Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          vG5megnSOrn2EXzIusfXsLX2hJelDFV99RNcp6Hhh2M=
Subject key identifier:   08:19:38:DA:7C:DE:2B:A9:0D:6B:C2:AF:62:30:C6:D2:DA:D1:3F:D6
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       0582
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          0579
Signing time:             Thu 24 Sep 2026 23:10:23 +0000
Manifest this update:     Thu 24 Sep 2026 23:10:22 +0000
Manifest next update:     Thu 01 Oct 2026 23:10:22 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: ooIDD0aVHRDBcCshnJMpYzqcA6bf24Wh5RNE775kpHU=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 23:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1410 (0x582)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Sep 24 23:10:22 2026 GMT
            Not After : Oct  1 23:10:22 2026 GMT
        Subject: CN=6ab5addf-4f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:ad:fa:49:a4:52:f9:1b:c1:b4:7c:d3:56:
                    a0:82:b5:fe:10:f1:9e:33:cc:2d:11:47:30:7d:68:
                    d6:de:1d:99:b1:f8:68:a5:84:38:43:c2:16:16:3d:
                    1e:66:7a:df:20:e2:28:08:88:64:ce:40:6f:be:b8:
                    c6:07:ad:c6:1a:1f:6b:92:c7:12:37:b1:97:a9:ec:
                    73:d5:cb:5e:96:2c:ac:78:12:cf:54:02:f1:14:eb:
                    ec:1e:f1:bc:46:60:df:eb:4d:09:7e:ea:46:a2:47:
                    c3:cf:14:17:fa:48:ee:41:eb:0d:8a:a0:19:3f:0f:
                    6f:b3:77:5b:60:85:64:dd:0b:36:e3:c4:96:ce:fd:
                    42:b0:31:f9:f1:01:f8:0c:42:41:d8:65:53:8b:08:
                    0e:35:22:c7:11:0d:47:be:96:59:fc:b6:a6:b8:0a:
                    e4:17:17:ec:a3:c3:41:84:fe:5b:15:79:7c:2c:70:
                    1d:88:b2:91:a6:1f:ac:86:5c:e3:c7:52:09:39:8c:
                    11:bb:c1:88:a8:6f:c6:58:38:21:47:5e:74:e8:3d:
                    ee:17:27:29:13:f5:48:f0:e7:cf:86:b8:e7:7a:1c:
                    2b:ee:9d:b4:14:40:cd:fa:94:d2:1b:49:96:b0:6c:
                    87:9b:06:76:4b:c0:c3:62:88:c0:4f:a4:76:0a:28:
                    dd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:38:DA:7C:DE:2B:A9:0D:6B:C2:AF:62:30:C6:D2:DA:D1:3F:D6
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cc:3e:12:04:e5:68:ff:83:78:13:76:a8:2b:c3:b7:d7:86:
         68:d6:ca:c2:c7:f6:0e:bc:41:fb:c6:cc:cd:a5:45:8f:66:0d:
         d4:e5:8c:2e:68:2c:63:34:cc:41:20:18:fd:c2:45:af:b5:f9:
         a0:53:f7:61:05:cc:01:e9:b1:31:00:28:b8:84:79:c0:4a:1b:
         58:e9:df:88:4b:ca:e0:54:ca:06:1c:b2:01:cb:61:1e:b4:f5:
         13:c5:be:16:28:1b:d3:dc:5f:fb:37:23:0a:88:a5:80:77:88:
         97:0a:43:37:55:b0:f7:3c:54:cd:43:32:df:86:44:4c:03:40:
         6a:9e:d8:1e:a5:a5:eb:7b:4a:cf:a5:af:9d:30:99:b2:d4:63:
         5b:b5:4e:27:17:9f:4c:ff:2f:cb:00:4f:b7:28:a0:c6:bc:fb:
         7d:ec:cd:28:85:59:07:3c:7d:f5:ea:cd:bf:93:39:5d:bf:4e:
         e2:7f:2e:1d:22:ce:6b:7f:1f:3d:a0:20:6e:88:23:4d:ee:4c:
         6a:8e:2a:18:1b:ce:f2:32:68:be:15:18:12:08:91:c7:c6:f4:
         15:c9:eb:b3:f7:46:44:02:b0:92:ef:23:a7:6b:36:7d:63:8a:
         23:86:83:5f:c8:96:67:39:9f:d3:c0:f3:9a:f1:15:1f:7a:e3:
         b6:4a:6e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:25:00 2026 by rpki-client