Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
File:                     HT4YuPamfZKWztceIZJFoygFJn0.mft (raw, json)
Hash identifier:          qI24qnRNqJKGSCrKV/0ieHnDioR3YTqj4ea5KFBUXt0=
Subject key identifier:   F8:0D:A8:A0:83:E9:33:95:40:68:31:94:7B:5C:A8:56:9B:F7:80:6D
Authority key identifier: 1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D
Certificate issuer:       /CN=A91AD5C8/serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
Manifest number:          47
Signing time:             Tue 19 May 2026 08:16:42 +0000
Manifest this update:     Tue 19 May 2026 08:16:41 +0000
Manifest next update:     Tue 26 May 2026 08:16:41 +0000
Files and hashes:         1: HT4YuPamfZKWztceIZJFoygFJn0.crl (hash: xgNcKhtHkkT/7U4O5ncIG8YWbAd7/49mwv1M0BGJTbs=)
                          2: 40DFA7D2EF8811F0A94034DF606F56BC.roa (hash: r01cCM8Cr1fBBAypHwZvdCaBHe7BaHRTnIOSdsNilxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl
                          rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:16:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD5C8, serialNumber=1D3E18B8F6A67D9296CED71E219245A32805267D
        Validity
            Not Before: May 19 08:16:41 2026 GMT
            Not After : May 26 08:16:41 2026 GMT
        Subject: CN=6a0c1c69-e8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ee:ac:d0:56:1c:6b:c9:4e:79:9b:ce:8b:04:
                    56:d3:62:ee:29:37:50:45:e2:f8:88:5e:16:18:7f:
                    b2:f5:4a:9c:c9:a8:da:10:2c:fa:1a:59:35:6f:f4:
                    85:09:05:d7:1a:96:73:27:e4:a4:cb:02:18:6d:55:
                    eb:24:95:79:c6:5b:50:31:f9:39:fc:5f:35:62:75:
                    38:f7:74:a9:cd:15:2d:26:40:ab:87:e3:76:de:42:
                    a0:c2:97:c9:9f:60:86:4e:4e:fb:ff:b3:dd:da:5b:
                    c6:d8:9e:9b:9c:e3:d3:95:dc:06:b8:e8:f4:c4:b6:
                    52:5a:86:62:d7:f2:2f:38:3f:ef:9c:bd:d0:43:ff:
                    1b:60:41:4a:0b:3a:1d:c2:88:7d:db:2a:56:78:3a:
                    53:79:16:4a:49:77:db:44:af:aa:e6:d4:52:50:c5:
                    b4:63:be:a5:41:dc:da:ec:02:39:45:05:23:07:a2:
                    51:f0:89:33:90:6d:84:b8:aa:69:1f:d1:6b:df:31:
                    e0:43:d4:6f:86:da:86:7b:e7:13:7a:28:d6:e1:8a:
                    12:e5:20:da:c1:ba:b8:d2:ed:79:18:6a:65:84:39:
                    40:b6:7c:be:b0:06:18:a7:ba:1f:88:3c:89:67:bb:
                    a6:e4:23:c8:d5:75:2c:a3:b7:01:62:f8:15:58:dc:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0D:A8:A0:83:E9:33:95:40:68:31:94:7B:5C:A8:56:9B:F7:80:6D
            X509v3 Authority Key Identifier:
                keyid:1D:3E:18:B8:F6:A6:7D:92:96:CE:D7:1E:21:92:45:A3:28:05:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HT4YuPamfZKWztceIZJFoygFJn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD5C8/80D8B48AEF8511F09D6DE831606F56BC/HT4YuPamfZKWztceIZJFoygFJn0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:54:b2:49:2d:bc:7e:79:7e:a2:be:90:09:3c:23:9a:0a:a7:
         75:43:9e:ec:e5:c6:5a:26:fc:09:79:5a:89:82:5d:61:79:90:
         d9:8e:2b:47:f2:ab:dd:42:cc:35:f6:c6:6e:c0:39:51:78:03:
         9f:75:7c:92:69:eb:07:14:3c:47:11:d7:bc:d6:f1:1e:10:c5:
         ce:17:98:23:61:87:51:44:47:64:a9:b8:77:1e:92:22:7a:35:
         03:1d:98:a0:14:d0:98:0c:65:dc:97:7a:69:51:9b:3f:a9:c4:
         2e:22:30:94:82:5f:34:e5:f5:9c:27:ce:57:25:c1:b1:31:0d:
         93:d5:f6:be:ff:88:7b:8a:94:27:5a:46:95:53:26:c5:77:1d:
         c1:72:0a:88:b1:1f:40:ec:75:21:87:bb:ee:a0:74:e3:b6:ac:
         4a:94:eb:d2:3b:32:90:23:09:85:26:31:e7:68:cb:9b:7d:c5:
         83:dd:a5:fb:31:c2:fa:a5:6f:b0:ee:4b:ed:80:2a:03:f8:b0:
         2e:f1:57:4a:a3:7a:f6:15:06:3a:87:8c:63:1e:f7:4c:86:b3:
         b1:61:55:48:99:16:2a:4f:86:2c:05:c0:5a:a2:b2:8f:aa:ef:
         d1:b8:01:4c:78:ea:81:70:a8:02:c2:fc:dc:90:a3:8a:33:9a:
         4b:b3:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:05 2026 by rpki-client