Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
File:                     HtdycKSBilV07-7Kyvt0g812iCE.mft (raw, json)
Hash identifier:          ubdFySyCnXNZakZ7WY1ATr+kFv9pbkySaDOsBs/Q/Xw=
Subject key identifier:   7C:53:3A:5F:C4:21:C7:63:6D:6B:D9:0B:A9:1D:BE:3A:AF:0D:58:D8
Authority key identifier: 1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21
Certificate issuer:       /CN=A91CFE58/serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
Certificate serial:       0B06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
Manifest number:          0AFD
Signing time:             Fri 17 Apr 2026 05:08:40 +0000
Manifest this update:     Fri 17 Apr 2026 05:08:39 +0000
Manifest next update:     Fri 24 Apr 2026 05:08:39 +0000
Files and hashes:         1: HtdycKSBilV07-7Kyvt0g812iCE.crl (hash: 0RM4ZoprfoASt/IzdiG2xfjXsoWqySSYhrys7NFBt1Q=)
                          2: 7C29A45A669A11EA9A11434FC4F9AE02.roa (hash: FltWI5xRyUf7n10bBM13nJiUl3E+pGaXZNwDZHIDukY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl
                          rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2822 (0xb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFE58, serialNumber=1ED77270A4818A5574EFEECACAFB7483CD768821
        Validity
            Not Before: Apr 17 05:08:39 2026 GMT
            Not After : Apr 24 05:08:39 2026 GMT
        Subject: CN=69e1c057-3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:b3:a7:96:cd:57:37:0e:7a:01:ba:92:78:
                    21:c8:5e:07:05:2e:b1:03:2b:b3:77:2d:38:8e:8a:
                    e4:ca:7b:c3:70:c7:a7:2c:3b:ca:d5:30:af:69:e9:
                    d6:cb:5a:70:a9:2e:30:7d:49:ea:3c:99:13:78:b5:
                    f1:df:3b:70:e2:74:33:46:52:c9:ad:ac:84:98:44:
                    e8:58:04:d5:b6:f4:d9:f7:03:22:ac:61:fe:73:ff:
                    73:f0:05:cf:89:55:5b:5e:aa:97:86:ab:70:b4:87:
                    b3:37:75:82:3a:1b:9e:14:c8:fa:ce:ed:a4:00:d6:
                    76:40:a9:e5:3e:b2:e0:b9:f8:49:bb:23:5e:57:0e:
                    88:c8:e0:5d:ba:ee:81:09:81:85:eb:35:2e:35:3f:
                    ae:b4:80:8e:22:87:a7:fe:69:92:03:24:0d:10:a3:
                    cc:06:70:43:30:d3:88:c8:d3:d8:a6:1d:5e:56:4a:
                    30:32:76:86:56:99:de:56:7b:10:16:73:8a:61:14:
                    25:80:7c:7c:86:15:48:cf:79:5b:73:ce:db:a9:06:
                    ab:64:e2:81:6e:d6:74:46:b5:e8:74:28:d0:b7:03:
                    2c:ce:a9:a7:18:d7:e4:9e:cb:65:37:b0:38:13:c7:
                    63:7b:36:d6:ba:6f:97:c1:2e:4a:89:c7:92:92:db:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:3A:5F:C4:21:C7:63:6D:6B:D9:0B:A9:1D:BE:3A:AF:0D:58:D8
            X509v3 Authority Key Identifier:
                keyid:1E:D7:72:70:A4:81:8A:55:74:EF:EE:CA:CA:FB:74:83:CD:76:88:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtdycKSBilV07-7Kyvt0g812iCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFE58/6033CF6A669911EABF13C94DC4F9AE02/HtdycKSBilV07-7Kyvt0g812iCE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:98:42:3c:5e:52:06:a1:d0:16:0e:2c:dc:4b:37:79:bb:cf:
         f8:c4:31:87:6b:dc:6c:9e:9b:19:9f:ca:49:6a:40:3f:fb:78:
         14:ac:c0:94:80:68:ad:c5:e3:c1:df:3f:f2:6e:4e:65:bd:bc:
         60:ef:e3:d5:9c:f0:6c:9e:ee:e6:cd:8d:5e:4e:f0:87:e1:db:
         cb:fe:10:fd:a6:7f:50:66:cb:ab:5e:1c:aa:0c:f5:70:57:45:
         f5:92:55:22:ce:62:2e:84:ab:fb:28:08:db:45:48:48:21:c0:
         ba:c5:89:60:e7:7e:ac:a7:ef:0c:47:b5:42:0e:a0:89:5f:0b:
         d9:54:f9:9f:cd:87:8a:1d:3c:55:8c:31:07:0e:72:91:35:66:
         47:7c:f9:6c:97:da:3f:4b:a4:bc:ce:4a:60:a7:65:45:80:b0:
         f3:76:69:80:b9:dc:1a:34:8b:0c:43:2d:ec:8b:88:de:ed:68:
         aa:67:59:ac:23:70:d1:59:08:84:88:d0:51:f1:d3:3b:8e:db:
         80:b5:d8:1a:ee:1e:53:53:e7:53:f8:94:a1:5e:91:ec:d6:7b:
         ce:6a:85:9d:8f:6d:76:39:97:72:bd:b3:48:9e:b2:72:39:ed:
         37:08:c4:8f:3a:98:15:e7:23:62:02:22:d3:0f:a3:ac:1e:59:
         e6:67:99:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:03 2026 by rpki-client