Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          p+T3acPGS8yEE1F14w7D6CtQpBm7mXcBJo8H4D1OBkk=
Subject key identifier:   05:95:D4:58:F0:E8:34:0C:2B:B0:DF:CC:02:16:05:CE:00:2B:42:06
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       0773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          076C
Signing time:             Tue 24 Mar 2026 21:22:00 +0000
Manifest this update:     Tue 24 Mar 2026 21:22:00 +0000
Manifest next update:     Tue 31 Mar 2026 21:22:00 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: pIBidbgS27I8EPXcVtiab7vb6qX2gbU2+uSuXgu7lPs=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Mar 24 21:22:00 2026 GMT
            Not After : Mar 31 21:22:00 2026 GMT
        Subject: CN=69c30078-ad6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:11:3d:60:be:fd:a6:1a:60:34:98:20:10:
                    f6:c1:1f:04:0f:64:ee:57:d5:b7:ae:01:ec:d2:f0:
                    de:ae:42:f0:0d:89:c2:2d:86:5a:6c:f0:c8:d2:f0:
                    63:26:b7:e9:bd:bd:70:ac:43:8f:8c:70:d9:0c:51:
                    11:69:2b:3e:d9:20:db:ec:08:8e:4c:4b:80:7b:3e:
                    16:3f:61:bf:52:82:f8:ac:28:bb:b4:f4:f4:08:ef:
                    5b:8a:69:0d:df:32:d9:77:99:f3:8f:d5:08:a4:d3:
                    8a:5b:ed:5a:ed:d2:c5:0c:f3:96:9c:fa:4a:52:38:
                    e8:db:34:8e:46:01:23:e8:fd:d9:46:2f:89:df:d2:
                    bf:f2:6f:7f:e9:b2:ff:34:3e:6b:fd:b2:b7:8b:cd:
                    ec:dd:5d:64:e0:36:08:f3:aa:c2:d3:7f:3d:85:d8:
                    3b:27:f3:3e:74:0c:eb:f5:5c:80:7c:17:dd:49:0d:
                    a1:85:22:67:24:e8:50:fc:af:36:13:43:50:51:31:
                    70:c2:d1:fe:8d:2f:84:d9:62:09:2f:92:42:03:d7:
                    76:bb:96:18:6c:e8:42:42:99:71:99:aa:b2:9f:cb:
                    a4:c1:21:e3:7e:9c:ac:91:94:de:d5:62:da:88:b1:
                    fb:c1:f4:d1:61:ce:cd:fd:a2:dc:b0:68:a8:44:be:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:95:D4:58:F0:E8:34:0C:2B:B0:DF:CC:02:16:05:CE:00:2B:42:06
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d2:cd:c5:f6:99:63:fe:97:51:dc:9a:28:b8:9e:10:1e:86:
         61:bb:65:89:d7:fe:98:9a:c5:82:c8:cc:0a:f2:4a:21:e7:9a:
         b9:0c:46:4c:5e:af:7d:d1:a2:3c:2d:75:03:e3:e3:7b:7d:d7:
         a4:4c:99:91:cd:68:30:f4:65:f4:7e:cb:b5:44:24:77:58:22:
         37:74:77:6b:f4:9e:84:09:2e:7b:93:d3:42:7e:e3:43:17:99:
         08:ce:94:dd:56:9d:1f:fb:be:dc:d0:c2:e6:c8:aa:8c:75:eb:
         91:6a:0b:58:2d:b6:95:cc:fc:8f:d7:2f:c6:b8:b5:a8:82:f1:
         8e:b0:85:ad:1f:85:b4:74:ee:ea:22:62:fb:b7:b4:4b:8c:51:
         72:c2:c7:c8:4a:4d:48:e9:9f:ec:18:a9:ea:6f:19:80:fe:f2:
         b5:29:f0:97:92:dd:2b:a6:9f:1a:d1:61:59:39:12:31:ea:f0:
         d0:f0:a2:3d:e3:35:2e:15:7f:91:0d:bf:f5:1b:0e:50:7c:42:
         1b:55:29:8e:ae:57:e4:ba:33:aa:39:50:44:d1:60:f0:eb:3b:
         c6:74:d6:ce:8c:7c:c3:e2:99:a3:53:da:c2:84:f8:ea:6e:63:
         55:ef:2e:77:8b:02:ca:26:d8:f1:c2:33:f2:2e:83:fb:d4:26:
         d2:59:b4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:47:48 2026 by rpki-client