Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
File:                     HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft (raw, json)
Hash identifier:          VrI/gud5GMF4GomzccofaXPA+P1P4v6UL7KgfnwM/XI=
Subject key identifier:   6E:A5:A4:33:5E:A1:37:F0:46:47:A7:98:7F:53:70:9F:6D:42:10:F6
Authority key identifier: 1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66
Certificate issuer:       /CN=A91F2CA8/serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
Certificate serial:       3546
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
Manifest number:          3538
Signing time:             Sat 04 Apr 2026 14:54:20 +0000
Manifest this update:     Sat 04 Apr 2026 14:54:19 +0000
Manifest next update:     Sat 11 Apr 2026 14:54:19 +0000
Files and hashes:         1: HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl (hash: DmMxsS/OzXBsh5mrZQpsJyL59I87odDoK4hHXX6nkvs=)
                          2: 08FA1EC60C0911EDBDF8C44FC4F9AE02.roa (hash: Uji+jzs6NFG4wqDWKqkDcEMRN/9KSog3h0uKrHTnUXM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl
                          rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13638 (0x3546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2CA8, serialNumber=1E752C3D16048C3F3F6323D2B91070BF247D6866
        Validity
            Not Before: Apr  4 14:54:19 2026 GMT
            Not After : Apr 11 14:54:19 2026 GMT
        Subject: CN=69d1261c-595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:25:4e:9b:1b:9f:6e:ad:6d:63:12:c2:17:
                    5d:e5:ef:80:c4:79:7e:4a:31:e9:e2:4d:de:bd:2a:
                    9e:6b:9c:90:dd:ef:06:51:a3:02:33:13:b1:7d:8d:
                    69:f3:7e:8a:15:e6:c5:cf:ac:57:c7:d1:b6:64:8d:
                    15:66:af:5b:a4:e1:59:6e:43:ff:da:43:8b:97:e4:
                    12:1c:77:17:4a:b7:56:ec:85:6e:84:15:dd:5b:cb:
                    8e:ea:ce:6d:f6:77:f7:a6:9b:a0:89:02:7e:8c:e2:
                    fd:1a:2f:17:92:56:fe:32:c9:03:10:71:80:98:47:
                    bc:86:80:87:de:db:6d:8b:2f:a4:6f:7c:56:64:b0:
                    c3:62:87:5f:3d:84:3b:b1:92:09:ad:3b:b0:45:04:
                    9c:5c:c1:f7:39:95:3e:5d:d5:73:f0:61:17:f5:71:
                    1f:67:e9:68:bf:44:c5:71:33:15:04:3a:9c:4b:df:
                    1b:cc:d7:fd:15:a4:a7:5d:26:42:11:25:e6:9d:08:
                    95:60:1e:a0:45:24:9d:48:24:77:7d:27:36:78:e2:
                    ac:f6:07:06:3a:fa:b5:0f:33:54:c0:0d:4e:74:23:
                    b6:6b:58:3d:d2:5e:63:65:7a:28:52:80:af:05:f2:
                    df:15:0e:3f:a9:e4:09:d9:c8:3e:bb:87:93:a3:76:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:A4:33:5E:A1:37:F0:46:47:A7:98:7F:53:70:9F:6D:42:10:F6
            X509v3 Authority Key Identifier:
                keyid:1E:75:2C:3D:16:04:8C:3F:3F:63:23:D2:B9:10:70:BF:24:7D:68:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2CA8/870322581D9A11E2AA86C28708B02CD2/HnUsPRYEjD8_YyPSuRBwvyR9aGY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:57:2d:68:52:11:8b:32:be:1a:09:0a:18:5b:2e:61:d4:ac:
         f8:f3:26:b4:26:cf:8b:bb:3c:c2:d7:39:e4:71:ed:86:7e:ab:
         0a:26:f5:26:6d:4c:59:b5:42:7a:18:97:57:89:4b:58:94:de:
         15:7b:51:4d:18:14:e7:ea:35:a1:ed:99:6e:b6:fb:ba:fa:55:
         6c:c2:fb:62:d6:24:80:b8:d1:b9:07:ca:0e:31:11:d9:d9:4b:
         42:88:d1:68:f4:d4:99:c0:ad:d4:1c:a7:4e:ea:f6:cb:14:56:
         b1:9b:85:5c:13:e1:0d:f1:f4:b7:3a:92:8c:7d:6e:01:87:86:
         e3:06:25:20:0f:67:4b:b4:58:2d:bb:b6:98:37:07:f5:aa:e8:
         32:68:71:93:d1:bc:ca:b5:06:cb:7a:8b:44:0b:e3:37:dd:0d:
         fa:8c:59:5b:d4:c7:ca:7a:18:5f:09:de:48:52:8a:27:b8:c2:
         88:1b:2d:a5:a7:a9:75:f3:5d:0c:4b:65:76:92:ad:ca:a1:1e:
         bd:0e:c4:c3:d6:e1:f7:be:50:cb:09:3b:82:1b:b4:38:22:56:
         45:54:0e:aa:84:99:42:f7:2b:8f:67:14:b4:2c:d9:2c:93:60:
         14:63:7a:9c:1d:7a:86:be:e6:1f:64:e0:e5:37:90:35:1d:64:
         f7:e1:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:33 2026 by rpki-client