Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
File:                     HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft (raw, json)
Hash identifier:          BX4tNH4UQZhlFpyKYxiwprF0JKLYnSf6BA5EKhRDsYE=
Subject key identifier:   31:7F:2C:59:BF:B3:88:89:2F:CF:83:8B:96:18:9B:15:11:F3:8E:3D
Authority key identifier: 1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3
Certificate issuer:       /CN=A91F3805/serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
Manifest number:          4D
Signing time:             Fri 17 Apr 2026 08:03:52 +0000
Manifest this update:     Fri 17 Apr 2026 08:03:51 +0000
Manifest next update:     Fri 24 Apr 2026 08:03:51 +0000
Files and hashes:         1: HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl (hash: DV8UPUWkXuHBJUt8EvngzkPJiVKKXcuYphflzRi2gLU=)
                          2: C673BB1AD0EB11F088F8F063C4F9AE02.roa (hash: +lTLwLrmEGRpnIGIwjJCBRzNe7yk7RhMSey/Pk+Y8/E=)
                          3: C598E8DCD0EB11F08228F063C4F9AE02.roa (hash: Hi6se8LEGyhgp/b0G+d22teZcTwcQ2maa7DY8eg/6Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl
                          rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3805, serialNumber=1E530FA9F660A8DC1738C7AA0C8AFC77F4F0BBB3
        Validity
            Not Before: Apr 17 08:03:51 2026 GMT
            Not After : Apr 24 08:03:51 2026 GMT
        Subject: CN=69e1e968-7cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:de:4b:9e:39:b4:5d:dd:43:9d:bf:5e:39:
                    8b:69:01:81:9c:ca:82:d5:05:c9:ed:54:87:49:c2:
                    3f:0c:8f:a9:d6:3a:2d:4e:1c:0a:73:f7:e5:2d:68:
                    10:7b:63:9d:3f:d8:90:df:66:06:63:5e:f9:3f:ec:
                    b9:da:57:9b:95:44:3e:d8:1a:d6:42:4c:08:61:cc:
                    f2:32:cc:20:56:ae:a8:09:f9:b5:fa:f7:02:bb:a5:
                    59:8d:da:27:30:c3:90:bd:58:74:f1:30:3b:e4:1c:
                    93:ea:34:48:51:85:84:ef:e7:95:81:a0:7f:f1:26:
                    22:27:ab:a4:c2:da:33:e5:a0:0a:e3:54:57:b6:51:
                    81:71:b7:79:40:86:db:8a:7d:fd:8f:5e:ee:9d:13:
                    cf:2b:09:c7:9c:a4:9b:b9:9a:e9:24:23:99:51:e0:
                    3f:13:3c:70:44:b3:7e:d0:e3:9f:32:8d:9b:23:51:
                    f9:af:34:b4:5c:a3:09:a3:59:42:e0:c5:76:89:16:
                    b3:6c:63:ee:55:34:03:db:a5:b5:94:0f:da:5f:62:
                    5f:65:70:10:19:2b:b3:6b:dd:04:c0:b1:66:ab:a4:
                    28:52:e5:7e:19:28:55:d8:52:1b:4a:72:60:ac:27:
                    ac:c3:5a:47:d8:b5:b8:01:23:d4:39:7e:d3:a0:5e:
                    42:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7F:2C:59:BF:B3:88:89:2F:CF:83:8B:96:18:9B:15:11:F3:8E:3D
            X509v3 Authority Key Identifier:
                keyid:1E:53:0F:A9:F6:60:A8:DC:17:38:C7:AA:0C:8A:FC:77:F4:F0:BB:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HlMPqfZgqNwXOMeqDIr8d_Twu7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3805/400C5DECD01011F09F0DD81CC4F9AE02/HlMPqfZgqNwXOMeqDIr8d_Twu7M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a3:c9:b4:fe:41:90:ee:b4:26:79:cd:b8:65:0b:11:8a:4d:
         a7:da:38:a7:ce:b4:a5:2f:44:03:0f:99:91:b1:f1:56:6c:8f:
         ea:c3:0e:51:b3:aa:03:3f:1c:c3:f3:19:78:3d:96:4e:4c:4c:
         a1:76:1d:5d:8d:a8:71:1c:2f:1c:1f:4e:a1:18:a3:57:f5:38:
         07:39:b8:66:52:1a:e5:12:1a:65:2b:21:eb:61:35:fb:83:bc:
         73:6c:c4:b1:5a:78:a6:c9:cc:3a:15:eb:73:ef:a1:cc:de:4c:
         b5:ee:52:dd:70:42:18:1b:2e:52:f3:a3:61:73:90:a9:95:4b:
         72:de:ec:f4:ef:78:89:fb:70:b8:dc:cb:dc:b8:59:44:29:3d:
         de:f0:1a:7a:cf:b9:63:76:73:08:bd:ac:57:d0:12:6a:a1:94:
         8c:a0:9b:9f:3f:98:28:1b:88:21:f8:6a:61:07:3c:49:cb:1d:
         51:13:c6:99:b9:8f:e2:82:a9:81:0c:1d:6c:0e:05:a7:2c:ac:
         2c:fa:b5:78:d8:9a:d1:8f:ea:0b:dc:49:43:11:25:6c:b9:59:
         73:fa:52:bb:ff:60:99:7b:f4:1a:9e:c6:84:37:8f:f7:80:7d:
         58:57:d2:39:ba:0a:f4:0d:d0:e8:eb:cf:0a:b4:07:33:cc:ae:
         81:cb:a1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:53:57 2026 by rpki-client