Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
File:                     HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft (raw, json)
Hash identifier:          ioTNggjtlc1iR8wUVlzwY3ZGFttTSazQWS057aZMvwk=
Subject key identifier:   F4:74:71:6D:4C:66:7E:7C:0F:85:83:C0:A6:08:71:F9:39:9A:41:FC
Authority key identifier: 1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4
Certificate issuer:       /CN=A919EF2B/serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
Certificate serial:       038B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
Manifest number:          0385
Signing time:             Thu 21 May 2026 00:52:38 +0000
Manifest this update:     Thu 21 May 2026 00:52:37 +0000
Manifest next update:     Thu 28 May 2026 00:52:37 +0000
Files and hashes:         1: HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl (hash: PDY8dj+y/J651pj1NhDYSqePJr06nsE5dRaexy2oKM4=)
                          2: 830C9F90EBCA11ECA2A1747EC4F9AE02.roa (hash: 3NxrjtF1LNJgYupbzMrriTN+tRYzA8aged2EpehvID4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl
                          rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF2B, serialNumber=1CBA8D3DAA80488930A9928B196EDEE075F409A4
        Validity
            Not Before: May 21 00:52:37 2026 GMT
            Not After : May 28 00:52:37 2026 GMT
        Subject: CN=6a0e5756-bc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:ed:8f:3d:d9:88:cb:6d:ab:af:ac:20:3c:
                    27:1e:c6:bd:5e:1a:03:31:26:2b:46:83:e9:72:8e:
                    6f:68:81:8a:9b:58:57:93:f8:42:92:b9:d9:e8:ee:
                    4f:32:d7:66:76:9a:65:15:85:27:f4:05:25:0b:2b:
                    2c:89:cf:b3:bd:da:9d:61:7f:86:18:1b:ba:c9:d9:
                    d9:0a:ce:2e:13:da:ac:ea:fe:57:cb:5e:0f:16:86:
                    f6:92:67:ca:bb:63:07:2c:e4:28:17:fc:68:0f:ee:
                    ff:8d:c9:8a:0e:76:31:3a:63:e4:09:a9:65:7e:36:
                    ae:6e:f4:0f:a4:ef:32:ad:da:1f:51:ae:e4:33:72:
                    2c:a3:cf:4d:99:8f:9a:15:ca:bb:e4:1c:bb:7d:b3:
                    e0:76:a8:68:f9:5b:e3:c3:5a:c7:6b:c5:ec:d8:16:
                    46:0d:81:98:e1:92:79:6a:46:50:a2:7d:b1:d2:73:
                    26:bc:44:41:38:16:d5:73:55:86:45:b0:28:41:a7:
                    af:be:83:07:8a:b8:61:cb:67:e2:cc:2d:20:86:a3:
                    d0:b7:17:68:57:49:6b:3d:65:eb:f4:0e:d7:b6:92:
                    b8:f7:6f:e6:8c:dd:b5:b8:b0:b0:a7:0a:c5:0e:c7:
                    8b:92:5a:32:f8:77:5c:5a:c9:3d:c7:0a:4f:78:07:
                    0e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:71:6D:4C:66:7E:7C:0F:85:83:C0:A6:08:71:F9:39:9A:41:FC
            X509v3 Authority Key Identifier:
                keyid:1C:BA:8D:3D:AA:80:48:89:30:A9:92:8B:19:6E:DE:E0:75:F4:09:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HLqNPaqASIkwqZKLGW7e4HX0CaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF2B/537322FAEBC411EC9385EC62C4F9AE02/HLqNPaqASIkwqZKLGW7e4HX0CaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:fc:aa:42:2d:01:ff:d9:fd:19:77:9f:29:5c:dd:a4:3b:
         a0:59:7d:53:ef:a8:e8:4e:82:0a:11:94:06:d0:07:0a:b1:bc:
         e4:49:dc:e6:2a:77:ae:64:60:ec:a4:53:71:40:39:9b:2d:78:
         11:09:9f:d9:d2:27:da:53:9f:d1:49:9d:18:08:81:a4:9e:cb:
         e2:a5:13:17:f7:d9:58:21:f1:89:5b:b2:91:6c:bf:ad:eb:f4:
         06:22:af:06:e3:53:45:5c:23:0f:6e:3b:74:f7:fb:ae:a7:8d:
         0b:c5:fc:21:43:e5:ec:82:93:33:9f:8d:6e:44:da:45:ef:83:
         45:7e:f8:02:9c:2a:8e:80:a2:ff:5d:e9:fd:5e:8b:c4:45:47:
         85:a9:fb:d7:eb:89:e1:b2:d4:f5:da:65:9f:be:50:43:b4:80:
         2e:23:8d:3e:2d:df:36:ac:da:16:8d:9d:87:69:66:f9:85:84:
         10:3d:54:d3:64:4f:3b:f1:41:81:aa:2a:2a:b2:02:6e:85:8c:
         09:a1:58:10:85:ec:c7:f4:b1:1a:1b:c2:6d:de:06:ac:4f:50:
         f4:7f:f0:b4:c7:02:06:a9:0e:22:4f:06:0e:b1:11:31:56:ac:
         ae:8c:30:8a:16:35:a9:5b:b6:e4:c3:d5:89:ca:67:dc:1b:58:
         0b:47:3f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:27 2026 by rpki-client