Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
File:                     HRIX74_oS1glUWcbyjXmhEhpJJc.mft (raw, json)
Hash identifier:          hBHjYX0ilzerVNz09y7cQXfWNMl3Nc9w45XJGOdaly8=
Subject key identifier:   50:AE:BD:A5:EA:AC:5B:EB:E0:E1:00:D8:52:23:61:AF:BF:E9:E0:88
Authority key identifier: 1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97
Certificate issuer:       /CN=A91C8BB4/serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
Certificate serial:       0AFB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
Manifest number:          0AF1
Signing time:             Thu 16 Apr 2026 19:19:03 +0000
Manifest this update:     Thu 16 Apr 2026 19:19:03 +0000
Manifest next update:     Thu 23 Apr 2026 19:19:03 +0000
Files and hashes:         1: HRIX74_oS1glUWcbyjXmhEhpJJc.crl (hash: C/9Mw+Fo6/0WLLL/xy3d1m0eDLGhuhnx3zhrq5ay0dI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl
                          rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2811 (0xafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8BB4, serialNumber=1D1217EF8FE84B582551671BCA35E68448692497
        Validity
            Not Before: Apr 16 19:19:03 2026 GMT
            Not After : Apr 23 19:19:03 2026 GMT
        Subject: CN=69e13627-dd05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:63:15:5d:69:09:ba:ed:b2:57:6b:b4:d5:
                    9e:d6:84:50:98:ea:b2:ee:25:af:13:d2:9d:20:74:
                    20:88:6a:95:71:3e:d0:5c:f9:31:49:05:8f:fb:9b:
                    fc:8b:63:9d:42:e4:df:6d:a1:32:05:78:75:c9:bb:
                    a1:99:d3:3d:17:f4:54:df:2a:7d:25:82:f1:9e:e7:
                    c0:4a:24:74:0b:48:03:eb:73:a5:d2:b2:41:85:28:
                    46:a0:38:37:a0:be:2f:81:44:83:12:b3:04:d6:37:
                    df:8c:74:0b:f7:52:5e:b4:a0:6c:f1:ac:0e:2b:de:
                    ae:8a:41:da:0a:f3:f5:a4:34:93:c2:e5:e7:1e:58:
                    49:0d:5b:da:e2:2b:4f:ad:8f:69:0d:80:88:02:00:
                    c8:24:25:05:42:19:a7:1c:ba:ec:1a:f7:43:ba:f1:
                    97:0c:d4:e6:23:d5:4a:64:a5:06:d9:d6:90:2e:2e:
                    40:b4:84:6a:4e:c3:c9:c4:19:c0:52:6c:a7:21:4f:
                    20:d5:d5:25:eb:70:8f:c8:91:ad:99:eb:81:15:ad:
                    a8:08:5b:bb:c1:2d:e9:f9:39:12:8d:ef:96:2b:f9:
                    c0:7f:02:47:5a:e6:6e:ea:a0:f9:15:6b:14:a0:26:
                    4d:f0:75:d1:66:f9:37:ec:3a:db:db:ef:fe:bd:a8:
                    97:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:BD:A5:EA:AC:5B:EB:E0:E1:00:D8:52:23:61:AF:BF:E9:E0:88
            X509v3 Authority Key Identifier:
                keyid:1D:12:17:EF:8F:E8:4B:58:25:51:67:1B:CA:35:E6:84:48:69:24:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HRIX74_oS1glUWcbyjXmhEhpJJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BB4/D954BABE69B711EA88E72E59C4F9AE02/HRIX74_oS1glUWcbyjXmhEhpJJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:82:f8:41:39:13:38:ff:de:10:fc:d8:ee:af:c2:f1:d1:a2:
         b6:5e:fd:9a:71:fa:51:41:8f:9f:e1:ca:0e:b9:14:54:d4:10:
         27:09:66:20:99:c4:c7:69:19:a3:4b:f4:17:95:84:18:0f:98:
         02:81:55:be:15:d8:df:86:b7:e3:0b:91:9a:a4:83:df:3d:f0:
         e0:2b:a1:b6:27:cb:3d:0d:05:e4:ac:d9:38:36:bc:2d:da:98:
         77:af:b6:cc:b4:30:e7:7c:c7:63:0d:2c:d1:f0:1f:28:4b:0a:
         8c:2a:3f:cd:38:54:9a:06:51:d8:08:7a:d6:5b:f7:a8:1d:a2:
         7a:7a:89:04:90:f2:e4:c2:20:20:a7:b1:c2:8b:db:41:5b:a7:
         55:b1:61:f6:fc:9c:0a:35:e3:34:1a:95:f5:a4:7d:12:7e:4d:
         c7:7b:68:d8:98:6a:6e:1c:87:eb:9c:95:0d:ed:9c:8a:fb:88:
         b6:2c:80:af:77:29:91:d8:d2:3b:99:5f:1c:d9:57:d0:8b:e4:
         47:72:a8:b9:43:bf:86:86:2b:a0:ae:54:aa:50:3e:c8:ef:35:
         cf:e7:56:41:95:86:ad:a2:fb:d1:27:64:c6:f2:75:a2:36:82:
         f0:34:2f:04:64:a4:c1:bc:f8:d3:60:48:4d:da:9a:db:19:d0:
         98:b9:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:52 2026 by rpki-client