Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
File:                     hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json)
Hash identifier:          kjKztTmpsX9FdfekVfO7NxQKVj8wcAIKue6wn07v8oc=
Subject key identifier:   B8:F9:7B:3A:2E:C0:BC:54:4A:7F:4A:88:85:F6:B9:37:B3:80:59:79
Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52
Certificate issuer:       /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
Certificate serial:       0B42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
Manifest number:          0B32
Signing time:             Tue 12 May 2026 19:20:07 +0000
Manifest this update:     Tue 12 May 2026 19:20:06 +0000
Manifest next update:     Tue 19 May 2026 19:20:06 +0000
Files and hashes:         1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: zYjjObHeVqZIRcDqt73V0OliPnw7usQ6HDHhwbEmbGY=)
                          2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: bmZDBP315oKogWRN77TB7S1FyMQuLeHvXamkt99dOkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl
                          rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2882 (0xb42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052
        Validity
            Not Before: May 12 19:20:06 2026 GMT
            Not After : May 19 19:20:06 2026 GMT
        Subject: CN=6a037d67-ce94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:7f:84:09:55:26:40:74:17:54:14:f0:07:
                    3d:d5:6b:62:51:07:63:36:52:8f:25:ae:92:0f:26:
                    6c:4a:a2:21:5c:f4:d7:df:7a:03:a8:0c:10:f4:fe:
                    49:b9:34:be:19:e0:48:43:88:04:45:9e:54:5d:42:
                    b7:b9:d7:0b:82:1f:6a:5b:44:c6:7f:19:d5:34:33:
                    e9:04:f1:0b:3a:55:23:28:9a:07:d5:07:5e:ea:72:
                    a7:a1:bd:2a:b0:ce:72:1f:63:88:96:77:74:6d:ca:
                    c7:97:3f:08:b6:b4:93:67:3d:5b:77:8b:98:8a:85:
                    40:db:82:99:08:43:59:2d:8d:51:ed:ac:75:91:42:
                    b6:4e:bb:79:f8:4a:63:94:33:f7:c3:4d:ae:a5:99:
                    38:ca:67:9e:4a:b8:3e:09:e8:66:43:d0:f6:b3:d9:
                    fe:ac:53:5f:dc:f8:4c:6b:09:df:c6:7e:e3:18:44:
                    be:0c:fd:7d:66:24:22:d9:1c:b8:b0:55:aa:65:5b:
                    f3:0e:4b:71:5d:8c:a1:a4:2b:1c:70:e8:4a:6f:3a:
                    be:fe:98:94:fa:1b:66:d4:9c:c7:82:01:be:ac:37:
                    11:99:62:89:b1:7e:1d:f7:9f:b3:51:82:8e:ec:39:
                    0c:2e:70:93:cf:b1:42:af:37:1f:a8:fe:b4:11:d2:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F9:7B:3A:2E:C0:BC:54:4A:7F:4A:88:85:F6:B9:37:B3:80:59:79
            X509v3 Authority Key Identifier:
                keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:19:3c:da:83:d5:49:e3:10:e2:2f:4b:ab:38:9a:c2:c5:c2:
         2d:5b:97:28:93:12:8c:8c:24:b1:b8:26:a7:8c:9b:c7:c5:2d:
         dd:67:2b:2f:d9:fa:2d:43:6a:d1:92:e1:2b:5f:d1:63:97:68:
         1b:c1:fe:52:ce:60:55:d1:bf:23:a9:ef:c5:3e:00:73:f0:bc:
         d4:40:13:64:0c:d7:a5:63:27:de:c3:52:a4:12:20:8d:45:4f:
         48:9a:01:fb:4e:50:fc:52:4a:16:89:61:29:45:c9:bb:ca:8c:
         35:11:21:db:fb:95:c3:cd:d8:5c:7f:66:1c:06:8f:b9:b6:79:
         0c:43:79:7e:4b:34:eb:ac:3f:ae:f0:58:57:d5:ce:b2:61:b7:
         a1:2a:2f:79:7e:c4:c7:ec:9e:9b:f9:0a:d7:94:14:bc:05:1a:
         b9:71:b9:6e:d2:6e:42:26:4c:94:a8:0d:e3:e7:c6:6f:fd:e3:
         e3:2a:6e:2a:18:c9:b8:db:c5:df:23:93:0e:1a:94:42:1a:a4:
         e3:a9:2e:07:c3:75:c4:96:b1:03:e5:b1:d2:8f:13:72:fc:13:
         5f:94:dc:4a:7a:8f:37:a5:f5:76:0b:68:a6:83:25:f0:32:fb:
         53:2c:47:63:af:7f:ac:3e:d4:67:6d:33:f2:65:b3:0e:cd:f0:
         2c:1d:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:38:14 2026 by rpki-client