Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
File:                     Hhb4PQxAM115a-W6IckMvumXWbw.mft (raw, json)
Hash identifier:          qWPvBTpu5ljPt/kI49iCP+6HUd0QOmYGeV1/rDP/Eg8=
Subject key identifier:   27:CA:8A:7C:32:DA:8E:B5:16:20:6B:33:85:6A:9F:48:C3:20:86:62
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
Manifest number:          074B
Signing time:             Thu 16 Apr 2026 21:41:46 +0000
Manifest this update:     Thu 16 Apr 2026 21:41:45 +0000
Manifest next update:     Thu 23 Apr 2026 21:41:45 +0000
Files and hashes:         1: Hhb4PQxAM115a-W6IckMvumXWbw.crl (hash: wQjpn1DTm01TZ/9djQsRibvmGbq0nl/Tn47koE+2/Z4=)
                          2: 1745A0504D7F11EE8487CA3CC4F9AE02.roa (hash: 92S13xMUtTa9ngZEJpHZILOhTqRPbqcQrnmdTEujx6o=)
                          3: 7E11B25E632A11EEA4BAF91FC4F9AE02.roa (hash: WeQVo7fwV+V9bl8424+RhWXTOrNJfa47Vs9LGPlEi9s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
        Validity
            Not Before: Apr 16 21:41:45 2026 GMT
            Not After : Apr 23 21:41:45 2026 GMT
        Subject: CN=69e1579a-1963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:3d:ed:a8:a4:55:75:8d:c8:2b:00:f8:ce:
                    5f:6b:9a:df:c2:f8:11:f1:48:25:00:5a:b2:1f:fa:
                    40:a3:c9:79:f5:8d:cc:91:b8:57:ab:87:86:16:18:
                    b0:75:6d:b3:35:39:3a:74:70:9f:25:80:e8:43:58:
                    c9:94:87:74:7e:53:1b:36:f8:af:8e:d7:dd:b5:c3:
                    93:23:44:e2:e3:aa:21:5a:be:6d:1a:17:91:e1:07:
                    13:d8:6c:45:02:4d:9a:cd:a3:60:19:3c:e2:b0:31:
                    ed:5d:0f:fd:f0:31:ed:b9:35:b5:be:e9:5d:01:59:
                    22:b4:08:e9:8f:0d:a2:8c:80:e3:c5:f6:26:4e:a4:
                    be:e6:0a:20:f1:a4:fd:d1:7b:31:83:e0:21:4b:8d:
                    cd:06:8b:9d:ec:e2:cb:3c:6b:3d:9e:d1:51:4e:73:
                    30:25:c1:13:a4:00:5a:23:06:9e:6a:64:84:24:53:
                    b5:4e:10:64:cf:9a:3c:99:d1:92:9c:a5:86:1f:72:
                    87:0f:71:62:68:1e:0d:ad:68:44:4f:4a:b2:80:42:
                    a1:f3:d9:62:aa:03:66:e2:a4:9d:1e:e0:d4:4d:2d:
                    28:d5:99:a0:bb:01:fa:7c:a4:fc:ad:d1:2a:12:d2:
                    41:01:70:81:70:d1:ec:e1:57:5a:2f:43:3a:94:18:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CA:8A:7C:32:DA:8E:B5:16:20:6B:33:85:6A:9F:48:C3:20:86:62
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:fc:e7:5b:71:14:f5:b8:55:d6:cf:9e:f2:5d:69:4b:58:
         95:d0:20:16:81:cd:b3:02:85:4f:ae:5c:c0:c9:68:6c:29:39:
         de:47:d2:d0:7a:99:6c:06:4a:90:b7:fc:10:57:3e:d5:d4:65:
         a2:a9:04:93:d6:94:52:53:a5:44:55:c1:46:db:82:16:96:61:
         aa:99:e6:48:4c:ad:bb:c7:fd:fd:5c:66:64:35:35:89:e1:54:
         74:74:82:df:fd:de:15:c6:d0:6b:ba:7e:00:92:08:d5:d0:aa:
         29:8b:54:90:79:92:6d:01:c6:4d:ba:09:97:45:91:7c:1e:23:
         bd:2f:1f:f7:60:90:25:50:92:15:5d:2d:7b:e8:68:b8:f7:71:
         cf:52:a7:f6:d7:56:75:22:5f:f6:02:75:90:54:ce:f4:c5:3f:
         8f:3f:84:63:c1:db:18:7d:15:c5:a0:69:d7:98:1b:ee:a9:8c:
         38:cd:df:68:f8:f4:9d:5c:fa:53:2b:23:54:c0:43:de:97:6b:
         87:33:2b:ea:72:82:93:c9:0b:33:04:ef:cb:bd:6e:d4:74:ab:
         8f:f1:86:e1:2c:87:94:08:6c:29:c2:94:d1:6a:9e:50:e3:e3:
         2c:be:e6:1a:d7:0c:08:16:39:9e:c6:5c:a7:51:8e:1b:5e:3d:
         40:8c:0f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:23 2026 by rpki-client