Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          iQPOSPVvbsqv43zNUYbGdGsKat6OApkZM1FB9eAas5M=
Subject key identifier:   C3:36:D4:63:CD:86:EC:57:A8:CD:0C:59:65:D3:3B:07:C2:6A:08:A8
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          30
Signing time:             Wed 25 Mar 2026 07:52:23 +0000
Manifest this update:     Wed 25 Mar 2026 07:52:22 +0000
Manifest next update:     Wed 01 Apr 2026 07:52:22 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: McvRqUQU3HIHDvTe2l/yLuI7m4JJbvKeDymCoFh7jDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:52:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Mar 25 07:52:22 2026 GMT
            Not After : Apr  1 07:52:22 2026 GMT
        Subject: CN=69c39437-3e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:3d:43:dd:98:3a:25:07:67:3c:09:de:2f:
                    41:4c:0d:b1:08:3b:93:d5:a9:7e:30:31:46:53:94:
                    07:62:38:99:46:f0:2f:d2:fe:b8:da:5d:ac:eb:74:
                    c1:d6:ae:ef:bf:e9:10:28:de:f4:2f:32:cc:8c:74:
                    5c:36:25:83:81:97:3a:48:64:bc:1d:5e:95:0b:5d:
                    bb:ba:8e:cf:51:ad:2c:d6:10:ac:3c:72:14:0c:bc:
                    6f:02:fa:cb:3a:1f:96:3d:b6:93:de:0b:a9:48:b5:
                    65:c6:75:70:a7:16:7c:97:35:c2:71:8d:3d:37:6d:
                    0d:df:de:78:02:b5:0a:01:22:5d:bf:68:32:0e:be:
                    38:f4:53:40:da:b6:14:02:05:0b:46:46:51:66:78:
                    85:99:7b:5f:fe:04:4a:83:63:19:39:52:3e:87:7b:
                    74:95:eb:57:76:85:58:52:a0:b4:7f:9d:bc:8b:81:
                    31:24:b8:8b:c5:32:ff:4c:59:44:8b:83:d1:60:d9:
                    c8:d2:0e:cb:8b:7e:c6:69:8e:c1:96:e9:6b:bc:68:
                    73:5b:be:58:f4:5d:79:6e:94:a8:4e:64:01:6a:45:
                    14:4d:c1:00:0e:7b:bd:e4:2b:f4:a3:1a:20:3c:02:
                    53:86:bc:10:de:9b:28:dc:e8:0d:9b:cd:f5:50:ea:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:36:D4:63:CD:86:EC:57:A8:CD:0C:59:65:D3:3B:07:C2:6A:08:A8
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:af:df:6b:98:6b:f9:3e:03:a5:41:28:32:60:63:c0:ff:fe:
         5b:60:2d:9e:2d:12:fe:d7:b5:c7:f9:b8:63:36:ea:71:41:69:
         0c:44:cf:04:47:60:ec:66:7f:83:ee:6b:c3:d8:fc:47:31:90:
         45:e0:9e:e0:19:8e:9f:36:93:29:49:10:a5:45:80:2f:a3:44:
         38:48:20:c1:af:69:99:44:c8:b1:13:15:9b:56:05:cb:b1:53:
         4a:d6:f5:90:a0:57:13:b1:7c:8a:82:c5:30:02:1d:95:d8:76:
         e6:f9:b9:34:85:97:8c:61:f3:40:d2:6e:5e:bd:95:2e:e2:72:
         f4:bc:af:3f:e1:f9:81:47:2e:92:d2:a1:1e:7e:42:c8:af:44:
         e0:2f:0f:b9:1c:81:1d:06:39:2a:14:dd:bc:a4:05:13:26:1d:
         98:12:da:3e:4b:cf:c9:fe:15:f7:b0:49:b1:6d:08:6d:d0:22:
         4f:0b:92:7a:b3:d9:c0:c2:e4:95:58:cd:ca:f7:fc:75:88:03:
         c5:7e:cb:b0:1d:0e:92:9d:df:59:3d:0b:45:b1:ca:b0:83:f6:
         d9:4f:ad:5e:91:73:67:d9:c9:db:3e:57:a1:c6:83:89:f5:56:
         1b:c0:9a:b2:a1:60:28:a7:b3:86:d4:6d:91:b2:ba:89:f6:07:
         b9:e1:e4:22
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjAzMjUwNzUyMjJaFw0yNjA0MDEwNzUyMjJaMBgxFjAUBgNV
BAMTDTY5YzM5NDM3LTNlNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCseD1D3Zg6JQdnPAneL0FMDbEIO5PVqX4wMUZTlAdiOJlG8C/S/rjaXazrdMHW
ru+/6RAo3vQvMsyMdFw2JYOBlzpIZLwdXpULXbu6js9RrSzWEKw8chQMvG8C+ss6
H5Y9tpPeC6lItWXGdXCnFnyXNcJxjT03bQ3f3ngCtQoBIl2/aDIOvjj0U0DathQC
BQtGRlFmeIWZe1/+BEqDYxk5Uj6He3SV61d2hVhSoLR/nbyLgTEkuIvFMv9MWUSL
g9Fg2cjSDsuLfsZpjsGW6Wu8aHNbvlj0XXlulKhOZAFqRRRNwQAOe73kK/SjGiA8
AlOGvBDemyjc6A2bzfVQ6paJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwzbUY82G
7FeozQxZZdM7B8JqCKgwHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjr99rmGv5PgOlQSgyYGPA//5bYC2eLRL+17XH+bhjNupxQWkMRM8ER2DsZn+D
7mvD2PxHMZBF4J7gGY6fNpMpSRClRYAvo0Q4SCDBr2mZRMixExWbVgXLsVNK1vWQ
oFcTsXyKgsUwAh2V2Hbm+bk0hZeMYfNA0m5evZUu4nL0vK8/4fmBRy6S0qEefkLI
r0TgLw+5HIEdBjkqFN28pAUTJh2YEto+S8/J/hX3sEmxbQht0CJPC5J6s9nAwuSV
WM3K9/x1iAPFfsuwHQ6Snd9ZPQtFscqwg/bZT61ekXNn2cnbPlehxoOJ9VYbwJqy
oWAop7OG1G2RsrqJ9ge54eQi
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:54 2026 by rpki-client