Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File:                     H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier:          lC7LnjZDfFPSfusaF7+fPFLfnXoHHfpafVn/SHtEQFI=
Subject key identifier:   DC:E5:B0:DA:A7:FE:53:2F:40:B6:1B:13:22:39:17:5D:28:9A:CD:26
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer:       /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial:       0663
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number:          065B
Signing time:             Sat 04 Apr 2026 22:25:48 +0000
Manifest this update:     Sat 04 Apr 2026 22:25:48 +0000
Manifest next update:     Sat 11 Apr 2026 22:25:48 +0000
Files and hashes:         1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: DDnizrAosz2IuI6qoYOPcU5FDX4YU2hDX3GLIeyDdv8=)
                          2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: O7fGHxjN+FQFGsWlRiNdIknWpbcrH7a7kZFkM8vfbFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
                          rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
        Validity
            Not Before: Apr  4 22:25:48 2026 GMT
            Not After : Apr 11 22:25:48 2026 GMT
        Subject: CN=69d18fec-8ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:d2:f3:1c:4c:80:16:8d:21:cf:db:78:d1:
                    b5:29:da:13:b1:03:55:18:de:70:a7:6b:a2:75:36:
                    25:e8:d5:1f:3b:b4:98:34:a2:35:0e:3b:1c:0d:b5:
                    f9:8a:a8:fc:08:29:da:58:59:37:78:a6:c8:df:2d:
                    af:02:c7:4e:0e:b0:59:4a:59:89:e2:f0:4d:37:02:
                    5b:76:89:58:27:e3:7c:77:fa:c9:bd:19:53:b5:bd:
                    26:e6:03:22:bc:e2:19:93:2d:db:13:35:72:f9:fd:
                    87:53:4f:46:a0:ac:7b:8c:54:69:2b:c2:bc:01:5b:
                    7b:76:74:0b:90:75:f9:45:f7:73:cb:64:40:5b:56:
                    c2:82:dc:1f:59:cb:b1:df:bf:4f:c3:fd:ca:9c:4f:
                    d6:09:e4:6a:2b:f8:83:e8:b5:51:cd:f0:a4:4b:42:
                    d5:ca:1b:f7:36:4b:4a:e9:b9:fa:83:7b:99:ff:53:
                    f5:ea:69:e9:32:6c:89:8d:96:9a:49:a4:bb:aa:4b:
                    f3:69:9d:b7:bf:79:61:6a:4c:e7:94:d5:90:fa:7e:
                    2b:3d:c4:3b:1f:26:6c:72:a5:ea:41:70:c6:14:67:
                    5f:fe:82:17:ba:60:a3:b0:7a:8e:4a:c5:a0:79:ae:
                    0e:df:1c:c8:97:14:d3:a5:bb:0b:8a:19:c7:c9:9e:
                    19:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:B0:DA:A7:FE:53:2F:40:B6:1B:13:22:39:17:5D:28:9A:CD:26
            X509v3 Authority Key Identifier:
                keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6b:1d:56:24:4e:df:96:f7:33:83:a0:1f:be:b9:80:5f:13:
         34:5d:79:e9:2c:b7:54:75:71:13:ad:81:2f:6c:b0:8a:b7:d1:
         15:24:c0:8b:34:c4:4d:ba:bc:64:0b:48:e0:70:01:1c:9c:0d:
         67:05:50:14:fb:f3:32:4f:38:65:24:85:d0:3c:10:90:5e:cb:
         50:29:1b:7b:ed:5f:85:c9:2a:c4:d4:6e:3c:49:2d:56:84:31:
         54:e9:27:f4:87:80:9a:48:af:0e:55:31:75:8f:65:50:50:11:
         04:99:e1:fb:96:23:fe:ad:dd:a7:af:66:ee:f6:66:3d:8d:4a:
         95:81:fc:7a:93:b8:ff:2b:c9:74:c6:b5:2a:f0:a7:0f:af:08:
         dc:b7:6d:47:9e:56:36:67:25:8b:4e:37:84:ca:02:28:65:bf:
         fc:e8:59:07:45:5a:d7:74:b9:d8:73:ae:fb:d4:0b:f9:48:41:
         4f:83:a3:5e:d1:38:a8:20:e3:b3:9a:b9:40:0b:8b:fa:60:03:
         9e:f4:ff:6b:be:b5:28:e0:a9:56:e3:a5:2a:d3:8d:56:d0:95:
         c7:40:c0:7c:40:d5:31:38:ba:d8:b9:24:3f:98:ac:cc:0c:e2:
         38:90:2b:2f:d4:4a:a8:3f:71:37:f2:4f:a1:79:9f:64:34:fe:
         0b:82:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:57 2026 by rpki-client