Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
File:                     HA0tulqzbC-WcsFN2He57qBsysc.mft (raw, json)
Hash identifier:          oqz1kQ8URlZEX0bmHBWh5jrQc+rdyNQFNWW9gaLdYH4=
Subject key identifier:   BE:83:47:BD:F8:70:94:95:5C:ED:CD:4D:D5:0B:56:1D:1C:A3:41:C6
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       0985
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
Manifest number:          095B
Signing time:             Thu 04 Jun 2026 20:09:29 +0000
Manifest this update:     Thu 04 Jun 2026 20:09:29 +0000
Manifest next update:     Thu 11 Jun 2026 20:09:29 +0000
Files and hashes:         1: HA0tulqzbC-WcsFN2He57qBsysc.crl (hash: TWHRUrdO5sIxbhtc+ZDui7n8y9rcJLCx+PJsdWIYofU=)
                          2: BA69B6FABC2C11EA96657B4BC4F9AE02.roa (hash: rixxFEhhporEowEcKJ0zMfY5DGdFHoWYuPowdcyFr5A=)
                          3: BB250202BC2C11EA96657B4BC4F9AE02.roa (hash: UJmyzSzozDENX7jF+64gEj4E6QBieKxXCaJ+JGRYbs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 20:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Jun  4 20:09:29 2026 GMT
            Not After : Jun 11 20:09:29 2026 GMT
        Subject: CN=6a21db79-5d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:aa:a0:1e:2a:2b:f9:e1:7c:83:83:bc:dc:
                    6d:1d:46:65:f9:ff:1b:32:dd:c0:68:2e:34:af:69:
                    d6:81:36:cf:f8:0c:ae:bd:67:bb:23:81:ab:33:51:
                    07:ab:92:4c:a7:52:b9:5d:3d:f8:1c:b0:c4:d1:88:
                    46:f7:a3:89:26:b9:86:cf:f5:f9:79:16:1c:11:cb:
                    6b:19:9c:f5:6a:c4:d5:ca:7f:f9:f8:39:37:02:77:
                    4e:77:cb:a6:e1:57:90:e4:41:de:81:4c:75:d1:5e:
                    01:99:0f:a3:89:e9:d7:1b:bf:2b:f9:8e:c9:23:14:
                    97:69:d6:89:a2:82:63:a0:34:5e:eb:98:cb:2a:f7:
                    20:bf:03:75:ba:42:5d:9e:38:3d:5e:5e:70:07:42:
                    1a:fa:a7:e6:1b:48:d1:2c:db:29:cf:44:15:e3:74:
                    47:b9:08:8d:dc:5b:54:6e:67:f1:15:09:a6:b4:d1:
                    0e:f8:ff:c1:6b:fd:d2:19:fb:2c:2b:c7:e7:ba:6f:
                    50:6f:a1:b2:a4:43:a8:c7:19:a7:6e:2b:89:55:40:
                    a7:d5:13:28:21:27:0f:14:84:54:eb:62:14:46:bd:
                    8b:b7:84:c5:80:06:94:b0:fe:13:fb:43:17:95:9b:
                    b2:f9:45:02:ca:85:47:68:90:70:aa:1f:af:56:41:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:83:47:BD:F8:70:94:95:5C:ED:CD:4D:D5:0B:56:1D:1C:A3:41:C6
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2a:50:c8:8a:a4:c5:02:d2:0d:1a:91:2a:9a:57:12:de:b4:
         c6:c4:53:e4:ba:93:20:69:cd:16:f3:2f:ba:e0:4f:4c:b3:50:
         6e:00:cb:bc:aa:e7:cb:ba:c1:1e:ec:de:a9:e7:9d:5e:71:dd:
         d3:25:d5:a4:d6:76:b1:48:26:67:cc:41:16:be:35:d3:94:2f:
         18:0c:c1:ec:eb:02:5c:40:49:4b:c2:f6:5f:b4:df:0f:c9:98:
         69:68:f5:cb:69:39:a4:e8:d9:b2:73:33:e0:28:79:79:92:a8:
         cc:1a:27:55:eb:72:bc:46:11:31:27:32:0d:f1:73:cd:0f:2c:
         14:b5:30:7a:5d:f5:e2:7d:62:23:5d:0d:73:5d:d8:14:71:06:
         f5:49:e3:ce:6c:4a:a4:1f:c7:f8:72:db:70:86:9b:e6:20:9c:
         85:d7:1d:d8:12:2a:06:be:88:b7:4b:e8:a0:69:5f:2c:00:71:
         98:50:8c:c8:64:45:65:16:42:42:e9:43:1c:55:cf:35:c7:12:
         14:88:a4:ae:17:fe:f8:de:f5:0c:7a:76:0b:81:c6:7e:04:f2:
         a6:46:e0:9f:52:08:9f:b6:7a:b0:d9:4b:49:7c:9f:d6:3e:c9:
         7b:73:85:44:05:bb:4e:b5:1e:55:1a:1e:de:97:a0:85:e0:9c:
         ac:80:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:26:17 2026 by rpki-client