Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File:                     Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier:          cV82jE/TP0UnpahQ2qejlinOrOte34+eo+M0Sdmv470=
Subject key identifier:   2D:0C:06:15:B5:4A:6C:AD:DB:85:2B:B4:33:7D:49:B6:3B:63:77:25
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer:       /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial:       108C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number:          1080
Signing time:             Thu 16 Apr 2026 17:18:09 +0000
Manifest this update:     Thu 16 Apr 2026 17:18:08 +0000
Manifest next update:     Thu 23 Apr 2026 17:18:08 +0000
Files and hashes:         1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: BfVpjSqdnwSzrXEbDKj3UtvEnJy6ESW6ygaBAhqb4Rw=)
                          2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
                          rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:18:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4236 (0x108c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
        Validity
            Not Before: Apr 16 17:18:08 2026 GMT
            Not After : Apr 23 17:18:08 2026 GMT
        Subject: CN=69e119d1-d1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:73:c2:6d:1d:e4:27:da:d3:d9:ab:de:87:
                    53:1b:50:a9:34:0c:91:38:0c:01:6e:5e:87:f4:8b:
                    94:6e:03:15:43:d1:ce:2b:58:c8:43:b1:60:92:8f:
                    8a:65:55:ff:0c:bf:44:90:a6:87:44:26:bb:c9:5e:
                    db:16:08:21:75:77:c4:c0:a2:4a:e5:1f:04:5f:10:
                    20:43:16:f5:c7:dd:d1:ba:9b:ec:45:8b:50:c8:c2:
                    5c:bf:de:2f:ed:7b:97:69:af:ef:c3:26:07:78:d2:
                    df:a8:a0:77:f4:67:c6:93:27:a3:1f:7e:22:4d:10:
                    42:32:fb:05:90:d1:fd:e5:7a:63:96:d2:0a:0b:36:
                    1e:f1:d7:19:d5:33:1e:02:8d:99:a7:85:f9:ab:e8:
                    9f:2c:73:4a:f8:42:10:dd:02:82:c7:1b:06:6b:48:
                    63:30:d8:75:a6:7e:57:6f:9e:47:88:e9:0b:2e:fe:
                    c4:a5:ec:8b:fd:22:f2:61:83:63:bc:b4:7b:a0:d8:
                    7a:ba:38:0a:5b:0e:dc:07:64:ec:d5:d6:c4:ce:f1:
                    46:49:ae:c8:51:d9:4f:15:6e:9a:12:e2:55:3d:a4:
                    14:58:42:40:7f:c9:11:48:ef:da:c8:c6:6c:ab:ec:
                    80:54:3d:05:e8:ed:c7:64:1d:b4:7f:8d:76:84:70:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0C:06:15:B5:4A:6C:AD:DB:85:2B:B4:33:7D:49:B6:3B:63:77:25
            X509v3 Authority Key Identifier:
                keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:b9:be:e3:e1:41:d5:c6:40:34:71:63:ad:fb:f9:27:f0:
         b0:8d:f8:5c:7b:2b:b0:04:90:80:53:a9:ff:eb:5d:a6:af:ae:
         26:29:9b:f7:fd:90:03:dc:87:2f:0e:bf:10:29:19:db:3f:3a:
         19:61:d4:f4:6e:9b:70:f2:1e:08:54:af:b8:50:6f:d8:ec:d3:
         bd:87:b1:81:52:a1:15:89:14:e0:22:55:02:90:31:e2:b9:09:
         c4:e0:90:c7:6c:6f:e9:62:4f:62:7f:a9:b8:72:e5:22:fe:d2:
         be:c9:86:0c:1d:40:11:1d:40:25:5a:cd:8f:0a:e2:22:e6:9c:
         13:28:4b:dc:56:d8:81:73:d9:3e:18:3f:eb:d5:11:38:c5:aa:
         a8:c5:27:b3:42:a4:8c:31:6d:44:80:a7:ca:22:cc:d1:c0:c2:
         8e:5b:39:21:07:58:e2:09:f1:06:6c:58:25:0f:26:c9:43:e5:
         38:a4:eb:fe:4d:7b:de:19:79:b4:63:01:dc:35:cd:ab:22:39:
         4f:56:d5:57:a4:0a:7e:e4:d8:02:ed:3f:d6:55:f1:ed:64:ad:
         85:b1:72:a4:da:fd:ee:1b:59:b9:75:63:44:64:45:16:c8:2a:
         f2:52:d9:b8:7c:2d:78:de:ec:73:1d:c2:63:6f:5e:43:10:bf:
         5b:57:7f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:08 2026 by rpki-client