Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
File:                     ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft (raw, json)
Hash identifier:          NRXGc3C37FHTpH34gadV1E0kYma0yOywoneO5Vd7nQg=
Subject key identifier:   42:38:F8:E7:8A:A8:13:52:87:99:3C:9E:FA:E7:26:D7:B0:50:E5:FE
Authority key identifier: 85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4
Certificate issuer:       /CN=A91E9EBA/serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
Certificate serial:       0138
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
Manifest number:          0132
Signing time:             Wed 25 Mar 2026 04:42:28 +0000
Manifest this update:     Wed 25 Mar 2026 04:42:27 +0000
Manifest next update:     Wed 01 Apr 2026 04:42:27 +0000
Files and hashes:         1: ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl (hash: OdfWNp4Ftm1wTVSEtuvTOY6PVeEQdSY9K0noRjjZ5dk=)
                          2: 06F73C70ABD011F0977C9F10C4F9AE02.roa (hash: vgtGXqZIotP7XALpdVVLNGiNYGh7f99bKJBaiOXmSGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:42:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9EBA, serialNumber=85AE6219F86269414BE176B7825F16CDDD4242D4
        Validity
            Not Before: Mar 25 04:42:27 2026 GMT
            Not After : Apr  1 04:42:27 2026 GMT
        Subject: CN=69c367b4-0411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:f7:ce:8f:09:94:b0:01:70:ea:d8:6e:cd:
                    2b:c1:3b:0a:cd:39:7f:25:01:16:6f:26:29:4a:f5:
                    45:05:3b:8e:ad:50:8d:25:46:ba:14:bb:47:78:c5:
                    35:e1:db:68:9a:6e:b1:d8:64:a8:e4:5e:fd:59:3c:
                    bc:17:f3:ef:75:7e:45:21:d8:db:ee:a9:e4:c2:ec:
                    8d:a6:9d:9c:30:f0:89:4d:77:9a:22:b2:d5:cb:f6:
                    bb:3e:de:05:b2:e0:fc:f3:68:af:ca:5b:96:8e:9d:
                    8b:b7:2c:ed:5d:6a:4e:be:8c:6f:bd:bd:8d:06:bd:
                    12:78:35:47:67:f6:63:a6:17:fc:1e:ad:7f:75:ab:
                    a2:9c:15:50:80:b9:f9:40:ee:6a:14:d3:a8:9f:ee:
                    77:b1:2b:13:f3:ed:da:fc:ef:33:bf:5a:02:fd:c9:
                    fa:8e:5a:65:64:9a:df:f2:0b:e3:41:9f:13:f0:2e:
                    90:40:ee:81:15:a6:3a:ba:1f:3b:59:27:33:c0:c6:
                    fd:a5:c3:fe:c4:26:0b:e5:2c:f9:70:c0:a4:f1:07:
                    99:42:75:5e:33:c8:14:38:1d:b5:c5:3a:de:b1:1c:
                    2c:7c:0c:36:a1:af:e1:85:70:81:41:da:1c:25:a5:
                    1a:77:47:cc:b6:9b:76:bf:1a:b1:e4:64:94:6b:69:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:38:F8:E7:8A:A8:13:52:87:99:3C:9E:FA:E7:26:D7:B0:50:E5:FE
            X509v3 Authority Key Identifier:
                keyid:85:AE:62:19:F8:62:69:41:4B:E1:76:B7:82:5F:16:CD:DD:42:42:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9EBA/FA320CDA5ADC11EFB5606637C4F9AE02/ha5iGfhiaUFL4Xa3gl8Wzd1CQtQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:02:d0:d1:cb:eb:69:24:f3:f5:94:09:c8:7a:90:53:77:bd:
         f2:06:bd:de:02:10:fb:ce:14:b5:7f:78:2b:22:2a:aa:4d:46:
         1c:4b:04:3d:67:b4:a6:2c:4f:30:be:70:5e:ef:ed:37:35:47:
         13:03:dc:8e:b0:5a:7e:32:ee:fd:9c:6a:36:2b:7e:6c:48:42:
         22:4d:26:24:eb:ce:ad:a7:e2:6e:4c:ac:8f:88:b2:3d:63:35:
         33:0c:f7:3d:8f:5a:1f:62:01:4d:36:31:84:57:46:2a:85:11:
         3a:e5:6e:96:ff:8e:16:43:a8:62:08:f2:75:54:04:9e:bb:da:
         b4:03:b5:b1:84:f5:e6:63:2c:76:62:07:9f:9e:ea:99:c4:ba:
         da:fc:e7:f1:43:b4:0e:64:0d:4f:00:ad:ae:29:c0:ad:78:11:
         78:97:0b:39:ee:14:ee:d7:82:34:b0:ca:05:ea:2d:04:74:50:
         59:2f:bf:f3:16:f2:6b:d8:5f:5b:14:7e:2a:58:53:c3:4b:ec:
         ba:05:74:c8:92:d0:38:af:9d:da:79:6c:6f:64:2a:47:ae:be:
         d6:58:3b:6a:20:d4:95:4e:bf:6f:71:a0:4f:35:82:3f:aa:e8:
         b2:77:44:31:82:2c:d8:b1:72:83:76:21:1c:81:2b:47:44:00:
         75:58:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:21 2026 by rpki-client