Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File:                     HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier:          lE8duQSFaJUTJKqjH9c/BImwhJKm1eM2n1KzN6BeCQc=
Subject key identifier:   C3:C5:0E:24:E3:BE:16:2A:82:AF:78:2B:AF:9C:D0:8C:8A:AB:D9:D7
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer:       /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial:       3569
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number:          355B
Signing time:             Fri 12 Jun 2026 14:55:17 +0000
Manifest this update:     Fri 12 Jun 2026 14:55:17 +0000
Manifest next update:     Fri 19 Jun 2026 14:55:17 +0000
Files and hashes:         1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: 0l0utM2uBVdPSBJriwZ5eTvA2Az0HJDhGA54fp6Ejv8=)
                          2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13673 (0x3569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
        Validity
            Not Before: Jun 12 14:55:17 2026 GMT
            Not After : Jun 19 14:55:17 2026 GMT
        Subject: CN=6a2c1dd5-99c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:e7:72:c7:3e:54:04:17:33:ab:e7:d3:30:
                    35:c2:0e:a5:a6:8e:4c:16:4c:ba:e8:29:36:99:b4:
                    8e:b4:54:d6:39:97:14:da:60:23:d9:6c:36:0d:7e:
                    d7:5c:27:b9:18:10:c9:fc:10:d5:42:e2:30:2a:11:
                    c2:29:48:bb:1d:cb:34:57:bf:7e:5e:c1:79:23:6d:
                    81:77:9b:2b:ea:d6:3e:51:49:d4:e1:5a:8b:08:1f:
                    c3:06:dd:3a:87:85:df:6e:cd:2b:45:67:3f:e2:f5:
                    63:ee:d3:57:40:f8:2d:ac:c1:8f:95:ac:16:4e:14:
                    22:02:a5:8a:3f:e3:ba:03:b7:31:65:7d:ca:9f:59:
                    ec:37:dd:4a:4a:34:c5:6c:65:51:66:3e:5a:67:df:
                    19:1c:ef:db:af:15:76:0f:d9:ea:f6:2a:f5:f3:4c:
                    4c:d7:ff:4a:0a:5f:45:c1:e2:42:3b:48:77:07:27:
                    0e:a2:03:8c:20:de:b1:a9:e6:97:6b:11:c7:09:e5:
                    de:08:8c:a7:2c:23:bc:38:16:e4:bd:d8:5e:81:9a:
                    6e:d2:1d:28:34:c5:6e:db:45:bc:b8:e1:7a:30:9b:
                    3c:30:26:3c:c3:92:f0:61:dc:65:9b:5c:c0:7c:30:
                    1a:ee:51:f2:1e:bc:85:82:0d:b0:14:c8:a8:c0:48:
                    d9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:0E:24:E3:BE:16:2A:82:AF:78:2B:AF:9C:D0:8C:8A:AB:D9:D7
            X509v3 Authority Key Identifier:
                keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:9a:b6:8a:b5:47:37:c3:44:4d:86:2f:08:9a:59:f6:6f:
         2f:d3:9f:47:91:68:dd:6f:10:24:f4:03:18:c7:01:eb:87:f6:
         aa:70:5b:ba:76:b4:62:dd:84:e5:81:71:a8:58:7d:9b:52:46:
         81:09:13:ce:fa:d1:c7:99:18:83:9a:b0:25:d8:03:8f:7c:51:
         52:29:0b:3f:55:82:33:6d:a4:6e:57:0c:32:47:fb:62:50:82:
         b3:a9:23:f1:91:d0:2a:df:ee:70:48:62:e9:c5:d9:e0:f6:75:
         f5:e7:49:b5:dc:93:f9:9a:22:f8:89:a5:da:8a:c6:17:a5:6c:
         ec:61:a2:19:d1:9f:9e:95:1f:77:1f:31:68:67:57:d3:07:b0:
         b5:cb:46:d6:1b:c9:33:ce:93:38:a0:47:a3:f3:d9:f7:c8:79:
         3d:56:4f:24:5c:40:7b:18:85:9e:66:f6:3c:73:45:27:a4:1c:
         56:e4:3c:10:72:81:43:80:a0:1f:2f:b2:ae:66:ed:4c:c2:ea:
         aa:29:07:ab:7c:49:cb:56:27:a7:ae:34:c7:ab:29:31:6e:4c:
         5f:38:f6:d2:a7:9b:99:45:01:6c:1a:54:3b:36:af:05:4a:61:
         d9:d0:53:09:97:47:a2:85:08:d8:06:fa:97:6a:34:58:a7:67:
         58:d4:87:e8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJDQTgxMTAvBgNVBAUTKDFFNzUyQzNEMTYwNDhDM0YzRjYzMjNEMkI5MTA3MEJG
MjQ3RDY4NjYwHhcNMjYwNjEyMTQ1NTE3WhcNMjYwNjE5MTQ1NTE3WjAYMRYwFAYD
VQQDEw02YTJjMWRkNS05OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3BDncsc+VAQXM6vn0zA1wg6lpo5MFky66Ck2mbSOtFTWOZcU2mAj2Ww2DX7X
XCe5GBDJ/BDVQuIwKhHCKUi7Hcs0V79+XsF5I22Bd5sr6tY+UUnU4VqLCB/DBt06
h4Xfbs0rRWc/4vVj7tNXQPgtrMGPlawWThQiAqWKP+O6A7cxZX3Kn1nsN91KSjTF
bGVRZj5aZ98ZHO/brxV2D9nq9ir180xM1/9KCl9FweJCO0h3BycOogOMIN6xqeaX
axHHCeXeCIynLCO8OBbkvdhegZpu0h0oNMVu20W8uOF6MJs8MCY8w5LwYdxlm1zA
fDAa7lHyHryFgg2wFMiowEjZCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPFDiTj
vhYqgq94K6+c0IyKq9nXMB8GA1UdIwQYMBaAFB51LD0WBIw/P2Mj0rkQcL8kfWhm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkNBOC84NzAzMjI1ODFE
OUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpEOF9ZeVBTdVJCd3Z5Ujlh
R1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0huVXNQUllFakQ4X1l5UFN1UkJ3dnlSOWFHWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkNBOC84NzAzMjI1ODFEOUExMUUyQUE4NkMyODcwOEIwMkNEMi9IblVzUFJZRWpE
OF9ZeVBTdVJCd3Z5UjlhR1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAbe+atoq1RzfDRE2GLwiaWfZvL9OfR5Fo3W8QJPQDGMcB64f2qnBbuna0Yt2E
5YFxqFh9m1JGgQkTzvrRx5kYg5qwJdgDj3xRUikLP1WCM22kblcMMkf7YlCCs6kj
8ZHQKt/ucEhi6cXZ4PZ19edJtdyT+Zoi+Iml2orGF6Vs7GGiGdGfnpUfdx8xaGdX
0wewtctG1hvJM86TOKBHo/PZ98h5PVZPJFxAexiFnmb2PHNFJ6QcVuQ8EHKBQ4Cg
Hy+yrmbtTMLqqikHq3xJy1Ynp640x6spMW5MXzj20qebmUUBbBpUOzavBUph2dBT
CZdHooUI2Ab6l2o0WKdnWNSH6A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:17:03 2026 by rpki-client