Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
File:                     hmRWQenizPzosun9-5X-a_CfBcU.mft (raw, json)
Hash identifier:          zino2Kjg01vzy8+E2Fq6s7AfsWYnX65wE4YZEcIx0C0=
Subject key identifier:   07:71:4E:E4:D1:DB:D5:32:AD:AF:62:F3:7D:0E:1A:5E:00:8C:7D:98
Authority key identifier: 86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5
Certificate issuer:       /CN=A91C3DEA/serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
Manifest number:          26
Signing time:             Sun 05 Apr 2026 08:07:42 +0000
Manifest this update:     Sun 05 Apr 2026 08:07:41 +0000
Manifest next update:     Sun 12 Apr 2026 08:07:41 +0000
Files and hashes:         1: hmRWQenizPzosun9-5X-a_CfBcU.crl (hash: lZPL0nC4AemgwySrZz0bbwBxrkw0VIHzp6S1m5sCf+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl
                          rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3DEA, serialNumber=86645641E9E2CCFCE8B2E9FDFB95FE6BF09F05C5
        Validity
            Not Before: Apr  5 08:07:41 2026 GMT
            Not After : Apr 12 08:07:41 2026 GMT
        Subject: CN=69d2184e-d59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:1b:6c:95:78:73:62:4f:a4:ba:bf:ce:de:
                    de:17:9e:77:f4:5e:00:ec:e0:63:0b:dc:db:64:ad:
                    12:66:b8:f9:b9:1e:cf:a2:38:66:8f:43:94:a5:da:
                    2d:4e:5b:a1:8d:83:f0:93:18:c1:38:bb:4f:07:a9:
                    12:54:7e:95:48:ad:c0:17:15:17:b0:cc:21:8f:cc:
                    a7:c1:09:7a:6f:7d:09:64:eb:00:72:cc:33:8b:06:
                    a7:d1:52:d8:be:f7:84:12:b5:4c:2b:12:7b:ce:e4:
                    fa:d7:d3:51:bd:26:97:fa:3b:b2:96:fc:ad:3d:63:
                    d2:75:71:3f:23:7b:7d:a8:5f:dd:7a:2a:0b:bb:b8:
                    c6:24:e9:09:16:4b:2d:ef:16:8b:cc:d1:dc:6d:87:
                    9e:60:aa:75:cf:b9:2a:bf:95:36:6e:9b:0a:a3:66:
                    42:19:34:ac:47:74:6f:58:bb:24:a0:eb:c1:37:6e:
                    e2:43:11:48:1a:21:4f:59:bc:de:00:91:d9:48:cd:
                    f1:75:7c:34:8b:eb:09:69:f8:f3:90:70:d2:3c:de:
                    ef:d0:06:bf:94:9d:14:f1:81:9d:89:77:2f:50:4d:
                    8c:f0:21:7a:c6:2e:e3:94:8e:83:76:ee:b3:06:5c:
                    a3:c8:73:02:95:7d:7c:2f:90:dd:b6:a6:84:79:ca:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:4E:E4:D1:DB:D5:32:AD:AF:62:F3:7D:0E:1A:5E:00:8C:7D:98
            X509v3 Authority Key Identifier:
                keyid:86:64:56:41:E9:E2:CC:FC:E8:B2:E9:FD:FB:95:FE:6B:F0:9F:05:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hmRWQenizPzosun9-5X-a_CfBcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3DEA/AAEEA41CFC9D11F093E6B1695D6F56BC/hmRWQenizPzosun9-5X-a_CfBcU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d3:7a:fb:63:86:a1:fc:90:0b:ef:af:18:b5:86:8a:b2:8c:
         53:f3:fb:e6:bb:9a:5d:16:6e:66:49:74:4f:a7:00:86:0c:9d:
         9e:8c:21:c5:03:ab:46:28:15:31:65:05:9a:50:e9:e8:ee:b6:
         d0:46:15:f4:cb:d0:40:06:66:a5:e7:9f:b6:6c:bc:65:33:89:
         b9:47:01:c1:a0:d9:d9:09:b4:7b:cc:4b:f9:ed:26:67:53:ae:
         1b:f0:71:02:45:c3:d8:1d:ec:be:06:dd:4b:3e:4f:7e:e0:73:
         c3:66:68:b5:36:53:87:00:3e:8e:10:93:40:97:0a:20:82:2d:
         ef:9c:1d:9f:94:b0:5f:6e:4e:96:dd:05:92:ea:bf:66:a1:b6:
         f9:9f:c0:cf:ad:98:15:84:41:89:c7:31:6f:9a:38:e7:66:d9:
         3e:0d:3e:9e:10:5b:78:11:90:e1:68:c8:f2:9e:88:66:98:03:
         35:af:d0:c3:42:28:0e:4a:40:11:dc:22:4e:e0:df:22:a0:73:
         37:ae:ba:a4:1c:d1:9f:f9:88:13:72:c2:32:32:5d:aa:8e:70:
         ce:f1:4b:53:e7:ed:92:d3:6f:30:43:d4:00:fa:4b:f2:1f:40:
         80:73:f2:a2:b4:0e:3d:25:44:dd:e5:47:f2:95:88:7d:d9:78:
         17:08:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:37:27 2026 by rpki-client