Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          /nEkSEgm6YuwOaLFkMjGdVC/ZcwBaITCHGmnLIc6gIY=
Subject key identifier:   27:66:9A:04:C4:46:AD:C5:95:62:DE:C6:23:DE:F7:0B:8B:B5:5C:78
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0238
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          0231
Signing time:             Wed 13 May 2026 02:43:11 +0000
Manifest this update:     Wed 13 May 2026 02:43:11 +0000
Manifest next update:     Wed 20 May 2026 02:43:11 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: fssAY8OTiAUVVpfbpYNZ2/X8ZHX9TaC51IaHX9hKGvI=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 568 (0x238)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: May 13 02:43:11 2026 GMT
            Not After : May 20 02:43:11 2026 GMT
        Subject: CN=6a03e53f-093a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:e1:92:2b:53:73:08:17:c5:6c:a8:bd:3b:
                    d6:f8:f0:2b:e5:93:b3:46:88:92:85:c4:55:7e:1b:
                    84:3d:08:a6:27:5f:9c:2a:1e:62:96:d8:c6:32:27:
                    01:46:ea:16:d0:80:bb:c2:b2:bd:83:c2:05:e0:77:
                    74:02:cc:4b:d2:79:1e:28:18:53:56:8f:20:23:16:
                    e6:2c:c3:d6:82:19:1c:c1:f1:4a:c2:9b:8b:b6:79:
                    2d:fa:ac:c0:5a:b7:bb:15:35:4c:05:ac:aa:47:df:
                    2c:ed:5b:e2:ec:a7:07:4d:7a:59:39:ac:2a:fb:c0:
                    ea:f3:8a:7c:1d:d2:f4:b1:03:09:c8:f6:d7:65:7d:
                    ba:36:c8:8a:07:b3:af:9d:2c:3f:5b:9d:c7:90:a2:
                    46:00:49:db:a0:44:24:1b:f0:21:48:52:2d:9d:96:
                    16:7e:6f:99:7d:68:e9:09:fd:04:57:92:b5:60:e4:
                    9a:82:e6:6c:03:00:ac:25:d2:72:45:2a:a7:8b:e5:
                    0f:f6:76:02:f7:71:1e:29:7a:6e:c5:21:d7:bb:6c:
                    30:e3:87:76:9b:58:38:23:2f:2a:7a:6f:6b:c9:d5:
                    28:f8:78:9d:bd:5a:bb:8a:49:70:a4:cb:d0:48:db:
                    d4:51:20:39:cd:0b:61:d7:71:13:ef:fa:91:26:d4:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:9A:04:C4:46:AD:C5:95:62:DE:C6:23:DE:F7:0B:8B:B5:5C:78
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:c2:89:f4:24:41:f3:c0:a3:bb:76:7e:1f:b4:f8:9d:dc:
         14:74:d0:e8:c9:fa:15:fa:f4:a4:f1:38:0c:48:aa:ea:c1:01:
         1b:9f:5c:66:1f:06:fd:69:f3:33:0d:25:5a:3d:ea:34:d6:7f:
         bc:62:7f:e4:09:44:3b:13:29:c9:85:27:6b:73:16:74:6e:ea:
         3e:ec:b4:61:84:5a:f3:f8:9e:a3:17:11:04:39:12:6c:6a:a5:
         dc:c0:51:cd:e8:5d:51:a0:82:ae:ce:e6:8a:e9:31:dd:53:4c:
         85:7b:57:e8:e5:55:46:ba:d9:e8:7c:07:40:35:a4:5f:fb:17:
         b6:1a:6b:5f:de:89:53:4c:0a:d5:4c:85:fc:01:af:0a:26:b9:
         8a:b8:37:93:16:4c:c8:d2:a7:e1:82:db:d1:02:f9:a3:cd:44:
         fb:32:6f:74:a1:c2:5b:3b:99:c1:2f:78:02:ad:ed:d3:26:57:
         ba:92:52:0e:e6:cb:fc:5e:83:51:5a:3e:67:79:0f:d7:4e:ea:
         c0:b2:f5:e6:2f:19:7d:83:ec:31:fa:8f:e6:df:56:f3:e8:2f:
         a8:2d:1d:0d:0c:b3:a2:f2:dc:82:b3:27:e2:e1:40:94:f3:26:
         a2:a7:b6:9c:35:ff:67:29:67:e5:3d:cf:a2:c2:fa:35:55:3b:
         c1:8f:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:41:45 2026 by rpki-client