Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
File:                     HteCvmLXEBdmiyijJonkcO2iAfg.mft (raw, json)
Hash identifier:          YC/ZRP5U7MZkE4+Q8Q6Bb0d+aJEkYF3CuoA/3Cukp64=
Subject key identifier:   B4:DD:42:03:81:C7:58:12:4B:88:CE:E1:99:7A:B2:F1:FB:58:57:7D
Authority key identifier: 1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8
Certificate issuer:       /CN=A91E1257/serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
Certificate serial:       079A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
Manifest number:          0791
Signing time:             Sat 28 Feb 2026 21:59:46 +0000
Manifest this update:     Sat 28 Feb 2026 21:59:45 +0000
Manifest next update:     Sat 07 Mar 2026 21:59:45 +0000
Files and hashes:         1: HteCvmLXEBdmiyijJonkcO2iAfg.crl (hash: JgaCZg247Wh8iK3C+73QfDN2V/4bNroi+4nmUghLTeE=)
                          2: D41A1814442211EBBF7D9D65C4F9AE02.roa (hash: tB96Uz17EX40eZdARikwxQwcb8AmCNS9rm6xwYx8La0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1257, serialNumber=1ED782BE62D71017668B28A32689E470EDA201F8
        Validity
            Not Before: Feb 28 21:59:45 2026 GMT
            Not After : Mar  7 21:59:45 2026 GMT
        Subject: CN=69a36551-6733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:56:30:72:03:23:b8:db:49:e7:45:83:da:
                    63:49:f9:0a:9d:87:cf:89:39:b7:b3:42:a5:e8:71:
                    49:0b:36:aa:a9:df:47:56:a9:d2:62:38:02:9b:0d:
                    7b:de:24:5b:42:aa:3f:98:e9:46:39:8a:03:33:8e:
                    82:08:b7:7d:e4:41:46:f6:77:37:81:b9:1e:20:1d:
                    5b:43:cd:c2:bf:e9:2c:fc:d3:e0:89:b2:87:b6:01:
                    87:b0:ce:f0:9e:fd:e2:34:f9:bd:48:fb:e2:04:d4:
                    91:ab:8a:a9:cb:48:7b:9e:34:42:a9:53:82:3f:f3:
                    95:42:44:38:45:a1:d9:05:0d:85:b9:d5:19:b7:e9:
                    21:4b:0b:dd:79:8e:4e:ca:d4:b7:28:ca:b8:cc:86:
                    46:c9:ae:7d:ff:ac:22:de:32:36:c2:89:39:9c:ae:
                    83:a4:eb:ad:ee:f1:f2:91:b3:c2:15:f0:13:e3:a8:
                    d5:8a:2e:97:4c:93:18:0a:91:6c:28:8a:a5:56:81:
                    65:2a:c5:6d:08:07:60:98:a0:ec:0b:d3:eb:cd:ef:
                    c8:73:8a:c6:1b:bd:56:20:62:7d:87:41:87:b4:72:
                    bb:28:d4:a3:c1:f9:af:94:9e:0a:94:7f:fd:bd:29:
                    5f:12:e9:da:55:2a:5c:47:04:c8:09:d1:76:c3:e7:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DD:42:03:81:C7:58:12:4B:88:CE:E1:99:7A:B2:F1:FB:58:57:7D
            X509v3 Authority Key Identifier:
