Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          x9+5lVN1G2CSK608CzlXlHPoc7kDkOJbnTOYB5ED34g=
Subject key identifier:   A2:E0:B3:FE:6F:C8:F3:E4:7F:C0:7A:74:27:60:9E:70:B4:ED:74:13
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          66
Signing time:             Tue 21 Jul 2026 09:51:27 +0000
Manifest this update:     Tue 21 Jul 2026 09:51:26 +0000
Manifest next update:     Tue 28 Jul 2026 09:51:26 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: ybU1b4IUGxW/J0CdJ0swbWJQb679Bq2wXCkHKijeS70=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 09:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: Jul 21 09:51:26 2026 GMT
            Not After : Jul 28 09:51:26 2026 GMT
        Subject: CN=6a5f411f-bf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:04:51:00:85:de:54:77:87:c4:dc:e8:4f:29:
                    86:a5:5b:57:b4:27:6d:57:3a:58:8a:54:ed:6b:c2:
                    66:33:37:dc:b2:84:63:d3:55:0d:ee:f4:76:ec:5a:
                    cd:a7:3e:20:b1:9e:04:31:3f:23:1b:68:25:22:14:
                    4f:1c:77:35:90:7c:0b:74:de:af:af:fa:73:0a:82:
                    b3:77:f5:da:7d:76:8d:bd:58:52:33:f7:d7:8b:98:
                    46:69:09:47:bb:7d:51:27:1d:1f:f6:6b:6c:a0:8e:
                    e8:f0:0b:45:80:0a:28:bc:34:84:ec:b8:49:58:db:
                    9b:84:fd:55:a4:65:48:4f:6e:a3:63:8e:99:69:ff:
                    d0:b7:1f:82:ef:2f:b9:8f:4c:d4:81:d8:57:a6:f8:
                    4e:33:46:d2:ac:4e:32:c8:84:e8:c6:ee:d7:fd:10:
                    67:dc:ed:5f:e4:57:cd:e5:31:4c:87:ee:08:b1:59:
                    e8:57:33:65:52:13:e3:7d:20:57:5e:01:95:7e:f1:
                    ae:59:45:48:46:50:47:cd:86:6d:d1:8c:9b:b7:14:
                    a5:14:86:95:76:4c:7d:7a:96:59:a8:cc:2e:01:33:
                    fb:b6:48:5f:c3:38:d1:ac:c1:dd:ed:4f:4e:77:a1:
                    31:87:00:1d:d2:fe:17:d9:70:8d:6b:26:13:ae:b9:
                    39:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:B3:FE:6F:C8:F3:E4:7F:C0:7A:74:27:60:9E:70:B4:ED:74:13
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:35:6d:25:17:aa:1d:7c:3e:19:29:d7:3d:58:10:fd:31:f3:
         11:41:df:d0:21:20:ec:f3:53:9e:f9:d8:45:80:31:d0:f9:cc:
         1d:7f:d0:be:33:10:98:e5:5e:33:e4:f7:6f:0c:51:f9:79:5f:
         9d:ea:b7:b0:e1:4d:80:2c:4d:21:d2:28:96:26:1d:7f:22:25:
         0e:98:94:06:d5:3f:30:a6:bb:98:1e:d0:62:e1:1a:32:d4:be:
         ad:bd:23:49:31:98:28:61:e4:09:f6:ba:2b:3b:4d:6b:9d:01:
         ad:5c:23:23:59:59:31:39:8e:3d:28:df:8a:f4:16:7d:03:73:
         4c:f9:e1:92:6c:aa:33:93:b3:9e:55:19:71:e2:f6:31:9f:1f:
         e6:e6:47:16:60:99:bd:e0:98:1c:dc:62:af:d1:44:dd:ad:73:
         33:b3:27:42:6c:29:03:2e:d3:3c:d9:4e:dc:13:83:f9:6c:4d:
         e0:f7:90:31:59:40:21:12:af:0b:fb:35:f1:ba:1e:c6:c0:b7:
         3c:f9:1f:fc:7d:6d:1b:e7:cb:e0:66:fb:02:1f:a5:d1:58:f2:
         c6:bb:81:75:a9:e0:c9:83:92:ed:77:ec:93:20:48:f6:a9:1a:
         dd:2a:ce:f8:25:bd:ea:f9:9e:1c:a8:01:3b:ec:97:a5:a4:d0:
         9f:8a:b3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:24:25 2026 by rpki-client