Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
File:                     HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft (raw, json)
Hash identifier:          02qqfEBFlERmIivdkxXm552X8BuhiUe/7Arg2jvNoeE=
Subject key identifier:   F5:26:89:58:33:72:3D:1A:E9:02:1F:58:2C:68:EB:18:7D:5C:31:23
Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E
Certificate issuer:       /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
Certificate serial:       0729
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
Manifest number:          0711
Signing time:             Sat 18 Apr 2026 21:58:42 +0000
Manifest this update:     Sat 18 Apr 2026 21:58:41 +0000
Manifest next update:     Sat 25 Apr 2026 21:58:41 +0000
Files and hashes:         1: HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl (hash: fZc9CcrGcjgLPi/ecM9ILcBxBzHt6FVD9zawauDGZ5E=)
                          2: C28841A201DB11EDA4B7F257C4F9AE02.roa (hash: yYTtvE7CXHf8fnX9NjEKKec9Ps0u8GPKEPqTfsvne5k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl
                          rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E
        Validity
            Not Before: Apr 18 21:58:41 2026 GMT
            Not After : Apr 25 21:58:41 2026 GMT
        Subject: CN=69e3fe92-e334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:2b:7c:5a:c9:aa:bd:68:75:21:92:81:e9:
                    4e:2d:6d:83:a9:2a:b7:7c:f3:a4:e7:24:4c:94:33:
                    f4:7c:24:c4:a4:61:20:f0:c8:80:28:e1:2a:e4:5c:
                    c5:ea:a8:69:97:d2:0b:8d:9b:72:6d:aa:14:63:bd:
                    b4:ea:7d:1a:f7:8e:a4:b3:ce:9f:7f:67:ad:14:03:
                    a3:37:08:9d:fd:36:e6:7c:36:52:63:d7:fe:6d:fb:
                    cf:09:37:d9:c0:37:c5:a8:c3:cb:07:d5:7d:6e:ea:
                    5e:14:4b:3a:0a:23:a1:41:39:60:a1:01:e8:8a:b5:
                    3d:b1:e4:30:17:dc:3d:9c:17:b0:4d:a4:c0:eb:d8:
                    7b:9d:78:13:6c:d1:d8:66:a8:77:4b:48:b8:ac:e3:
                    ca:6a:1b:74:41:6e:9a:bd:c5:ea:62:04:fb:70:ff:
                    78:ea:07:00:88:af:01:99:85:c0:6f:e6:bf:ee:0d:
                    ab:fc:9d:94:70:1a:45:6b:86:81:5c:3d:24:d6:1f:
                    0a:12:12:3b:b2:97:d4:26:f4:6b:5d:67:f7:0b:0c:
                    05:b3:cd:c8:68:8f:ba:bf:2e:7f:09:1a:93:6e:22:
                    7a:44:e7:79:cb:ae:04:a4:02:84:67:ba:3d:97:96:
                    96:51:7f:dd:bf:58:1c:34:2c:37:fa:f8:55:56:ec:
                    34:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:26:89:58:33:72:3D:1A:E9:02:1F:58:2C:68:EB:18:7D:5C:31:23
            X509v3 Authority Key Identifier:
                keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ac:45:0a:18:d4:55:da:97:76:7a:9b:fa:ec:e4:2c:1a:af:
         df:eb:01:1f:35:53:0f:69:03:5a:04:24:b8:b9:70:b0:29:68:
         f7:4b:66:58:5d:d5:6f:b7:7c:13:96:36:73:fc:93:98:72:af:
         13:fb:6d:dd:f0:d2:d0:88:38:61:12:fc:ee:9d:d2:de:03:39:
         0b:4a:04:49:95:22:59:bd:1d:a9:a8:f7:84:28:85:f8:f3:c9:
         a5:04:72:34:73:27:db:cc:03:ca:1d:61:7b:d8:ab:e2:48:a5:
         a3:8e:5f:50:fb:a6:dd:ea:17:1c:e8:0a:f5:d8:4d:30:aa:4d:
         59:c8:fb:9e:9d:09:da:93:11:74:76:e1:bd:4b:29:a0:33:b0:
         1c:06:21:8c:df:4e:5f:b5:3a:62:3a:95:d2:80:05:51:a4:68:
         82:7a:ca:96:47:7a:bf:7a:0b:a4:b4:74:6f:d9:ef:54:55:02:
         fa:fd:5d:10:7e:cf:8d:a0:01:aa:c9:d9:61:a8:56:88:18:6a:
         38:6b:38:42:68:c8:f0:22:d5:db:e2:0c:3c:e9:aa:a7:fe:dc:
         ef:ed:11:f1:18:6b:89:16:ad:af:ed:62:5b:7b:9b:91:65:18:
         b4:7c:99:23:3b:61:c1:83:f0:d3:45:58:03:df:fe:88:3d:2c:
         54:19:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:29 2026 by rpki-client