                keyid:1E:D7:82:BE:62:D7:10:17:66:8B:28:A3:26:89:E4:70:ED:A2:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HteCvmLXEBdmiyijJonkcO2iAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1257/A90F1EE6442011EB856CD162C4F9AE02/HteCvmLXEBdmiyijJonkcO2iAfg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:73:60:0b:5c:ab:e0:ab:6a:6e:d8:ff:4f:e2:6a:8f:be:b7:
         99:6a:be:a2:da:f2:50:d6:5d:0d:ad:0f:04:f9:df:34:33:46:
         9d:83:fa:9e:09:25:d3:76:87:2a:e0:8e:c5:6e:56:da:b7:c0:
         ae:42:2d:04:ee:50:d9:eb:c2:cd:ad:33:3e:89:de:66:21:c6:
         bc:3d:e0:22:66:15:3c:6f:09:3e:37:83:fc:f2:ec:38:37:60:
         80:15:29:3d:72:b0:07:59:62:e0:bc:82:d8:ff:03:10:2f:ce:
         a4:d3:5a:47:48:38:a3:35:6d:32:95:c0:59:58:13:68:4d:c3:
         65:15:f5:f7:a4:2e:fb:09:9c:03:24:ee:45:55:13:7b:93:90:
         55:8a:1e:71:0d:05:52:50:e4:13:1c:95:00:02:3d:43:03:f7:
         89:7a:58:0b:59:22:74:6e:af:aa:62:e3:9e:ec:8a:c6:b3:98:
         ec:42:ae:72:4c:8f:0b:c6:29:7a:05:83:52:74:29:68:ca:9f:
         fb:f5:ea:9b:e3:a8:14:df:b6:a1:e4:21:63:d0:4a:a4:47:9f:
         37:89:01:f8:9b:ee:93:17:99:ab:9e:68:e7:e7:fa:f4:f5:b7:
         cc:c5:f3:0c:eb:4d:c9:6b:34:13:e7:5f:a0:ed:d2:45:a8:d1:
         e7:b4:8a:2c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTEyNTcxMTAvBgNVBAUTKDFFRDc4MkJFNjJENzEwMTc2NjhCMjhBMzI2ODlFNDcw
RURBMjAxRjgwHhcNMjYwMjI4MjE1OTQ1WhcNMjYwMzA3MjE1OTQ1WjAYMRYwFAYD
VQQDDA02OWEzNjU1MS02NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs8tWMHIDI7jbSedFg9pjSfkKnYfPiTm3s0Kl6HFJCzaqqd9HVqnSYjgCmw17
3iRbQqo/mOlGOYoDM46CCLd95EFG9nc3gbkeIB1bQ83Cv+ks/NPgibKHtgGHsM7w
nv3iNPm9SPviBNSRq4qpy0h7njRCqVOCP/OVQkQ4RaHZBQ2FudUZt+khSwvdeY5O
ytS3KMq4zIZGya59/6wi3jI2wok5nK6DpOut7vHykbPCFfAT46jVii6XTJMYCpFs
KIqlVoFlKsVtCAdgmKDsC9Prze/Ic4rGG71WIGJ9h0GHtHK7KNSjwfmvlJ4KlH/9
vSlfEunaVSpcRwTICdF2w+dr3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTdQgOB
x1gSS4jO4Zl6svH7WFd9MB8GA1UdIwQYMBaAFB7Xgr5i1xAXZosooyaJ5HDtogH4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTI1Ny9BOTBGMUVFNjQ0
MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVCZG1peWlqSm9ua2NPMmlB
ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZUN2bUxYRUJkbWl5aWpKb25rY08yaUFmZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTI1Ny9BOTBGMUVFNjQ0MjAxMUVCODU2Q0QxNjJDNEY5QUUwMi9IdGVDdm1MWEVC
ZG1peWlqSm9ua2NPMmlBZmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASHNgC1yr4Ktqbtj/T+Jqj763mWq+otryUNZdDa0PBPnfNDNGnYP6ngkl03aH
KuCOxW5W2rfArkItBO5Q2evCza0zPoneZiHGvD3gImYVPG8JPjeD/PLsODdggBUp
PXKwB1li4LyC2P8DEC/OpNNaR0g4ozVtMpXAWVgTaE3DZRX196Qu+wmcAyTuRVUT
e5OQVYoecQ0FUlDkExyVAAI9QwP3iXpYC1kidG6vqmLjnuyKxrOY7EKuckyPC8Yp
egWDUnQpaMqf+/Xqm+OoFN+2oeQhY9BKpEefN4kB+JvukxeZq55o5+f69PW3zMXz
DOtNyWs0E+dfoO3SRajR57SKLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:20 2026 by rpki-client