Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File:                     hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier:          tXPvlXkm2HUDb1GZdbghCFGNk+7YRF+mXtSvWaBi+qA=
Subject key identifier:   E9:A6:CC:07:5D:BF:97:4B:00:9F:07:F4:B1:77:B9:BF:03:58:60:7F
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number:          84
Signing time:             Mon 11 May 2026 07:46:08 +0000
Manifest this update:     Mon 11 May 2026 07:46:08 +0000
Manifest next update:     Mon 18 May 2026 07:46:08 +0000
Files and hashes:         1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: VTSyMgktUb6+EdK1FhjZn5ImsOe7Wo691BD6oXqPhT0=)
                          2: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: F/yniYuZFpGynCu35Clniv/S+sipN7kzwj3zVvT9o2o=)
                          3: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: May 11 07:46:08 2026 GMT
            Not After : May 18 07:46:08 2026 GMT
        Subject: CN=6a018940-bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:d2:b6:3a:aa:2a:25:04:52:66:c2:f6:ac:
                    7d:86:ca:84:ff:53:01:da:4c:9b:f6:40:3b:55:e8:
                    9c:45:ce:98:fb:f2:e5:95:93:5e:fb:27:f9:04:72:
                    94:f8:31:e8:fc:75:fc:c6:76:05:55:9b:4f:55:86:
                    8b:33:7c:31:8e:68:cd:90:d8:37:c8:21:31:e5:ff:
                    e7:cd:f6:ba:76:36:73:fb:27:9e:3f:0e:68:f4:3e:
                    c7:77:a0:f8:ff:23:a8:2c:ad:fa:15:12:9b:32:3d:
                    50:78:6e:27:c2:d5:ec:17:0c:90:22:bc:2c:15:db:
                    99:53:05:96:00:5a:c4:61:3f:b9:f6:61:09:11:4f:
                    3f:28:c7:a7:20:fb:3c:73:65:34:86:3a:19:1e:2d:
                    63:24:8c:f1:0d:01:dd:47:51:70:59:c0:78:28:49:
                    b4:71:38:17:8d:55:04:e4:e1:56:a8:cd:fb:c9:59:
                    ac:bd:f4:fb:e7:d7:b4:75:23:6a:7c:b1:b2:2e:00:
                    b6:d9:03:04:8e:d6:58:35:59:c7:6c:d2:02:d6:9d:
                    a6:eb:ad:e1:1a:07:80:f9:8a:18:8e:cb:ae:7a:b3:
                    3f:af:f1:ff:c8:2a:8e:37:8f:e9:02:39:24:a0:4f:
                    f0:ef:6e:4d:89:e0:41:89:f4:de:e6:8d:b6:c9:ba:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:CC:07:5D:BF:97:4B:00:9F:07:F4:B1:77:B9:BF:03:58:60:7F
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:88:ef:a1:96:02:33:5f:02:a8:7c:81:ab:f2:dd:c3:c1:8c:
         ca:68:66:7f:fc:56:8c:08:91:1f:dc:38:92:37:94:79:cc:fb:
         d9:0d:69:b9:3d:55:ee:b9:b8:65:e2:ec:51:85:d7:ce:d6:d6:
         ff:13:9c:ff:81:b8:fd:ff:17:cb:e8:20:d0:1f:2f:4d:08:39:
         a3:22:9b:bf:b0:eb:51:76:14:57:eb:93:80:2e:e0:41:8d:2c:
         c2:79:24:90:f8:50:3d:1d:5b:20:78:18:30:f7:05:2f:6b:21:
         20:14:f8:9e:9d:b8:9a:1d:eb:94:de:37:ca:f3:2f:3a:08:e9:
         f0:01:1c:08:46:db:5b:92:88:3d:3e:6b:0c:12:14:bd:bb:75:
         66:87:c7:e8:c7:b3:7e:1b:66:e8:87:c4:86:d4:0f:4b:06:2f:
         05:cf:05:dc:74:02:ad:50:8e:28:45:e5:23:b2:26:79:83:94:
         77:00:5d:b7:a1:97:82:4e:82:5b:2c:b4:c2:0b:45:3f:dc:b5:
         6e:2b:d2:95:b2:38:35:1c:7c:14:3f:98:ba:81:f9:49:e6:69:
         c6:48:e2:f8:4b:b0:2f:ab:ff:ad:a2:91:99:40:1e:eb:ea:e6:
         1e:28:2e:52:8b:22:3a:59:a0:d5:c6:1e:35:fe:28:23:2a:d4:
         7e:98:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:38 2026 by rpki-client