Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
File:                     vHENBWM8XhGwdEtxrruIriskRuM.mft (raw, json)
Hash identifier:          QdaqLvhi84auUehMa2XVb5wJMdyjElmeHYjgUpus+bk=
Subject key identifier:   80:34:9C:C9:86:66:8C:87:77:2A:78:4E:1E:69:30:29:81:49:F9:0D
Authority key identifier: BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3
Certificate issuer:       /CN=A91AF406/serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
Certificate serial:       13FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
Manifest number:          13F1
Signing time:             Tue 12 May 2026 16:56:30 +0000
Manifest this update:     Tue 12 May 2026 16:56:30 +0000
Manifest next update:     Tue 19 May 2026 16:56:30 +0000
Files and hashes:         1: vHENBWM8XhGwdEtxrruIriskRuM.crl (hash: 0An31O2o/xfksatSJJ/P0JMcTZQm4q6+GN9HpBP0qWc=)
                          2: C2065F2CA5F311E8B54BF03DC4F9AE02.roa (hash: +8AddGBFIIMgwGJltYVSUMtKxs5lAyAGDBkgXORqOLk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl
                          rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5115 (0x13fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF406, serialNumber=BC710D05633C5E11B0744B71AEBB88AE2B2446E3
        Validity
            Not Before: May 12 16:56:30 2026 GMT
            Not After : May 19 16:56:30 2026 GMT
        Subject: CN=6a035bbe-294a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:43:09:1f:d9:f0:6c:92:8b:5b:02:d0:0c:
                    d0:04:33:67:da:53:21:75:34:03:ff:d6:25:24:8e:
                    44:ef:14:27:3b:a3:0e:6b:37:8b:72:49:42:1d:fd:
                    f4:94:4b:58:02:6d:e9:21:5a:79:80:b4:45:19:24:
                    8e:c0:cc:63:0f:9a:58:f5:3e:a8:e5:ef:c1:2e:09:
                    78:a8:5d:70:36:ce:77:0f:d0:97:b7:61:8f:01:6a:
                    39:f2:44:08:1b:d5:4c:f9:80:cc:11:6b:02:1c:08:
                    0d:36:a1:3d:2b:41:2d:2e:75:1f:07:16:8a:e7:6f:
                    d2:88:14:6f:76:fd:58:d3:63:54:b1:7a:b4:6a:4f:
                    4d:31:50:d6:e6:fd:17:ef:46:68:bc:44:41:90:8b:
                    92:8d:ab:68:d8:fd:98:65:53:15:9f:34:48:f4:08:
                    89:79:a1:1f:c6:9d:f9:61:f5:da:fe:14:02:a1:e1:
                    1c:99:c9:2f:1e:ec:39:32:e9:8a:02:ad:9a:05:2f:
                    db:d3:0f:07:04:d5:85:8d:3e:93:e4:39:34:2f:a9:
                    0a:c7:6f:77:b0:7a:4e:28:5c:ab:76:c3:f3:83:e1:
                    75:37:96:0b:c0:f9:83:83:0c:45:fb:85:a4:d9:43:
                    cb:f4:99:9e:db:86:9e:1c:e4:a8:b1:64:db:bd:cb:
                    4d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:9C:C9:86:66:8C:87:77:2A:78:4E:1E:69:30:29:81:49:F9:0D
            X509v3 Authority Key Identifier:
                keyid:BC:71:0D:05:63:3C:5E:11:B0:74:4B:71:AE:BB:88:AE:2B:24:46:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHENBWM8XhGwdEtxrruIriskRuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF406/3F670C0CA5F211E897A7503AC4F9AE02/vHENBWM8XhGwdEtxrruIriskRuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:56:87:7f:28:f5:6b:46:40:e2:da:b3:af:80:15:e0:ed:cf:
         5f:04:a1:90:ae:24:d6:ed:74:0c:41:84:19:11:ec:aa:3a:12:
         cb:6b:0b:91:f8:e0:b9:db:9a:f6:39:ac:ba:40:96:54:1a:60:
         4e:a0:09:50:93:9c:a8:49:7e:1e:6d:e0:c3:ed:15:a4:97:bc:
         72:5d:87:23:50:5b:c8:16:bf:fc:f6:e3:e7:d7:65:7d:83:86:
         15:65:52:a1:09:6c:54:b0:e0:3b:bc:04:d9:77:b8:fc:b4:46:
         3c:03:48:54:b8:9c:66:1b:fd:98:5b:39:72:c0:47:2b:4a:38:
         3f:0a:15:76:a1:64:08:c4:a0:ab:44:19:1e:db:b2:90:1d:e0:
         2d:fe:fb:41:17:cc:af:af:c6:03:03:08:36:fa:0b:a0:30:63:
         d7:33:ea:5f:50:83:a0:da:22:73:33:25:50:b4:2f:d5:b6:3e:
         49:fc:34:e1:8d:f2:a5:15:74:39:93:b4:c5:56:2e:c8:1f:48:
         d8:6c:af:12:c1:35:b3:54:6b:84:75:49:7a:11:d8:97:b8:a7:
         54:e0:fa:0c:bf:63:27:34:27:dc:05:68:0c:8d:9d:37:88:fa:
         26:3c:3e:ad:8a:47:8e:71:01:8e:48:9a:1b:5b:ca:e4:f8:69:
         77:e6:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:06 2026 by rpki-client