Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File:                     hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier:          RC2SodU8U0e7eEegNT5YTvYlzQt4h0YgQag/GbMxKys=
Subject key identifier:   E2:EA:72:66:42:8C:41:14:C9:18:87:97:69:3E:58:BC:82:24:34:9C
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer:       /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number:          F3
Signing time:             Wed 25 Mar 2026 05:33:37 +0000
Manifest this update:     Wed 25 Mar 2026 05:33:37 +0000
Manifest next update:     Wed 01 Apr 2026 05:33:37 +0000
Files and hashes:         1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: E5ROs2ujLDZEAUJWDVzMZkcZVVWmbp4VOQIa3+gUteI=)
                          2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: UTKE8OB36Bwcjc1JGfweQcZlItW6iUFLSvYsOlfMWTM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
        Validity
            Not Before: Mar 25 05:33:37 2026 GMT
            Not After : Apr  1 05:33:37 2026 GMT
        Subject: CN=69c373b1-51a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:59:55:b5:df:72:93:99:06:e6:82:a2:ae:18:
                    0c:28:93:73:93:c7:fa:a1:22:44:02:cd:30:a7:02:
                    03:15:3a:d7:60:14:5c:7a:8f:44:6d:37:10:db:74:
                    9d:76:55:ba:49:08:7b:b3:67:b9:58:c6:69:40:9f:
                    79:a7:e1:2b:bb:3a:45:26:5f:14:29:d9:ba:87:bd:
                    f5:03:cd:f0:8e:3c:d4:cd:1d:b9:16:25:61:86:23:
                    9d:3e:b5:cc:3d:3f:fd:b1:10:9c:7b:a4:3f:fc:cc:
                    91:e3:03:ba:a9:b1:78:63:65:bb:2a:92:81:79:cf:
                    4c:47:78:f4:c4:a8:9b:43:99:ab:5a:e4:b5:15:77:
                    b1:ad:8d:01:c3:f5:5d:b5:59:91:c8:1d:c4:5f:6b:
                    28:74:bd:cc:39:8c:a0:9b:f3:8c:a1:20:45:ad:c7:
                    f8:51:bc:d7:ab:42:d4:ac:b3:5f:32:7a:f5:20:a6:
                    81:4c:0c:fb:20:d3:67:45:5b:7d:a9:df:36:be:4d:
                    33:04:93:37:be:9e:c3:22:a3:1e:85:41:6e:4f:78:
                    e0:6a:fc:54:0c:2c:c1:b8:8e:67:ae:0c:d3:f6:1f:
                    4f:45:11:65:4f:71:01:55:ad:2b:02:bc:71:4e:4c:
                    e9:db:3a:bb:82:bd:dc:02:a0:d6:24:ec:3b:be:f2:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EA:72:66:42:8C:41:14:C9:18:87:97:69:3E:58:BC:82:24:34:9C
            X509v3 Authority Key Identifier:
                keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:16:16:84:fd:67:27:60:3b:6d:b2:21:13:e2:db:71:8e:
         ac:8b:41:7e:23:5f:a3:89:d4:91:4e:16:43:a8:e1:45:40:ed:
         06:95:7d:d6:62:42:96:3c:7f:bf:89:37:1b:b0:c6:cb:a5:61:
         b2:d3:a6:ac:9f:95:7c:e6:a2:9a:74:4d:ae:2d:90:b2:d4:7e:
         5a:f9:a0:af:5e:73:ed:03:3f:e0:cf:41:27:46:79:71:31:72:
         e6:d7:72:96:1a:e0:4e:a8:4e:c3:23:08:52:64:0c:ba:af:35:
         ff:2f:a5:53:5b:00:19:88:57:a9:46:73:71:1e:7e:dd:c7:5c:
         5b:fd:d9:d0:30:90:fb:41:15:8f:c6:79:d8:c7:2c:b6:6f:6c:
         ff:6d:27:e1:28:c2:84:82:53:58:aa:b7:56:5b:6b:98:6d:a2:
         48:28:03:af:6e:6e:f9:a3:63:53:91:06:39:cb:0e:2e:61:f7:
         3a:db:6c:68:b1:ac:11:ce:d1:17:52:72:ba:75:ea:b8:49:a0:
         1a:a5:26:e1:c3:f9:2c:0f:7c:b8:a1:30:67:4a:55:53:5d:be:
         e2:2c:ea:3a:29:33:5e:cb:4f:7b:2f:9d:48:e0:9f:f7:c3:e4:
         81:a9:be:65:f2:7a:28:15:d6:a0:ec:fd:db:a1:25:15:c2:30:
         a7:6e:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:22 2026 by rpki-client