Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File:                     HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier:          5PSw/l1YP++DE86XCgg7jvO7AsgknWUEPGOrAR/Uf9U=
Subject key identifier:   4B:FD:CC:23:CB:2A:63:BE:27:82:D1:BF:63:D8:79:AC:23:A3:DB:FB
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       02EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number:          02E2
Signing time:             Sun 19 Apr 2026 01:13:42 +0000
Manifest this update:     Sun 19 Apr 2026 01:13:42 +0000
Manifest next update:     Sun 26 Apr 2026 01:13:42 +0000
Files and hashes:         1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: ZXjiu5qO0M/aWb5PTDqqDnsayoxS9uiahkKkzUSrnyA=)
                          2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: Q48Y/wp7RhZuuL2sntpKBoS0Dfa5UCP/oik4uhuXQww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Apr 19 01:13:42 2026 GMT
            Not After : Apr 26 01:13:42 2026 GMT
        Subject: CN=69e42c46-edf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:b7:db:17:3c:95:cf:76:1a:d2:73:44:e9:
                    3c:f2:6a:e4:68:13:39:46:dc:78:1c:33:61:c3:3a:
                    87:d6:83:4d:18:75:69:f1:c8:9b:0e:40:23:cc:5f:
                    5b:84:74:8b:f5:85:84:47:3b:e2:99:68:8b:43:98:
                    9b:6a:df:ff:fa:df:b9:77:df:02:39:51:35:e0:e9:
                    34:6e:1e:1b:87:36:06:0a:a4:3e:7f:f1:eb:88:cb:
                    fe:81:29:78:b6:a9:19:2a:d2:84:16:17:e1:94:93:
                    13:90:fa:59:ee:91:48:82:bb:a9:af:58:ce:2a:c9:
                    e3:26:59:80:09:c1:c8:73:00:35:95:a8:6f:ff:16:
                    c3:fd:be:f4:a4:24:aa:ff:68:9e:ea:6f:6c:3d:28:
                    d2:e7:a5:5b:11:96:53:6b:46:8f:bd:38:27:e0:90:
                    fd:47:85:d7:b4:43:ba:8b:ce:36:eb:9f:2d:45:23:
                    9e:f8:18:ab:3b:80:7e:1c:5b:74:6b:a8:26:c3:6f:
                    dc:54:53:ce:54:80:d7:a9:30:56:3e:78:de:13:08:
                    0b:bf:6a:3c:40:0b:3e:90:a1:92:19:ea:ae:95:86:
                    24:bf:5b:71:18:70:91:38:7b:ea:17:f4:bb:b0:e7:
                    e4:b1:d5:3d:0e:6a:ea:1a:65:7d:5d:a9:44:0b:b3:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FD:CC:23:CB:2A:63:BE:27:82:D1:BF:63:D8:79:AC:23:A3:DB:FB
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:b2:73:f7:75:07:c4:aa:56:7f:55:48:68:42:a3:34:c0:
         4d:3d:75:5a:dd:5d:6a:bb:ff:af:5d:c6:91:dc:11:04:db:f8:
         2f:9c:b2:2f:1c:0e:a2:62:5d:a0:fc:fe:0b:4e:d2:a9:e1:1c:
         45:a6:5b:06:6d:ec:10:2e:2e:40:f7:af:19:25:4e:c5:4b:86:
         b3:e8:80:61:d1:89:e3:06:6c:ae:97:8c:ec:00:67:6f:aa:06:
         06:e5:7b:79:7e:8d:62:56:dc:5c:f3:2e:af:64:ba:8a:d2:cb:
         eb:26:60:ef:24:81:8a:fd:a1:9f:93:f2:8b:b8:ec:37:73:54:
         b8:bd:89:63:23:30:89:7f:c9:97:5c:01:fb:6c:3a:aa:98:49:
         54:0a:5e:2b:4d:b7:38:a1:9e:78:e7:f3:78:88:0f:38:b4:e5:
         83:11:d5:85:c8:6a:e8:7e:f9:aa:da:8d:cf:54:6f:67:84:d7:
         22:50:b5:35:b6:6f:c1:3a:bf:77:0d:91:ff:82:64:fa:a5:78:
         8c:72:87:81:05:a9:c8:ab:4b:6a:e0:f4:71:3a:2d:0e:52:e1:
         ad:de:de:f6:40:09:60:f8:9d:13:09:31:d0:a0:ee:9f:21:83:
         8e:d7:cd:76:a4:f3:ef:40:37:d4:fc:d7:a3:19:a3:7a:30:44:
         a4:bd:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:47 2026 by rpki-client