Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File:                     Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier:          GOFso6Qog7EbXNR7ejn+D2PdqhTMCW1KRDqvlOuKWOw=
Subject key identifier:   5D:97:24:19:79:EF:D8:4B:BC:70:D7:85:52:8A:D0:F2:CD:22:9D:E8
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number:          0546
Signing time:             Tue 24 Mar 2026 23:08:36 +0000
Manifest this update:     Tue 24 Mar 2026 23:08:36 +0000
Manifest next update:     Tue 31 Mar 2026 23:08:36 +0000
Files and hashes:         1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: deyPPhqeS44N89ZAEtzlANpEr+XPMZdy0Alsyt+pL04=)
                          2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: NWJk9U1zJ6g6SQr9JT1EUFlzv/4D0aiZyw7C2alM700=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: Mar 24 23:08:36 2026 GMT
            Not After : Mar 31 23:08:36 2026 GMT
        Subject: CN=69c31974-a392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c6:cd:42:c2:73:e4:6a:a6:88:28:1f:1b:3e:
                    e0:c5:01:81:04:13:9a:35:1c:a9:d7:c9:f9:3b:15:
                    81:51:94:ce:24:95:db:1f:15:f8:eb:b1:49:77:e9:
                    0e:8f:3a:25:3e:3e:b8:26:8d:f0:8c:28:63:3a:46:
                    23:5c:13:7d:c0:17:4b:e7:d8:ab:7c:19:60:8a:7c:
                    d7:53:b8:ac:4f:46:12:4a:04:db:8e:37:80:82:0b:
                    d9:ac:54:94:0e:c3:47:48:b2:c8:0d:03:ae:1b:93:
                    94:bb:4e:68:a5:64:ac:d5:22:d4:26:db:f2:05:bb:
                    e9:7e:06:dd:4b:8d:6b:af:07:0b:1e:3b:1a:29:31:
                    00:9b:c3:9a:1f:54:3f:ce:40:91:ef:c9:72:05:fd:
                    8c:b4:aa:7f:0d:53:74:7e:80:4b:c8:7b:b6:01:10:
                    8a:49:9e:6b:2f:7f:99:0d:de:db:e9:52:4b:94:bb:
                    6f:33:96:aa:09:57:38:6f:3d:3a:c3:39:79:86:2a:
                    c5:18:f2:5e:65:4d:52:63:82:4f:3b:d9:62:88:98:
                    03:ed:05:5b:92:90:90:f6:22:f7:3d:76:ab:20:1d:
                    3d:b7:60:e9:1c:c9:84:6d:f0:8b:57:0a:2a:3d:1e:
                    ac:86:fe:b8:72:5a:de:3d:67:f6:de:8b:3c:03:cd:
                    c9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:24:19:79:EF:D8:4B:BC:70:D7:85:52:8A:D0:F2:CD:22:9D:E8
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:48:54:ea:67:dd:47:fa:ae:06:4d:3f:a4:8d:01:4e:29:
         57:12:af:05:cf:b0:91:9c:43:61:ca:26:c0:5c:35:b5:83:9c:
         88:22:78:bc:ea:a2:04:35:ec:b4:55:1a:8a:f5:fb:10:f9:36:
         17:da:18:f8:74:32:68:5a:60:c6:fe:ac:d2:62:32:6f:d0:ec:
         76:92:a3:31:f2:79:db:2f:71:fb:42:b6:f2:90:7e:1a:5d:a1:
         69:eb:f8:3b:3d:ad:93:bd:7b:ed:54:0d:b8:1f:b3:27:22:a3:
         09:ea:ae:a5:b7:d2:5a:5b:10:68:dd:91:ee:d4:a9:47:6c:44:
         f3:44:0b:08:dd:9f:27:ea:c9:ab:84:aa:d5:b5:b1:22:35:47:
         a1:a9:9f:ab:88:32:da:3f:ac:85:41:3a:43:b3:15:12:16:b8:
         10:e1:5a:92:79:ab:a5:28:5d:49:ac:4c:e4:55:a2:51:6f:3a:
         47:ee:2f:28:ad:be:df:59:74:8a:3c:cf:d9:1b:77:f1:6f:09:
         96:0d:46:00:6b:6c:87:b4:f4:91:ac:46:03:65:b8:07:cf:29:
         88:08:f4:7b:05:e3:1a:5b:4e:89:34:02:58:0e:7a:6b:c6:5e:
         c0:e1:aa:15:ed:00:7f:15:1f:a6:fe:20:c2:3a:89:a7:5f:cb:
         5d:14:8a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:38:56 2026 by rpki-client