Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
File:                     H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json)
Hash identifier:          tlVOhtoOna+g/G5GF4EiB9tuECIoA7Ot6nZ4VuNUpDU=
Subject key identifier:   BD:A9:7C:83:36:05:A0:9A:C4:B0:4C:A7:7C:6C:86:5F:5B:B9:AE:F8
Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14
Certificate issuer:       /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
Certificate serial:       0276
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
Manifest number:          026F
Signing time:             Wed 25 Mar 2026 01:28:38 +0000
Manifest this update:     Wed 25 Mar 2026 01:28:37 +0000
Manifest next update:     Wed 01 Apr 2026 01:28:37 +0000
Files and hashes:         1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: HFIFT1U1SSJ27m5FAwC6EugAtNng0PBMwd0N8q7BhKk=)
                          2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: dEReDEDJySfii8pKlYcee3L1HbPziwJ3gRBbj65y4hk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14
        Validity
            Not Before: Mar 25 01:28:37 2026 GMT
            Not After : Apr  1 01:28:37 2026 GMT
        Subject: CN=69c33a46-a85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:be:7c:9b:23:fc:67:88:35:34:38:4e:52:
                    89:5f:12:64:74:7d:6d:59:63:d9:83:2e:99:58:b1:
                    8a:ad:d7:f6:f6:1f:d4:e0:b0:8f:47:ae:8b:66:55:
                    8b:e4:b9:08:79:c2:0b:05:39:43:3a:07:b2:6c:e6:
                    fb:a4:f5:85:e0:c3:6d:b3:b7:28:a7:fd:5c:dd:7d:
                    eb:73:d6:be:dd:af:18:82:07:98:ed:72:70:9f:b1:
                    a3:3f:7b:e3:fe:f5:3e:ad:c9:8d:6e:0a:80:67:19:
                    ec:81:5b:5d:e8:84:de:57:b9:68:78:1a:42:2c:b0:
                    59:17:16:fc:b5:8d:28:a5:26:49:ab:17:8f:32:53:
                    6d:ee:04:14:d5:70:3d:ed:c8:2c:16:22:72:88:e9:
                    6f:93:7d:9d:fa:30:32:da:63:81:1a:08:1f:de:fd:
                    6c:6d:95:75:7f:46:39:61:36:80:8d:ee:48:00:e4:
                    b5:df:5c:0b:a8:cb:55:34:f3:37:b6:ac:d8:fb:e1:
                    c4:df:bf:3a:0a:ef:e0:95:cd:df:be:82:b0:62:d0:
                    af:ec:7d:60:79:25:1c:7c:56:b5:18:2d:ec:26:f8:
                    66:58:c6:30:8d:3a:2a:c5:eb:2f:be:d3:ca:12:f9:
                    47:86:ab:6a:68:66:73:d3:6d:a2:38:f4:ec:fd:e1:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:7C:83:36:05:A0:9A:C4:B0:4C:A7:7C:6C:86:5F:5B:B9:AE:F8
            X509v3 Authority Key Identifier:
                keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:dc:a6:15:9d:ff:4c:3c:41:d5:b6:7a:d4:0e:7f:3e:da:32:
         a7:75:15:17:d4:1c:c7:bb:05:a4:a9:c5:11:07:8d:59:2b:cb:
         36:8e:2d:9c:f3:18:7a:32:91:e5:55:96:96:f9:d2:2f:cc:43:
         46:44:36:2a:43:b5:35:41:5c:03:b6:3d:5f:fd:a2:72:6f:19:
         86:7d:f7:3f:df:09:71:15:dd:44:b5:73:ad:e6:10:7b:27:c6:
         16:5c:2d:ee:56:99:86:3c:1d:78:2d:56:e7:63:fb:a0:02:d0:
         fa:92:94:1f:83:43:ed:4f:db:e4:d4:03:b8:a1:9c:ff:7b:07:
         1f:34:ed:5b:8d:6f:b5:8f:8a:01:6b:70:3f:95:76:b0:d9:ff:
         80:29:5c:08:05:d1:e6:84:c8:75:22:8b:42:52:db:63:a5:39:
         d0:44:9a:fe:e6:cc:4b:23:5c:a6:e6:1b:54:6d:b6:09:65:40:
         98:7c:0e:51:e9:12:44:e2:be:f9:24:32:0b:24:c2:f7:ae:dd:
         b7:9f:d4:7d:ff:f7:07:c1:31:5a:25:f0:5f:32:a1:ac:ab:ee:
         f9:70:32:38:29:ae:18:da:50:a2:d1:de:b9:89:c3:e5:d7:6f:
         08:01:d8:3e:24:50:4f:56:0f:74:26:0c:a2:f4:77:93:a8:b1:
         b5:39:92:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:28 2026 by rpki-client