Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          hRG4EW9YBOb8QvCNPI238UeIUXgvUiL6Sv0v11Gk614=
Subject key identifier:   1A:CC:5D:97:53:B7:FD:AB:0F:6F:7F:11:EE:C5:86:79:9B:42:BC:B8
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          88
Signing time:             Fri 25 Sep 2026 07:43:51 +0000
Manifest this update:     Fri 25 Sep 2026 07:43:51 +0000
Manifest next update:     Fri 02 Oct 2026 07:43:51 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: pZgpzU1pWuJl3XXG1YVF5jSBM6rWb+Eabh4MKkfB4nE=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 07:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Sep 25 07:43:51 2026 GMT
            Not After : Oct  2 07:43:51 2026 GMT
        Subject: CN=6ab62637-47cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:19:fe:dc:8e:b5:d8:50:64:f1:d7:d8:a9:
                    8b:58:bc:7d:46:77:b4:80:a8:97:d2:53:88:28:23:
                    57:43:69:d5:4a:e8:db:1d:e1:8b:d5:46:7f:6b:02:
                    0a:0e:6a:c8:94:08:19:46:44:33:dd:c7:d2:8b:99:
                    ab:c1:2d:82:cb:4a:cb:03:5d:c4:29:74:41:3a:4b:
                    54:da:cc:e7:20:c0:27:66:9d:91:21:b6:16:fb:d9:
                    cd:2f:42:8c:1a:2e:e2:96:e9:59:3a:2e:85:54:8c:
                    8a:bd:75:4b:f3:55:fe:24:ef:b1:f1:df:07:8a:2c:
                    21:48:fd:c2:a8:f0:6a:5b:29:7e:bf:b7:b7:34:0d:
                    4c:ae:f8:1f:a5:bb:3f:6b:1c:e0:ee:6e:1b:0d:2e:
                    2f:fe:d0:64:98:b8:c9:ad:86:87:ff:72:b9:5b:71:
                    7d:4a:88:a1:c5:c8:ae:a6:5c:fd:4c:92:1a:63:45:
                    99:70:b7:bf:d6:8a:b4:b2:63:5b:ce:c8:9c:14:50:
                    17:c7:34:74:b7:5d:a3:07:4a:24:52:0a:4d:22:4c:
                    ed:ea:f7:db:0a:a6:61:3b:21:90:ed:c7:51:0f:07:
                    84:48:9a:3b:af:16:df:27:0f:8f:e9:b4:bf:2b:b4:
                    cd:3c:b8:3b:08:3c:91:d9:2a:ee:bd:cc:69:aa:3a:
                    d8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:CC:5D:97:53:B7:FD:AB:0F:6F:7F:11:EE:C5:86:79:9B:42:BC:B8
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:61:ae:04:97:0f:56:6d:fa:d7:14:ee:70:ec:64:0d:a0:c1:
         f5:ee:5a:54:ac:3b:a7:c7:cb:53:57:61:b0:59:e7:b8:cb:3b:
         90:86:78:5c:88:a9:c7:db:d1:62:2e:90:46:6c:76:9f:c4:16:
         0c:59:1c:ce:93:ed:b9:f4:a9:d0:36:39:bf:04:2c:6f:46:96:
         11:7d:95:c3:4c:2e:74:b3:fe:51:42:a2:65:f3:71:bd:4e:a0:
         d1:b5:ad:4e:6d:83:28:04:3c:eb:87:ef:3e:b1:01:04:96:18:
         cb:48:fe:66:c4:ae:20:9d:11:82:17:91:ea:97:d1:9b:f8:03:
         b2:52:48:af:4a:1e:a8:e7:95:51:92:cf:9c:94:21:f6:f9:4d:
         43:d8:2a:c3:7c:f4:c7:84:41:a8:3c:44:97:28:f7:f5:32:e8:
         8d:6d:e3:e4:6d:b5:e3:61:27:f9:b8:58:cb:68:f1:87:c2:96:
         6f:21:33:2b:63:4f:44:36:a0:79:5a:70:d8:d4:91:b3:06:76:
         c4:bc:9d:85:d6:ec:c2:09:0b:03:40:5e:de:cd:0e:8f:50:be:
         4f:a9:a3:da:bf:84:5f:f4:db:06:1e:14:3f:05:ed:47:2e:03:
         99:5d:70:7b:f6:51:f1:a8:80:43:be:f1:e7:35:d9:4a:24:38:
         e5:bf:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:24:24 2026 by rpki-client