Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File:                     HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier:          YWBFjO1MWVtAQPDnufTG/Ju36BIorFABphye03Ze184=
Subject key identifier:   BA:54:4A:6B:79:D0:40:85:18:4A:14:31:EA:7B:A7:26:0A:3A:2D:AA
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer:       /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number:          353E
Signing time:             Thu 16 Apr 2026 14:54:54 +0000
Manifest this update:     Thu 16 Apr 2026 14:54:53 +0000
Manifest next update:     Thu 23 Apr 2026 14:54:53 +0000
Files and hashes:         1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: OIi5MLYJtb4vb4TQZEB3Ybcx+dH87QBZMYnHJsCIDkA=)
                          2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
        Validity
            Not Before: Apr 16 14:54:53 2026 GMT
            Not After : Apr 23 14:54:53 2026 GMT
        Subject: CN=69e0f83d-5851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:87:57:27:d1:25:47:b0:7d:69:37:18:58:
                    f3:08:e2:a7:07:b5:3c:7c:e1:e5:ca:85:91:c4:81:
                    7b:69:c6:ca:99:ef:5c:8f:1c:70:97:fe:8e:c4:7f:
                    76:00:72:bb:b3:03:3b:db:ad:e0:a1:2c:eb:2d:af:
                    9f:71:05:1d:43:39:a1:e0:e1:80:1f:6c:05:87:5d:
                    ca:17:0f:fc:83:cd:18:b0:75:88:1e:13:e2:74:bd:
                    64:d3:b2:7d:b7:3b:52:9a:21:6d:37:a5:db:8b:36:
                    ae:20:36:77:33:5f:16:c0:74:f5:35:e2:b3:e4:66:
                    88:27:b8:25:92:b0:40:ad:5c:cd:67:4c:13:5c:47:
                    c8:8a:da:96:18:27:ba:7d:bf:38:66:e2:44:60:18:
                    22:69:fb:e7:53:d8:f6:a6:c0:bc:c5:99:18:f4:b9:
                    3b:db:c5:d5:81:d1:b4:2d:d0:d7:e1:90:6f:c1:0e:
                    59:6d:92:05:79:4b:94:44:e5:d1:34:fa:c7:a3:b8:
                    48:a2:0f:8f:d5:a3:99:8f:c4:81:67:ec:b6:0d:d7:
                    31:c2:5a:26:4b:80:79:23:d8:a2:d3:04:29:ef:76:
                    23:74:0b:51:d8:fc:82:a8:44:a0:8f:94:a4:6f:4d:
                    f4:58:41:2b:70:d0:d0:75:cb:c5:2b:7e:d3:4b:42:
                    b3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:54:4A:6B:79:D0:40:85:18:4A:14:31:EA:7B:A7:26:0A:3A:2D:AA
            X509v3 Authority Key Identifier:
                keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:e0:1e:a8:9d:37:43:8a:eb:7d:a4:7c:4a:0f:ef:22:06:
         28:6b:f0:2d:ca:de:47:01:af:25:78:3f:d1:ad:88:11:80:f4:
         56:db:62:03:c1:85:93:13:e6:72:d1:78:76:bd:57:12:cd:18:
         aa:7d:00:78:9f:19:a9:83:5e:84:64:23:6b:7c:25:4a:93:f4:
         67:f3:e1:91:6e:ba:d9:da:cd:0f:1e:b3:23:65:6c:05:4b:0b:
         a4:f5:c1:fe:6f:ed:04:29:f4:95:d9:e5:8d:7b:5d:7a:9b:61:
         9f:29:fb:1a:b4:4a:71:c3:9c:b4:65:a2:f9:33:3c:a7:33:91:
         17:68:db:0b:2f:95:15:54:fc:d3:01:73:85:3f:fa:89:03:8f:
         bf:c2:d9:0b:91:d9:37:73:53:8a:1c:2d:97:87:f6:b4:38:09:
         e9:0d:15:ef:2c:46:0e:1c:58:38:54:7e:d2:9a:88:74:77:dc:
         00:ee:c7:b7:f9:6b:7e:c0:87:f0:7f:2e:06:61:28:81:84:cd:
         9f:8e:1d:51:fc:29:be:d4:f2:32:19:ec:c8:15:74:a9:8c:f4:
         56:d2:9c:47:4f:46:05:f7:b1:07:fb:ce:e4:9c:86:b0:96:d6:
         14:98:12:88:f4:2b:ec:6c:a3:04:a1:ae:2e:bd:5d:6b:b6:50:
         1e:f7:21:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:55:16 2026 by rpki-client