Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
File:                     HT2u99J4g3Pt38sa1cTCNWxXre0.mft (raw, json)
Hash identifier:          VQ8uswxq176dBLRLuleHs9ZwyBUV/k8QaeMCJI5UGSc=
Subject key identifier:   D2:73:52:43:BD:57:9D:0F:35:99:8F:7D:A3:AD:05:90:E3:DB:49:9B
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Certificate issuer:       /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
Manifest number:          F7
Signing time:             Fri 17 Apr 2026 06:04:00 +0000
Manifest this update:     Fri 17 Apr 2026 06:04:00 +0000
Manifest next update:     Fri 24 Apr 2026 06:04:00 +0000
Files and hashes:         1: HT2u99J4g3Pt38sa1cTCNWxXre0.crl (hash: +aPd7a2bsfQxo5+XsCWV8C7ulxPNw3ND+4nwgbTJH7A=)
                          2: A22E9E42CF3D11EFB2075D13C4F9AE02.roa (hash: x28Oj7X+ym9PTtSgpQ2J6HOcFV8oNcxzJtpKw77hGpU=)
                          3: 8B349526E61B11EFA5CFAA1CC4F9AE02.roa (hash: f+4YHmGNktYVNDLxKhq1vMQrIMFjsHdCm70UHTOep/U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
        Validity
            Not Before: Apr 17 06:04:00 2026 GMT
            Not After : Apr 24 06:04:00 2026 GMT
        Subject: CN=69e1cd50-a953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:28:2d:07:e5:e0:fd:75:50:b6:f6:b6:d3:
                    af:29:56:57:e4:8b:89:0d:3e:4e:fb:15:8f:c4:6b:
                    47:f2:1b:07:18:a8:84:0c:ff:3e:99:1c:f0:61:01:
                    cf:96:5b:94:f7:02:ff:ba:5d:f1:93:4a:21:e6:46:
                    0e:c8:90:04:39:6b:00:e3:61:d9:a4:c0:d8:c6:99:
                    ed:1c:88:0f:a6:81:47:64:ed:ca:60:37:6d:d7:10:
                    bb:c4:46:af:6c:39:f9:57:bb:bd:7f:dc:e6:88:7d:
                    b5:8d:c5:1e:c8:f2:4b:10:01:76:a7:dc:de:e1:e2:
                    63:9c:8b:43:55:5c:ef:b0:4e:0a:3a:11:a9:e1:b6:
                    5d:03:d2:cd:74:9e:b5:1a:22:34:2a:15:47:81:9f:
                    ba:a5:4f:98:32:1c:91:79:f7:23:3c:67:43:c2:0f:
                    d6:df:fe:98:75:b5:6e:f1:3e:d9:5e:d5:c8:9d:18:
                    8b:cb:0e:f9:30:11:9b:d5:33:98:66:4f:44:05:9e:
                    7d:1f:e1:5a:de:b9:8a:52:7d:0b:68:c1:15:72:81:
                    e1:01:d4:38:b3:ec:8a:c0:09:9e:fd:d6:e7:fd:88:
                    cc:7b:94:91:d1:1b:d5:97:33:f3:7e:92:03:92:bd:
                    10:2d:55:41:88:43:09:c0:2f:f5:8d:33:e9:55:a7:
                    aa:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:73:52:43:BD:57:9D:0F:35:99:8F:7D:A3:AD:05:90:E3:DB:49:9B
            X509v3 Authority Key Identifier:
                keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cc:05:79:e7:eb:df:92:83:a9:a6:f7:e3:df:5f:69:87:b3:
         68:9f:25:22:7b:5f:47:88:30:a0:d2:b7:68:c8:d9:9b:44:b4:
         d0:1e:f3:4a:2d:00:05:b8:f9:c3:c1:66:ba:fa:1e:72:3c:36:
         12:f7:33:3c:5b:b3:3c:56:ca:3c:59:b5:de:9e:b2:52:a2:58:
         28:aa:5a:dd:7d:51:35:7f:91:82:44:e9:f8:e8:4e:21:09:a5:
         22:bc:38:25:49:01:9e:ba:b3:19:3a:89:75:e8:a8:da:96:bb:
         f2:c7:cf:91:dc:a9:57:ad:f2:80:a6:6a:ad:a7:94:91:c1:6b:
         1a:21:42:1c:09:54:4e:d7:81:a5:75:79:cd:37:98:4e:10:26:
         a8:b6:b7:1a:4f:79:1f:74:10:21:14:b2:5a:f3:fe:be:4d:dd:
         4f:a2:d7:42:ee:b0:b4:85:9e:76:eb:6e:db:27:81:27:df:ea:
         96:aa:0a:99:86:29:3c:21:b7:43:e0:58:64:dc:2b:54:b5:cc:
         92:ff:cf:90:29:86:e3:bf:35:ec:11:3c:44:e7:70:97:92:6b:
         26:20:4a:51:d1:bd:bf:43:f7:ae:b0:f2:87:35:55:e0:bc:ff:
         45:0c:74:d5:90:90:9b:e1:8f:f9:fa:47:61:b0:a0:aa:c4:39:
         2f:1b:96:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:06:03 2026 by rpki-client