:8e:68:6b:6c:73:58:
         24:a0:78:01:28:64:f2:b9:79:93:7d:d6:40:4a:fe:b8:7d:78:
         f5:4c:b9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:49 2026 by rpki-client