Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
File:                     HmATrx-FZOqgCX2x8haHTEt4Zw4.mft (raw, json)
Hash identifier:          axJ3hDTQghb522DvDP7MC4XgBJRXL089iLn895JobCU=
Subject key identifier:   4C:D5:44:BE:3E:2C:6F:AF:3A:12:7E:C6:BB:F3:89:88:38:7F:75:05
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
Manifest number:          01DE
Signing time:             Sun 01 Mar 2026 04:15:30 +0000
Manifest this update:     Sun 01 Mar 2026 04:15:29 +0000
Manifest next update:     Sun 08 Mar 2026 04:15:29 +0000
Files and hashes:         1: HmATrx-FZOqgCX2x8haHTEt4Zw4.crl (hash: qV/LcVNqPxol+JCzp7aqwmudPSgM5yCgJnjYFeKWikY=)
                          2: 1042D952157F11F0BA309342C4F9AE02.roa (hash: /Qf+tKAIBnoJICiPm7MJCRJXcNl/TA1kbkMxMnZ5JG8=)
                          3: F1A4DAD6403211EEB47BF84AC4F9AE02.roa (hash: hCaEHcBdoIMMETd+9Y0USawajb5aMQdvIAqk8snhxdQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Mar  1 04:15:29 2026 GMT
            Not After : Mar  8 04:15:29 2026 GMT
        Subject: CN=69a3bd62-fc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2d:0c:68:20:e0:99:ad:72:cc:20:64:2c:94:
                    5c:1a:5b:6e:a0:5c:4f:26:b4:6e:61:4b:6f:4f:da:
                    76:3e:42:05:0c:83:8d:c1:e6:c8:4e:af:67:03:3c:
                    94:ec:f3:20:8a:b4:73:fa:c4:66:bd:86:7b:d8:24:
                    9a:ee:78:c0:ee:6a:91:13:0a:4f:d0:b0:6b:a7:82:
                    38:58:0b:72:2a:4e:79:b6:cc:4a:41:5f:b1:01:4e:
                    4a:4b:20:17:36:28:3e:27:93:71:05:5b:72:bf:cf:
                    cd:d1:22:4f:98:26:44:ef:d3:85:b5:d4:bb:96:35:
                    47:11:c0:10:58:04:6c:64:f1:cc:78:77:52:6f:e5:
                    21:24:93:9b:a8:38:e0:f0:62:0d:2a:c6:8d:f2:55:
                    7a:43:8d:b7:f8:24:ea:24:b6:a8:6c:7f:0d:ef:ec:
                    66:51:99:a2:9e:11:26:d2:80:46:77:ab:e1:ae:c6:
                    35:15:54:d2:63:b5:80:88:cf:e0:d6:be:82:c6:57:
                    5d:f8:33:5d:56:2d:dc:6a:6f:60:0b:17:41:e8:8e:
                    e0:34:50:13:48:32:9e:f6:bb:0d:b5:89:dc:4c:d0:
                    8b:69:db:94:77:8b:2a:fc:27:4a:22:9b:a3:fb:d8:
                    d8:7a:99:be:30:5d:25:a6:55:d0:e1:5b:46:f8:6a:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D5:44:BE:3E:2C:6F:AF:3A:12:7E:C6:BB:F3:89:88:38:7F:75:05
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cc:1d:88:6c:42:c2:74:7f:96:ee:df:31:c3:ff:4f:e0:69:
         15:b2:df:bb:19:76:d0:43:8b:c1:2b:ca:c8:71:db:4c:e0:cd:
         5e:a1:be:db:ae:b3:f0:15:1b:ee:51:d7:5f:fc:b5:e1:58:60:
         1c:d1:91:c9:21:ac:16:e1:4c:75:d0:8c:d1:6a:b1:87:ca:94:
         1b:11:41:ef:ba:81:2b:47:de:a8:ed:38:1a:13:5a:a3:fc:39:
         2e:64:3e:93:7a:6a:3d:52:56:02:a3:48:49:f1:f3:86:68:75:
         25:8f:c4:14:38:aa:aa:6d:c3:aa:a1:1d:ab:27:16:15:9f:cb:
         27:e8:6f:10:66:08:1d:04:b8:16:cd:41:0c:33:93:64:11:35:
         20:dd:f0:0b:63:63:e8:14:45:86:71:01:7b:77:8e:3f:cf:29:
         25:f8:cb:34:19:34:a6:9a:d0:17:13:0e:dc:fe:64:ae:43:a6:
         32:da:b5:1f:be:55:35:ce:e8:bf:94:46:5f:55:4c:69:32:35:
         31:41:58:b7:c4:dd:2d:70:0b:ee:e9:61:8c:47:cd:e4:ce:7f:
         ef:f2:2e:78:ce:d8:99:17:16:ef:5e:69:a2:e6:f5:2a:8a:83:
         ab:10:b3:38:b3:77:50:9c:66:47:05:38:9b:0c:e8:a6:99:18:
         48:ce:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:36 2026 by rpki-client