Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          2AIsH1Bs9ciElycY7BJIhG6WWeBdNzZRpXb8xZDP5oU=
Subject key identifier:   74:1E:D4:A9:60:01:F3:F6:57:9A:E3:F0:B0:3D:60:A2:9D:3E:74:65
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       0524
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          051B
Signing time:             Tue 24 Mar 2026 23:17:19 +0000
Manifest this update:     Tue 24 Mar 2026 23:17:19 +0000
Manifest next update:     Tue 31 Mar 2026 23:17:19 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: x5BA+5fliJAJt2zYC+6sNg9t3Mj1PglLqbXiObnNWWU=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Mar 24 23:17:19 2026 GMT
            Not After : Mar 31 23:17:19 2026 GMT
        Subject: CN=69c31b7f-09f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:05:bc:31:17:05:b1:d9:9b:6f:17:4a:8b:3e:
                    53:1e:6c:a6:c3:e2:4a:bf:61:d3:8b:9a:c4:bf:11:
                    5d:e8:e2:b3:a8:81:31:9b:dd:de:0a:d2:6a:13:d2:
                    bf:2b:a8:4b:99:5a:ec:0a:fb:09:52:60:09:a2:99:
                    e8:91:8c:5f:6d:61:cb:97:bf:c5:38:9c:6e:d3:f2:
                    7e:81:79:d6:57:bc:e3:4c:4d:26:7b:ec:c8:45:43:
                    41:26:39:91:c7:36:22:85:5f:ae:29:f2:78:47:58:
                    38:60:a9:e5:bf:21:54:a7:64:a5:df:58:e5:10:53:
                    69:35:92:ef:e8:d7:d1:d0:64:07:87:fe:af:92:2c:
                    3c:15:73:79:12:e2:c8:87:c9:13:4a:ff:b1:09:22:
                    26:60:41:9f:5d:fe:f1:cd:21:38:4c:f7:c3:be:d4:
                    38:95:55:84:33:4a:2e:9d:49:04:bc:9d:c8:49:f2:
                    55:50:44:77:ac:ce:be:6b:17:df:30:22:0b:db:d9:
                    3a:e7:b4:fb:d0:0e:d1:22:f1:c0:ad:ed:2a:7d:0c:
                    a1:05:57:21:63:57:d4:84:64:0c:fa:0f:02:4e:25:
                    98:45:8e:68:b8:7c:77:6b:34:5d:0e:8c:68:cc:d1:
                    9b:7e:3e:49:99:21:ec:2f:40:ae:a0:f2:7a:6b:6b:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:D4:A9:60:01:F3:F6:57:9A:E3:F0:B0:3D:60:A2:9D:3E:74:65
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:92:df:02:84:d3:d2:53:00:56:41:f1:d6:0d:68:56:a1:b6:
         cd:32:bc:25:2b:3c:4a:07:30:4a:3a:05:66:bf:21:3c:a0:77:
         bf:77:35:b2:f5:23:af:73:e9:71:32:4b:b7:e6:ae:98:73:c6:
         74:2e:6b:81:39:02:fe:9a:37:da:b3:50:62:6a:79:6b:e4:84:
         79:72:38:08:08:d4:b3:fa:43:6d:8b:17:26:43:ff:39:eb:a9:
         f5:1c:da:3f:cf:ca:83:75:a3:33:c1:e2:36:0b:6b:6a:9e:fc:
         ba:aa:a0:93:38:cd:3d:87:36:a8:4a:97:7b:2c:10:e4:93:cb:
         3b:ef:b2:4e:33:41:a2:9d:61:7a:a8:41:f5:fe:81:57:55:b0:
         29:27:be:9e:6e:63:18:e9:54:ab:5f:90:87:50:fe:95:3f:1f:
         3d:f3:7a:04:3d:e2:4f:df:c2:f4:42:d6:b5:d8:75:ba:a5:ed:
         8f:bf:39:d0:82:01:5a:23:67:af:24:02:d7:0a:2b:2e:cd:9a:
         37:8e:9b:9e:63:8f:24:e5:99:4a:e6:a4:9f:f4:f2:0a:36:90:
         d6:5d:f9:42:e8:da:90:ce:7f:0a:b0:0d:48:fd:96:d2:71:4e:
         76:d4:e9:73:81:d7:28:93:2a:9e:cd:92:44:58:86:b9:39:8e:
         a0:2a:86:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:18:28 2026 by rpki-client