Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
File:                     HuygOndlK5BwteEzgJoiODDInPk.mft (raw, json)
Hash identifier:          jq3JvkvIL8M8EvBqb8IUl6rl/HN3lzWjKaRjf4Ym3Co=
Subject key identifier:   D1:9A:2B:89:29:D9:5D:66:3D:49:3E:79:1C:45:B2:BF:92:F5:81:FE
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Certificate issuer:       /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial:       0327
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
Manifest number:          0318
Signing time:             Thu 21 May 2026 01:18:12 +0000
Manifest this update:     Thu 21 May 2026 01:18:11 +0000
Manifest next update:     Thu 28 May 2026 01:18:11 +0000
Files and hashes:         1: HuygOndlK5BwteEzgJoiODDInPk.crl (hash: zTDSKTuoqghuDKGo7zLczkMJccevGKkIfyUkRQNGUJs=)
                          2: 9A59F7D670E411F0A8BFEE2AC4F9AE02.roa (hash: bAK5cuhceC5CpvKLnGgFlPhfEcQEufvQZ5+D2IKnvDc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
                          rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAD56, serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
        Validity
            Not Before: May 21 01:18:11 2026 GMT
            Not After : May 28 01:18:11 2026 GMT
        Subject: CN=6a0e5d53-8468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:8f:98:e7:29:5d:96:94:7c:6f:0d:04:10:
                    e0:fd:72:3d:3b:4a:2e:63:d4:af:23:9e:91:90:0e:
                    d8:8a:a6:ac:21:31:82:37:50:d0:34:e0:22:84:92:
                    b9:e4:be:a6:97:e6:2f:1d:ce:e2:3a:03:20:84:d8:
                    12:90:92:00:f9:2a:9d:f2:b2:d0:59:a7:ba:32:11:
                    a7:19:9a:cc:c3:c3:b4:21:65:35:d3:31:ab:4a:88:
                    10:df:67:4a:01:5d:5c:f1:ad:39:69:c2:8e:82:17:
                    88:47:9b:00:e7:6e:93:93:30:41:f7:82:0f:e8:de:
                    00:02:12:a9:94:da:06:c6:8d:14:41:51:c0:b4:11:
                    d9:ae:30:05:60:b4:d1:9d:a8:9e:0f:04:9b:17:60:
                    d5:f6:15:c2:45:df:a5:d1:01:af:b0:72:72:1b:17:
                    47:69:6c:7c:b8:07:da:10:51:4a:3a:cf:d4:31:5d:
                    23:e6:4a:2f:90:3b:45:cf:12:eb:80:ca:3b:62:c7:
                    30:5b:67:c5:46:18:71:51:6f:ba:2f:73:02:db:08:
                    61:3f:97:95:7d:09:77:aa:13:d4:72:9c:3f:a6:85:
                    a2:86:dc:0b:5a:02:b3:25:00:02:b8:c2:5e:0c:ec:
                    02:45:31:71:88:ab:73:4c:d0:5f:45:6b:26:56:bf:
                    20:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9A:2B:89:29:D9:5D:66:3D:49:3E:79:1C:45:B2:BF:92:F5:81:FE
            X509v3 Authority Key Identifier:
                keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:1b:08:b8:25:1d:0d:cc:70:56:80:3b:82:c9:f7:05:0c:
         9c:5d:90:f0:61:92:74:79:03:72:14:f2:e5:c4:5e:a2:2a:ed:
         17:67:78:2a:a0:64:3f:a6:e0:48:4b:f8:d0:c6:57:25:e2:14:
         db:fe:bd:95:23:80:f7:8a:c4:94:57:f8:d1:aa:5d:09:02:33:
         19:27:e5:0e:0b:81:dc:73:e1:02:c8:0f:c1:32:f7:f1:3b:11:
         19:63:2f:45:69:1a:63:dd:4e:b9:0a:c9:d2:cb:87:17:13:1d:
         22:3f:3a:a6:86:ed:a5:9e:54:f4:e6:92:2a:7b:ce:8c:60:0c:
         76:6a:7f:e6:3b:43:89:c5:43:8f:ae:85:d4:00:3e:b9:24:c1:
         8a:4e:db:86:97:06:a9:2e:ee:c6:14:3a:6e:33:64:5a:44:ed:
         b6:1e:5b:d0:f9:b5:38:e1:5a:4f:45:e4:ff:e7:23:3b:5f:06:
         78:a0:a6:ce:9c:88:c5:04:84:05:4d:b1:e7:90:ea:6e:1f:d3:
         4f:cb:c0:f8:60:c9:c2:85:c1:74:af:ba:1f:8a:d6:7f:3a:7f:
         97:b7:9f:59:55:e2:f1:0d:af:20:eb:b8:e0:6b:71:33:ae:a8:
         fc:a1:88:f3:c0:9f:bb:04:ff:ea:31:95:61:4b:53:0d:0a:d3:
         82:4d:01:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkFENTYxMTAvBgNVBAUTKDFFRUNBMDNBNzc2NTJCOTA3MEI1RTEzMzgwOUEyMjM4
MzBDODlDRjkwHhcNMjYwNTIxMDExODExWhcNMjYwNTI4MDExODExWjAYMRYwFAYD
VQQDEw02YTBlNWQ1My04NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulOPmOcpXZaUfG8NBBDg/XI9O0ouY9SvI56RkA7YiqasITGCN1DQNOAihJK5
5L6ml+YvHc7iOgMghNgSkJIA+Sqd8rLQWae6MhGnGZrMw8O0IWU10zGrSogQ32dK
AV1c8a05acKOgheIR5sA526TkzBB94IP6N4AAhKplNoGxo0UQVHAtBHZrjAFYLTR
naieDwSbF2DV9hXCRd+l0QGvsHJyGxdHaWx8uAfaEFFKOs/UMV0j5kovkDtFzxLr
gMo7YscwW2fFRhhxUW+6L3MC2whhP5eVfQl3qhPUcpw/poWihtwLWgKzJQACuMJe
DOwCRTFxiKtzTNBfRWsmVr8gdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGaK4kp
2V1mPUk+eRxFsr+S9YH+MB8GA1UdIwQYMBaAFB7soDp3ZSuQcLXhM4CaIjgwyJz5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUQ1Ni84MThCNEQwMjFB
QUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1Qnd0ZUV6Z0pvaU9ERElu
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0h1eWdPbmRsSzVCd3RlRXpnSm9pT0RESW5Qay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QUQ1Ni84MThCNEQwMjFBQUUxMUVEOUI3NEFFNTFDNEY5QUUwMi9IdXlnT25kbEs1
Qnd0ZUV6Z0pvaU9EREluUGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASKIbCLglHQ3McFaAO4LJ9wUMnF2Q8GGSdHkDchTy5cReoirtF2d4KqBkP6bg
SEv40MZXJeIU2/69lSOA94rElFf40apdCQIzGSflDguB3HPhAsgPwTL38TsRGWMv
RWkaY91OuQrJ0suHFxMdIj86pobtpZ5U9OaSKnvOjGAMdmp/5jtDicVDj66F1AA+
uSTBik7bhpcGqS7uxhQ6bjNkWkTtth5b0Pm1OOFaT0Xk/+cjO18GeKCmzpyIxQSE
BU2x55Dqbh/TT8vA+GDJwoXBdK+6H4rWfzp/l7efWVXi8Q2vIOu44GtxM66o/KGI
88CfuwT/6jGVYUtTDQrTgk0Bpg==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:01 2026 by rpki-client