Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
File:                     hNKQTEi_9V2argiHuCwzDxubKaw.mft (raw, json)
Hash identifier:          W1CdCh22fZiAKAxVKuZtQNiBWibtlJkPyzkVM88psDs=
Subject key identifier:   7E:7A:91:BF:E3:79:5F:C3:9A:D6:6E:C0:76:34:45:8C:43:BD:39:63
Authority key identifier: 84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC
Certificate issuer:       /CN=A913A0F3/serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
Certificate serial:       1727
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
Manifest number:          171B
Signing time:             Sat 04 Apr 2026 16:31:55 +0000
Manifest this update:     Sat 04 Apr 2026 16:31:54 +0000
Manifest next update:     Sat 11 Apr 2026 16:31:54 +0000
Files and hashes:         1: hNKQTEi_9V2argiHuCwzDxubKaw.crl (hash: stSlvhE2q7sR7iPfdkXjiruS2h97BMnG1T7LPVIj3t8=)
                          2: 0682A6A03DC411EBBFE0EA13C4F9AE02.roa (hash: efogen/tC+/AdiBRhX2upxGF7tJEq1IHdI05AOF10sQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl
                          rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5927 (0x1727)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A0F3, serialNumber=84D2904C48BFF55D9AAE0887B82C330F1B9B29AC
        Validity
            Not Before: Apr  4 16:31:54 2026 GMT
            Not After : Apr 11 16:31:54 2026 GMT
        Subject: CN=69d13cfb-e708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:64:be:e6:44:88:e6:7e:65:09:0f:03:0a:76:
                    fe:1f:a5:36:bf:bd:ba:4d:10:18:71:7d:6f:c9:01:
                    3b:01:54:96:70:9f:06:13:88:6f:a5:b3:4f:07:9c:
                    d5:fe:b9:b4:ca:d4:26:7e:ce:52:da:71:ed:a8:f7:
                    dd:21:ae:d7:a9:9a:a0:bf:f3:67:94:fe:a0:a7:5c:
                    f9:d8:e8:e9:d0:72:0e:32:ba:31:a5:2b:b2:46:e7:
                    6d:20:4e:ba:65:bb:20:53:9d:e8:e3:1f:ac:25:a6:
                    d3:1a:bf:be:c6:13:f0:46:a1:d3:ec:44:49:f6:46:
                    cd:99:73:55:a8:6d:5c:8a:f6:8d:88:74:96:00:42:
                    c9:f5:6d:8c:a8:34:c1:88:68:f5:1d:2e:fc:2e:35:
                    1a:f3:a6:66:8f:81:23:df:17:6c:00:61:3f:fe:31:
                    fd:25:10:b9:ce:bb:8f:80:72:4b:0b:e5:cc:5a:0c:
                    75:e0:b7:c0:2a:2a:71:76:ac:b1:a9:42:a5:49:65:
                    bf:5e:64:d0:87:53:4b:fa:d1:0b:1d:4d:07:d8:03:
                    cf:b1:2c:b3:c5:41:a2:a6:f3:cf:b0:49:52:5d:a4:
                    12:fa:53:52:39:8b:1e:77:27:21:e0:3e:5f:5f:f0:
                    f0:d0:e4:21:6c:78:26:b3:6c:5e:eb:27:20:f4:5d:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7A:91:BF:E3:79:5F:C3:9A:D6:6E:C0:76:34:45:8C:43:BD:39:63
            X509v3 Authority Key Identifier:
                keyid:84:D2:90:4C:48:BF:F5:5D:9A:AE:08:87:B8:2C:33:0F:1B:9B:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNKQTEi_9V2argiHuCwzDxubKaw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A0F3/4171B70404A811E8B23A9A18C4F9AE02/hNKQTEi_9V2argiHuCwzDxubKaw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:48:97:70:96:ca:e1:bd:8a:95:ab:bb:1a:e6:2b:3f:c9:ec:
         60:cc:c4:fc:9d:2b:8e:e9:cb:0e:cd:42:31:bd:e6:65:0d:a6:
         47:21:fb:04:53:97:ba:b7:e6:10:8c:83:36:1b:18:9d:84:e7:
         91:9d:ef:9b:d8:f2:e7:8a:9a:5e:ef:53:14:1a:e0:9d:e7:2b:
         03:d4:3c:39:4a:4b:e3:05:13:b2:b4:cb:f8:fd:87:2c:ef:eb:
         b3:bc:56:f2:45:6f:6c:05:4d:be:5e:32:97:ae:53:33:81:e7:
         94:12:30:b0:fd:25:0a:e9:9b:fa:bf:c2:c3:f4:7e:d4:d0:0d:
         b4:d0:5d:4e:bd:12:1f:cf:c8:c7:56:4c:e1:1e:9d:d1:d6:16:
         b0:ea:79:2b:da:fa:db:6a:64:db:22:b5:8f:52:5d:69:27:1c:
         81:81:d2:9a:8f:97:65:bd:58:53:74:10:d3:ab:43:e8:d0:c2:
         f8:e4:3b:d5:56:8c:f0:9d:60:c6:6b:21:78:4f:f3:df:85:1c:
         e8:87:4f:c7:17:39:e2:18:40:ad:51:95:f8:9e:ef:6f:01:e1:
         0d:21:01:07:32:75:cd:9b:4c:82:4c:10:3a:11:0a:63:d5:4d:
         ce:5f:a6:9e:23:4b:cd:cf:ad:e8:ca:26:0a:48:f8:eb:de:0a:
         57:75:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:07 2026 by rpki-client