Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File:                     Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier:          5PxS4o+U78D/0eLFykfiZf656m5rsHWiylpCBC9AI2E=
Subject key identifier:   65:E6:2E:D5:0C:2C:74:4F:D4:BD:18:EE:5A:D9:A4:96:D3:72:69:E3
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       0568
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number:          0561
Signing time:             Tue 12 May 2026 23:29:03 +0000
Manifest this update:     Tue 12 May 2026 23:29:02 +0000
Manifest next update:     Tue 19 May 2026 23:29:02 +0000
Files and hashes:         1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: OBkSLzL1qFcAnSpEtZNe9/ropzxVPIoUDS+svNoAhBE=)
                          2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: May 12 23:29:02 2026 GMT
            Not After : May 19 23:29:02 2026 GMT
        Subject: CN=6a03b7be-928f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8b:4d:16:b4:b5:e1:d9:b6:b0:65:fd:fd:c4:
                    e7:e2:ad:51:70:e0:db:21:a6:59:33:20:f0:77:7b:
                    d5:eb:84:bf:72:03:33:e0:df:fb:5c:20:b7:08:0c:
                    d7:3f:73:3d:b2:47:51:36:59:a2:f4:0d:98:97:05:
                    27:12:bb:a3:61:3a:40:00:f8:11:46:1e:e1:5d:5e:
                    5d:69:fd:77:da:54:bc:6e:13:6a:83:8b:1f:8c:8a:
                    7f:a0:ac:17:3f:19:6e:14:d7:76:e0:a8:ad:1e:6f:
                    ac:bb:32:46:99:ab:ad:b0:73:f3:7d:3c:3e:17:e8:
                    4b:d7:75:77:60:36:21:10:1e:a2:23:32:fe:22:0e:
                    a8:5c:ee:37:7e:fc:88:23:ae:ec:8a:fd:6b:18:67:
                    ba:52:b2:fb:9a:1f:2f:92:a5:9c:0e:fc:5f:75:6b:
                    36:8f:c1:fe:f5:a4:58:57:e7:84:94:9d:f9:08:72:
                    80:dc:bc:30:25:3a:fa:f2:64:ba:60:68:9e:8b:00:
                    4f:59:58:8c:bb:a0:ea:38:27:a7:19:81:94:e0:e0:
                    62:cb:ea:4c:9c:e2:73:31:cb:de:e6:7b:01:ac:9b:
                    d4:c2:4a:b0:cf:a4:39:55:57:e5:16:a0:0b:95:ef:
                    ac:bb:a3:01:fe:88:1a:e2:4d:af:b6:da:f6:02:a0:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E6:2E:D5:0C:2C:74:4F:D4:BD:18:EE:5A:D9:A4:96:D3:72:69:E3
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:90:1f:b8:9e:c2:97:57:c9:0a:88:ec:d6:84:f5:c6:cd:32:
         ba:78:d9:e8:1c:7c:9a:77:c1:94:cb:b5:32:69:45:19:b1:96:
         51:98:51:f1:7a:38:58:33:bf:bd:43:26:e0:64:c4:f4:d3:5c:
         3c:95:2f:ed:02:bf:e2:d4:6a:8e:47:1e:37:54:ae:a6:7d:1d:
         5e:6a:c0:4a:60:cf:1b:00:67:33:1a:71:a1:73:74:da:f6:d1:
         64:2b:a1:8e:55:00:03:04:cc:f5:4e:fa:15:e1:0d:35:5d:0d:
         33:92:85:1c:10:c5:72:d3:9f:a5:81:c5:c1:ae:a6:5a:e3:c9:
         26:3b:e5:3c:99:6a:c1:44:c9:9d:65:2d:23:37:f3:d1:3b:cb:
         53:1d:fb:0d:09:2c:e0:91:3f:44:9f:76:15:f4:b5:bc:5b:98:
         5c:d1:8a:cc:97:a9:ed:7f:79:b3:14:da:8b:c0:fb:80:33:35:
         b0:51:97:68:dc:fd:7c:6e:00:f0:2e:0e:b3:d2:ee:aa:d1:9d:
         d2:5f:29:9e:5f:25:92:ba:3d:fb:87:c0:5e:0b:1a:90:96:25:
         4a:b0:76:ac:ed:60:18:28:a8:51:a7:ac:3a:41:51:20:2b:9d:
         26:95:07:78:b4:a3:2e:32:82:79:70:50:cf:df:af:36:16:b6:
         e8:e6:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:41 2026 by rpki-client