Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          Mn7kJU2LEaAvSd7aa5sjJAKNqP0jRJv83f9XTstk1ks=
Subject key identifier:   02:A5:9A:A5:59:F9:D8:22:64:80:D1:E9:D6:35:F8:4F:70:03:1B:9B
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       053D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          0534
Signing time:             Tue 12 May 2026 23:37:59 +0000
Manifest this update:     Tue 12 May 2026 23:37:59 +0000
Manifest next update:     Tue 19 May 2026 23:37:59 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: Imluo3ubu+K3/dpPpbxyAAeNrRQ43aYRiF1tPFRZOC0=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: May 12 23:37:59 2026 GMT
            Not After : May 19 23:37:59 2026 GMT
        Subject: CN=6a03b9d7-98b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bd:47:3f:59:e0:f6:97:4d:ea:5f:5d:29:3e:
                    79:80:1d:d7:c5:02:23:95:8c:60:21:d7:e7:9f:f5:
                    a9:0d:83:34:3b:e4:dc:d2:5f:60:0c:26:30:eb:df:
                    63:e0:a7:7f:a4:39:f1:b5:64:68:33:eb:d4:9c:c9:
                    4d:77:da:77:9a:90:36:26:f8:5d:03:82:be:3b:67:
                    4c:25:8f:9d:84:9c:97:1f:bc:99:6b:8d:3f:05:52:
                    e0:c7:7b:a7:16:68:41:38:52:ab:81:ea:db:26:4b:
                    f0:89:cc:e2:20:33:4c:8c:ed:bc:6c:74:58:74:f4:
                    86:c0:13:1f:b1:59:b3:b2:34:6e:bd:b3:ce:ac:0d:
                    19:d0:97:11:ee:e9:b3:89:a3:c7:ff:57:36:d6:22:
                    a2:9d:26:18:56:1c:f5:d6:14:2a:85:94:32:c4:f4:
                    41:08:9c:b9:4f:d2:e0:28:32:8f:41:ab:a6:74:68:
                    86:d7:b1:8d:b8:b5:03:a6:6d:99:ea:08:33:03:3b:
                    81:37:bc:e2:83:fd:1e:a7:22:73:d8:bf:b1:f1:ee:
                    0e:09:b8:6b:33:15:43:9b:b8:fb:ea:a2:bc:b3:1f:
                    c3:73:9b:b4:3f:9f:ab:8d:03:e3:7a:72:61:4e:f2:
                    5d:1d:cd:d1:7f:36:b9:87:26:ee:90:c8:c6:45:ef:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A5:9A:A5:59:F9:D8:22:64:80:D1:E9:D6:35:F8:4F:70:03:1B:9B
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f1:ff:af:c5:64:de:04:2f:7b:7d:34:71:76:23:21:f7:49:
         20:ee:15:d7:41:01:6c:4d:3c:be:a0:95:d6:32:ca:9b:32:31:
         e5:b7:55:03:43:b9:3e:1e:7a:f8:10:6d:34:88:a8:94:74:0e:
         e7:1f:54:f3:a5:75:da:35:81:b4:61:81:fe:ef:91:68:cd:d5:
         84:97:27:a7:12:ea:85:f5:18:81:41:1b:ef:6f:0d:84:ea:5d:
         77:be:42:0c:73:cb:80:a2:4e:87:4c:e5:05:b9:fd:28:fc:e3:
         d5:b5:fa:5a:bf:0c:13:0d:a9:12:8b:82:f0:a6:60:07:c8:3b:
         8a:c0:ae:2d:88:7f:5d:48:b9:eb:b4:a2:7a:0b:e4:db:cb:ac:
         76:ec:4d:aa:c8:a3:b3:45:6d:92:21:05:46:0f:f4:d3:d6:29:
         0a:48:f2:be:94:d2:68:07:0d:0f:6d:ee:d0:05:6f:62:1c:8d:
         b6:81:b2:46:78:27:3a:5c:12:0f:09:de:91:28:2c:e2:fd:5d:
         75:ed:d9:83:9e:c6:75:77:c8:00:98:b4:33:86:d3:7a:4a:93:
         0e:3f:35:f3:ac:cf:45:7c:c7:43:2e:10:ef:b0:f2:ab:c7:d2:
         7e:df:a2:7e:9e:bd:40:9f:5d:cf:98:c6:50:91:8e:d7:1c:ec:
         a1:b8:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:16 2026 by rpki-client