Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
File:                     xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json)
Hash identifier:          mPUs1bYPqALkkLxDL7+sk6QUL9tZgJvmegpNv2WHF2M=
Subject key identifier:   0D:7F:30:8F:2D:83:61:8F:BE:84:91:4B:40:BB:F9:AC:B4:37:BD:A1
Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C
Certificate issuer:       /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
Manifest number:          0277
Signing time:             Wed 13 May 2026 02:01:59 +0000
Manifest this update:     Wed 13 May 2026 02:01:59 +0000
Manifest next update:     Wed 20 May 2026 02:01:59 +0000
Files and hashes:         1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: rNHf9lQ1vOFwUtZgtJA2Zx+FqFp5UJWkSsJyKDnHVTA=)
                          2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: caBGpQ3sxKtg4mxskMeTrM5eCKMi3Wf+XfGL8QuMB48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl
                          rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C
        Validity
            Not Before: May 13 02:01:59 2026 GMT
            Not After : May 20 02:01:59 2026 GMT
        Subject: CN=6a03db97-6e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:df:0c:1f:0a:e5:d5:fc:80:6a:f2:b0:c4:
                    15:f1:55:b1:9e:63:94:05:1a:6c:a7:9c:8c:0e:ca:
                    bf:e8:9b:df:34:67:09:64:69:d7:d6:23:05:9a:b2:
                    db:5c:e8:24:f6:6c:68:15:e1:f2:d4:7f:ac:bf:0b:
                    22:3d:3b:4b:6f:5c:2f:ea:bd:36:5a:a6:5d:81:91:
                    8f:13:dc:77:9c:94:c5:f5:83:73:ee:16:b0:73:57:
                    19:fb:93:fa:af:f0:99:cf:19:30:f7:5f:b5:a2:46:
                    ff:55:25:03:e9:57:22:01:ee:16:57:56:ed:1d:cf:
                    4d:89:75:69:3f:b6:66:13:c6:8b:cd:b9:2e:6d:4a:
                    cc:85:2d:1f:1e:e9:7d:d1:17:59:fa:aa:5c:90:30:
                    5b:a4:b0:6a:36:09:8e:a7:fe:0e:9c:e3:25:09:7d:
                    ad:7f:55:c4:16:0e:39:2a:f0:b9:6f:a6:10:05:e2:
                    1f:b5:d4:1f:29:16:a7:00:51:30:54:13:b8:0b:f3:
                    7f:eb:11:59:11:79:c4:93:88:c2:12:64:d6:ca:1f:
                    67:1e:1f:0e:c0:07:a2:4c:e4:b6:06:49:0a:b6:fb:
                    75:e3:13:d9:65:22:f1:8a:ca:11:3d:1a:7a:fa:ac:
                    1e:7e:61:eb:80:7f:cc:ad:80:b8:ab:16:15:62:5b:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7F:30:8F:2D:83:61:8F:BE:84:91:4B:40:BB:F9:AC:B4:37:BD:A1
            X509v3 Authority Key Identifier:
                keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a8:70:34:d0:c4:01:3d:b2:25:e1:bf:d6:cf:ec:ee:25:8a:
         6b:32:59:88:8d:49:a5:32:a7:10:a2:98:4f:04:b5:88:ec:9d:
         2d:03:d6:34:82:52:41:6a:83:02:64:7f:bc:ed:90:d6:4c:0a:
         b3:4c:49:67:d2:86:39:60:1f:5f:56:80:95:00:8f:dc:b6:b2:
         ad:27:91:1e:c4:c1:8e:15:c7:2e:a8:ea:4b:69:a5:b0:bb:ae:
         80:ae:cf:46:6b:51:63:a9:fa:a4:7d:4f:5c:56:49:b6:c8:7e:
         d9:49:56:cc:00:99:d3:80:17:f6:3a:9d:8b:fc:1b:08:01:24:
         4f:f8:05:5b:c6:8b:89:37:29:41:10:a4:e7:74:bc:8c:ce:b7:
         de:97:41:e5:68:cf:ba:ea:32:b7:b7:a9:0e:2c:91:25:d0:78:
         c4:c2:f5:14:eb:b9:ef:ee:e9:2b:0e:8a:f2:f5:c2:26:f8:a6:
         0f:30:c7:0b:f4:69:d3:a8:78:3e:4a:cf:15:f1:49:66:43:77:
         f5:96:75:2f:a0:1e:25:c3:e2:d7:14:c1:ab:82:4d:33:81:0f:
         c9:44:5a:fc:af:55:dd:b4:c9:a9:bb:5b:0f:71:de:a0:ed:52:
         34:fa:fc:c9:35:c1:0a:92:17:ea:f4:1b:9b:68:fb:93:a6:31:
         0c:c4:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:23 2026 by rpki-client