Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
File:                     -HInxmU9abruLplIhCzrC0BJ54Y.mft (raw, json)
Hash identifier:          mHhL0ow9Le43Q6IU/7ZIfpBhWPm2+crde2DRnsc7oaI=
Subject key identifier:   AF:B3:C7:D9:E2:99:03:12:E8:A6:9E:B1:CE:12:A6:2C:93:FC:A5:85
Authority key identifier: F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86
Certificate issuer:       /CN=A916D23A/serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
Certificate serial:       0B95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
Manifest number:          0B84
Signing time:             Tue 24 Mar 2026 18:56:41 +0000
Manifest this update:     Tue 24 Mar 2026 18:56:41 +0000
Manifest next update:     Tue 31 Mar 2026 18:56:41 +0000
Files and hashes:         1: -HInxmU9abruLplIhCzrC0BJ54Y.crl (hash: rr60ujhDGjPTRT3/kV2HES2PfwyldFkG+ddrQ57DI0w=)
                          2: E265728A877911EA9E28DF0BC4F9AE02.roa (hash: eJeSjBWnfyztRwss0NRo6wVnGnHYGD5kAHWaTt/BWrE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl
                          rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2965 (0xb95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D23A, serialNumber=F87227C6653D69BAEE2E9948842CEB0B4049E786
        Validity
            Not Before: Mar 24 18:56:41 2026 GMT
            Not After : Mar 31 18:56:41 2026 GMT
        Subject: CN=69c2de69-be0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:4f:a1:66:0a:1a:2d:f1:55:c0:6c:41:1d:
                    0a:0b:fd:38:1b:3c:33:43:34:44:b2:db:c3:03:7d:
                    d1:ed:93:55:b6:13:bb:87:d1:01:5e:d3:99:62:4b:
                    fc:2d:54:4c:d4:e5:10:b1:48:fe:d5:7e:6a:b0:f3:
                    01:5d:02:1d:e5:dd:e6:5c:5b:8e:2e:6c:ff:28:19:
                    3d:b9:03:3d:b5:64:32:17:7a:f0:0e:21:71:fc:a7:
                    08:d1:b7:18:9d:8f:a5:83:ab:81:85:52:03:39:0c:
                    21:2d:60:a3:cf:c3:8a:c5:b8:0b:6c:5e:94:82:4d:
                    97:49:17:73:45:98:14:0f:92:34:2f:c0:1a:75:4c:
                    d6:b9:fd:cf:31:46:b6:f5:dd:48:4a:e1:16:d5:fa:
                    0a:fa:cf:4a:2f:c6:38:6e:25:47:e2:51:0f:05:5c:
                    12:a3:f2:18:61:d4:dc:5b:6c:45:f5:02:9c:ed:e2:
                    21:61:ce:44:1f:36:d7:30:b6:e7:83:5c:02:38:f3:
                    b5:8d:50:2a:00:d0:ee:74:b2:f6:a0:c9:ef:5a:b8:
                    df:35:c0:64:c9:6a:49:d2:e3:48:29:32:07:20:61:
                    04:c1:4e:ea:ea:7f:48:d5:b0:1c:94:54:f3:69:e1:
                    02:7f:75:86:fe:a9:94:4b:0f:e3:ea:5c:24:b0:0e:
                    ec:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B3:C7:D9:E2:99:03:12:E8:A6:9E:B1:CE:12:A6:2C:93:FC:A5:85
            X509v3 Authority Key Identifier:
                keyid:F8:72:27:C6:65:3D:69:BA:EE:2E:99:48:84:2C:EB:0B:40:49:E7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HInxmU9abruLplIhCzrC0BJ54Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D23A/8E3C121E48D511EA83351771C4F9AE02/-HInxmU9abruLplIhCzrC0BJ54Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:2f:f4:e4:4e:1b:fd:ee:13:df:c3:96:97:d7:7a:20:b9:
         da:45:69:c0:5b:7e:6c:46:1b:93:77:c1:d4:24:48:bc:80:db:
         3e:bb:5e:a7:6d:d7:de:97:d4:5e:12:bb:a3:d9:59:b9:72:bd:
         e1:08:9d:98:96:cd:55:76:2a:15:1d:fb:31:d3:ed:f7:1a:91:
         99:0b:5b:7a:db:6b:29:62:78:93:5b:48:49:10:bd:54:d6:be:
         c2:0a:c1:df:05:6e:db:21:90:78:81:a1:1b:0d:2f:3a:01:6a:
         82:d4:88:f8:4b:dd:e4:26:46:b8:e0:36:d8:31:11:1b:16:93:
         47:06:6e:d8:25:c0:ad:ef:23:61:c5:97:e3:8c:4a:91:43:21:
         48:ce:58:c8:4e:d6:dc:5c:83:0a:55:77:36:9e:95:5d:f7:9b:
         90:12:88:a6:89:d9:2a:70:9e:bc:b0:a1:5d:81:5a:5a:de:9d:
         75:1c:fb:c4:37:a8:de:57:12:d3:0a:24:48:32:4c:08:45:1c:
         9f:20:1d:08:31:c5:b3:80:db:24:7f:0c:28:81:f2:8e:d1:32:
         1f:01:c6:54:b2:bb:4b:cd:ac:f8:63:90:9f:c7:6b:0d:0f:df:
         1f:53:25:a6:46:e4:fc:45:47:7d:ca:74:ae:78:1f:63:21:0d:
         b4:62:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:30 2026 by rpki-client