Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
File:                     Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json)
Hash identifier:          0VDab30MV7Ybe67Xg6T20NYS8IvHrC6oFdQ9Wxzvi+g=
Subject key identifier:   C8:86:5A:1C:02:B6:96:39:84:40:6E:61:92:CD:B1:6F:71:02:D6:16
Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53
Certificate issuer:       /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
Manifest number:          0676
Signing time:             Sat 04 Apr 2026 22:22:32 +0000
Manifest this update:     Sat 04 Apr 2026 22:22:32 +0000
Manifest next update:     Sat 11 Apr 2026 22:22:32 +0000
Files and hashes:         1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: S5iCb8BZrLJ8Hk3ut8ic5M7A8Lu/lNWBhA/zSzP8SJI=)
                          2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: 1mi94uLEkRDVwmv/sPwzG05IO6gK3xnOgPXRSCc/xws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl
                          rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53
        Validity
            Not Before: Apr  4 22:22:32 2026 GMT
            Not After : Apr 11 22:22:32 2026 GMT
        Subject: CN=69d18f28-27d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:a8:f0:6e:0d:3f:aa:f6:48:c9:be:86:0e:
                    31:9b:2e:12:8b:79:b5:30:2d:f6:52:37:ae:16:9e:
                    46:98:0b:3d:40:1b:2b:ac:5d:a3:33:07:ee:e0:5c:
                    c3:24:8f:4f:3c:8b:78:8f:27:bd:22:8b:f9:07:91:
                    1e:44:e6:4b:4b:25:46:73:f2:1c:a3:59:36:5e:60:
                    80:09:76:da:cd:27:af:f1:cd:31:3a:15:85:76:60:
                    1e:be:31:79:1b:1c:9d:5d:32:1d:eb:4e:72:f2:e8:
                    f2:e3:06:f5:2d:da:bb:b0:8d:77:75:a3:b2:7b:f5:
                    bd:7e:98:d2:64:c2:2a:43:68:b4:04:4f:e0:a4:95:
                    3c:d6:24:37:6e:0a:3d:b9:1c:28:09:ea:fb:8f:11:
                    dd:61:40:b8:d2:02:2e:6b:cd:72:53:49:5b:bd:b7:
                    cf:26:0e:6a:6c:57:a9:45:40:f7:04:53:bd:c0:f9:
                    3f:33:03:3f:74:f0:79:8a:a1:f1:d6:d6:f3:22:b5:
                    66:a6:1e:6b:70:ed:8b:fa:6f:b9:d8:8a:14:12:53:
                    bc:07:02:19:d3:d7:b7:92:48:74:37:8e:3d:03:8a:
                    91:20:ed:ef:0c:32:d4:ed:ff:da:15:90:70:04:91:
                    9b:47:fe:c0:85:20:bb:51:e3:7d:a7:36:6a:7d:22:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:86:5A:1C:02:B6:96:39:84:40:6E:61:92:CD:B1:6F:71:02:D6:16
            X509v3 Authority Key Identifier:
                keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6d:d5:13:6f:ba:11:d6:f0:9b:13:85:af:23:be:28:ee:0a:
         b1:c7:49:76:8f:be:9d:bd:e3:33:a8:e9:e7:91:17:52:e5:6c:
         0f:75:b0:59:5a:a7:0a:c1:df:6d:69:1f:aa:0a:d0:69:e1:ad:
         49:39:43:5e:a9:dc:55:5e:47:d8:23:f5:f8:c6:8c:cb:a9:98:
         6f:f2:d6:c7:83:1d:9b:99:88:23:44:29:75:76:56:63:39:d4:
         47:5e:c0:4a:a4:75:0f:e0:0d:36:77:72:53:d6:3b:95:98:94:
         4a:f0:b2:f0:c7:40:28:66:3c:76:68:8e:da:c2:11:70:4f:45:
         15:a6:b9:b7:00:53:d9:82:a0:53:c3:de:bf:b0:71:41:ab:b8:
         ff:9a:fc:a7:3f:14:e7:98:93:24:25:6d:84:59:2d:fe:40:e4:
         c4:45:c0:30:d9:e6:ab:13:52:0c:0a:4e:a6:98:d2:6a:12:9c:
         4e:f8:68:bf:8e:04:5f:5e:fd:51:f2:3e:3a:5d:b8:cc:9c:9d:
         47:86:f1:d8:38:0f:48:20:7f:5c:8d:39:e5:57:9f:d0:5c:90:
         04:49:ec:f4:a3:81:fc:84:2b:be:09:58:5d:80:af:57:80:12:
         d3:22:ca:bb:3c:31:fa:5a:81:0c:c2:67:bb:d5:6c:53:e4:01:
         af:84:ad:20
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4
MTRFNUZBNTMwHhcNMjYwNDA0MjIyMjMyWhcNMjYwNDExMjIyMjMyWjAYMRYwFAYD
VQQDEw02OWQxOGYyOC0yN2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAmo8G4NP6r2SMm+hg4xmy4Si3m1MC32UjeuFp5GmAs9QBsrrF2jMwfu4FzD
JI9PPIt4jye9Iov5B5EeROZLSyVGc/Ico1k2XmCACXbazSev8c0xOhWFdmAevjF5
GxydXTId605y8ujy4wb1Ldq7sI13daOye/W9fpjSZMIqQ2i0BE/gpJU81iQ3bgo9
uRwoCer7jxHdYUC40gIua81yU0lbvbfPJg5qbFepRUD3BFO9wPk/MwM/dPB5iqHx
1tbzIrVmph5rcO2L+m+52IoUElO8BwIZ09e3kkh0N449A4qRIO3vDDLU7f/aFZBw
BJGbR/7AhSC7UeN9pzZqfSLm+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMiGWhwC
tpY5hEBuYZLNsW9xAtYWMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF
MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt
bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3
RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlm3VE2+6EdbwmxOFryO+KO4KscdJdo++nb3jM6jp55EXUuVsD3WwWVqnCsHf
bWkfqgrQaeGtSTlDXqncVV5H2CP1+MaMy6mYb/LWx4Mdm5mII0QpdXZWYznUR17A
SqR1D+ANNndyU9Y7lZiUSvCy8MdAKGY8dmiO2sIRcE9FFaa5twBT2YKgU8Pev7Bx
Qau4/5r8pz8U55iTJCVthFkt/kDkxEXAMNnmqxNSDApOppjSahKcTvhov44EX179
UfI+Ol24zJydR4bx2DgPSCB/XI055Vef0FyQBEns9KOB/IQrvglYXYCvV4AS0yLK
uzwx+lqBDMJnu9VsU+QBr4StIA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:28:58 2026 by rpki-client