Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
File:                     hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json)
Hash identifier:          lMHUYtExEZ8gVKGmdtzVgtVxcAi3BhrVFczg8cHyWQo=
Subject key identifier:   7A:3C:E8:15:DD:93:B7:32:3C:5F:E4:1E:87:F8:1F:88:13:F1:50:60
Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64
Certificate issuer:       /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364
Certificate serial:       1875
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
Manifest number:          1875
Signing time:             Thu 26 Mar 2026 16:27:51 +0000
Manifest this update:     Thu 26 Mar 2026 16:27:51 +0000
Manifest next update:     Thu 02 Apr 2026 16:27:51 +0000
Files and hashes:         1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: Uy/NynxRDO//qkZpHN30V7ABlYxO2hjd+aSdz+uZjps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl
                          rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6261 (0x1875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364
        Validity
            Not Before: Mar 26 16:27:51 2026 GMT
            Not After : Apr  2 16:27:51 2026 GMT
        Subject: CN=69c55e87-ec6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7c:b6:64:fb:ca:97:5a:53:1e:c5:b5:77:36:
                    0a:30:e3:d4:43:fe:f5:4c:a7:55:ed:63:1c:c9:c8:
                    fd:52:50:33:66:30:f9:fa:66:3e:7e:70:7e:db:8c:
                    53:cc:44:8f:71:5a:cf:23:60:d9:b1:4c:37:20:c7:
                    9a:42:46:de:95:46:13:f1:37:75:cf:ae:3d:4f:38:
                    9b:eb:33:c4:55:af:44:f3:af:96:96:95:28:cd:81:
                    11:02:e9:63:02:1c:f8:b7:b0:e4:b9:5d:ec:e5:cf:
                    74:65:c5:5b:35:6d:78:a7:ef:c2:45:8f:57:da:bc:
                    af:76:56:a7:6a:01:5e:62:f0:d3:8b:5a:50:8f:08:
                    94:2c:dd:4e:d2:65:93:a3:6d:14:29:d3:8e:81:54:
                    c3:90:72:ff:32:90:f9:e5:e0:89:fd:f6:b4:ee:c7:
                    93:49:a5:4a:e4:af:2e:e1:ec:bb:c3:b7:4a:bf:7a:
                    5f:61:d4:c8:8b:2c:4e:41:d6:0c:e6:e2:56:db:16:
                    09:a1:68:f9:fd:ef:23:5f:b3:eb:92:69:4c:fc:7d:
                    13:5c:53:b4:89:2d:b1:b3:26:fb:34:ea:b9:f6:a3:
                    a8:ff:d5:45:3a:82:0e:19:31:12:c5:21:89:0c:76:
                    b3:21:08:e2:87:8b:33:06:fd:10:6a:2f:52:43:c9:
                    e7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:E8:15:DD:93:B7:32:3C:5F:E4:1E:87:F8:1F:88:13:F1:50:60
            X509v3 Authority Key Identifier:
                keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:58:3a:d9:5d:25:a4:14:a5:50:b4:80:ca:87:68:20:7a:59:
         68:a4:2b:c9:14:f0:c2:4c:b7:b8:fd:f4:57:b7:e0:f5:78:6f:
         18:7b:2b:c6:89:8b:5f:c0:73:7e:1e:26:0d:6f:9d:30:dd:fd:
         5e:5f:c9:13:7f:4a:86:2f:65:05:db:e1:e4:8c:dd:3e:6a:79:
         65:ed:de:db:c6:3d:be:c2:19:80:cd:18:8a:f1:d3:57:35:9f:
         df:72:08:69:06:be:82:08:e6:56:a4:00:0b:c9:69:16:45:b4:
         dd:3e:af:03:ad:7a:e9:2b:35:34:c7:26:00:73:1d:c6:86:43:
         b9:2b:6b:5c:0d:2c:8f:28:af:fe:45:34:66:b1:17:53:a9:c7:
         7b:7c:c0:e7:d0:2c:62:56:f3:70:0d:30:b4:47:cd:51:0e:ad:
         66:71:9c:77:91:0e:a3:2b:fc:1a:4a:ef:44:de:ee:6e:a4:f4:
         74:1a:78:29:de:23:b9:cb:39:0d:4a:c0:b4:52:64:e5:d3:b3:
         ed:f5:c2:8c:58:75:0a:08:df:02:ee:90:50:40:aa:49:22:63:
         47:c1:27:25:d9:c0:f0:c6:2b:bd:89:71:b5:ad:34:36:5d:04:
         0e:0b:85:61:68:6a:ac:93:5e:fd:b7:6d:54:90:2b:fa:1b:a7:
         3c:8b:66:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:46:19 2026 by rpki-client