Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File:                     HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier:          Cpe+Q7xEhYX7bfjh48AyQVStdnfNVF3qYxcSqgHFXi4=
Subject key identifier:   D9:CC:14:1C:D9:7B:AA:FB:49:85:7F:8D:B3:CE:A3:90:DD:CE:05:B7
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer:       /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial:       0AE3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number:          0AD9
Signing time:             Sun 01 Mar 2026 23:31:16 +0000
Manifest this update:     Sun 01 Mar 2026 23:31:15 +0000
Manifest next update:     Sun 08 Mar 2026 23:31:15 +0000
Files and hashes:         1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: pY//qU8S7/g9p8Zp5gIrxgFIpQF3WOOTT3giGblacgA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:31:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
        Validity
            Not Before: Mar  1 23:31:15 2026 GMT
            Not After : Mar  8 23:31:15 2026 GMT
        Subject: CN=69a4cc44-2336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f4:3f:2b:80:8e:6a:21:78:fb:fb:ca:24:d2:
                    2e:1b:45:4a:f1:77:ee:c1:92:76:e5:e8:dd:8c:bd:
                    3f:af:5b:a1:06:39:c0:d9:9e:19:62:d8:e7:db:3c:
                    1e:44:a2:8f:eb:7c:c0:0e:e9:29:0b:0c:7a:05:6e:
                    a7:ab:d6:8e:5d:e3:f6:43:15:49:6d:b3:d6:fa:d3:
                    1f:89:96:46:7b:03:84:bc:d0:b1:2b:73:f0:cf:b1:
                    a0:a0:72:ef:b6:b5:e9:43:c0:8c:91:bf:76:81:24:
                    dd:2d:ff:5a:7e:2b:6d:79:bd:b3:53:89:02:8c:0a:
                    7c:8c:c5:12:8e:ca:f6:9b:5d:32:b2:20:fb:fd:98:
                    f0:7d:de:c1:f0:31:39:ee:25:bb:e2:01:d0:08:89:
                    71:d6:40:2e:f6:73:a3:00:a3:5a:e8:dc:16:0c:7b:
                    49:04:53:c7:4b:04:05:4f:45:67:d6:6e:47:51:8a:
                    ec:ac:f1:8c:f2:5c:b9:bf:f4:f1:01:ce:cb:b9:69:
                    1b:81:e1:5f:e0:eb:56:42:76:8e:ca:fa:38:cd:e3:
                    26:89:18:6e:7a:e7:68:d2:60:5d:c7:9a:26:8e:d1:
                    53:9a:e0:7c:58:57:3d:b0:50:55:84:72:35:c7:4c:
                    91:fa:70:e8:f9:ef:33:63:df:a8:de:50:9a:1d:df:
                    e6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:14:1C:D9:7B:AA:FB:49:85:7F:8D:B3:CE:A3:90:DD:CE:05:B7
            X509v3 Authority Key Identifier:
                keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:61:db:c5:3e:2a:85:c4:a5:45:84:30:5c:83:58:6d:05:6d:
         13:6e:a7:28:2b:64:ea:3f:73:38:a7:72:2d:41:c8:26:14:40:
         6d:28:10:31:6c:32:f1:02:37:d0:d2:66:19:c1:e0:d0:a0:bb:
         86:4e:68:d6:6e:28:1b:f2:46:d1:25:2d:4b:a0:85:4a:b3:eb:
         6b:1d:6c:b1:c2:97:ba:8f:86:99:f0:5d:ca:d9:3f:b4:7c:0f:
         11:4f:73:7c:a9:cb:4d:66:64:d7:92:0c:45:4c:0f:29:e2:76:
         e6:c2:a3:7f:4e:14:3b:69:04:fb:35:63:eb:c6:4b:71:4f:d0:
         0d:d6:b5:b8:5b:58:aa:e0:27:3a:11:47:a7:c7:5f:73:37:44:
         a3:1e:ba:8a:cb:40:9b:3f:35:18:a4:86:d4:81:16:2b:4a:d8:
         81:09:a4:dd:01:33:10:20:87:58:7d:b3:34:c5:54:b5:16:11:
         f6:50:8f:23:72:ad:a7:31:70:7c:30:ca:f2:3e:a4:af:eb:7e:
         14:ed:72:f7:64:9f:07:27:b8:83:5c:b5:88:09:07:58:2e:78:
         b9:b1:79:2f:eb:97:60:bc:7f:fb:3e:78:a5:aa:f2:22:d7:bc:
         4b:a0:b4:2d:70:ce:7d:1d:60:f1:a3:bb:bb:2a:77:29:fc:75:
         8d:45:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:55 2026 by rpki-client