Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
File:                     HmHgACzkS79ZVTyASgrJEub-vzs.mft (raw, json)
Hash identifier:          ca6Qwn7i0qNPXIyn5H8I+2AvMJ+euzggCcLwhYbdOF0=
Subject key identifier:   D6:F9:A4:DD:5A:EE:2F:03:7E:0C:F4:8F:5A:11:02:28:56:62:21:C0
Authority key identifier: 1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B
Certificate issuer:       /CN=A91EACB9/serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
Certificate serial:       02DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
Manifest number:          02D5
Signing time:             Wed 25 Mar 2026 01:00:24 +0000
Manifest this update:     Wed 25 Mar 2026 01:00:23 +0000
Manifest next update:     Wed 01 Apr 2026 01:00:23 +0000
Files and hashes:         1: HmHgACzkS79ZVTyASgrJEub-vzs.crl (hash: zlJqu1ZngzbhIp+o90wVOA2M772OgF8LwePbyzXLTIY=)
                          2: 654307DC26CC11EDB395A078C4F9AE02.roa (hash: Q48Y/wp7RhZuuL2sntpKBoS0Dfa5UCP/oik4uhuXQww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl
                          rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EACB9, serialNumber=1E61E0002CE44BBF59553C804A0AC912E6FEBF3B
        Validity
            Not Before: Mar 25 01:00:23 2026 GMT
            Not After : Apr  1 01:00:23 2026 GMT
        Subject: CN=69c333a8-a29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:7d:2d:be:04:e0:8a:13:51:6c:a2:e7:88:
                    f5:98:02:47:74:7d:16:6c:8d:8c:d6:e7:a9:cd:f0:
                    14:66:85:65:b3:f7:03:91:03:ff:2c:ba:f4:dc:b5:
                    0f:4e:f6:1b:66:5b:16:5e:c5:50:6c:2f:74:94:c8:
                    c0:d1:9a:ef:9a:ca:31:8d:f7:20:ac:fe:2c:b3:ac:
                    b3:dc:88:62:c4:82:25:39:17:fb:b3:10:24:66:02:
                    1d:16:54:0f:47:43:7c:35:5a:5b:1b:07:07:b6:66:
                    e2:5c:e1:ba:a2:a9:ee:c5:48:a2:8e:c6:12:e6:78:
                    22:3d:2a:75:7e:e6:23:9f:0a:4f:81:f3:d8:52:b1:
                    b7:9b:f2:01:2b:a8:52:19:26:e1:99:37:62:02:18:
                    db:43:ce:02:cc:c9:9d:77:1e:8a:f6:59:71:9c:61:
                    4e:a0:da:cb:da:3f:fe:44:9f:d8:67:35:08:3c:fd:
                    ab:a8:48:8c:02:21:4f:f6:6d:21:97:ac:d1:76:1e:
                    b1:da:1e:4f:ad:ab:af:cc:21:c9:35:c3:a1:90:e0:
                    52:99:1d:5f:b1:f5:86:28:c9:da:97:e9:82:6d:a7:
                    10:75:09:bb:01:30:69:ed:4a:a1:0a:20:5d:59:60:
                    4e:4b:e6:1e:b1:60:70:f1:b9:50:ee:08:ed:f7:e0:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F9:A4:DD:5A:EE:2F:03:7E:0C:F4:8F:5A:11:02:28:56:62:21:C0
            X509v3 Authority Key Identifier:
                keyid:1E:61:E0:00:2C:E4:4B:BF:59:55:3C:80:4A:0A:C9:12:E6:FE:BF:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmHgACzkS79ZVTyASgrJEub-vzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EACB9/0C0020E0269C11EDBB145277C4F9AE02/HmHgACzkS79ZVTyASgrJEub-vzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:ca:c0:be:31:08:2c:87:f2:20:fa:ab:05:d7:87:83:a9:f0:
         b4:2f:e7:63:1a:90:89:2b:13:95:47:64:3d:63:59:c4:00:bd:
         c6:f6:d8:65:dc:c0:90:ef:7e:ce:24:d3:bb:92:3a:ac:d2:06:
         bb:36:61:00:79:e8:38:22:15:93:b3:3b:36:ae:e8:19:d8:01:
         0c:57:b5:e2:fc:f4:4a:c0:87:bc:c7:a8:78:2b:1e:42:21:5e:
         04:89:9c:ff:f5:fe:e9:df:31:d6:d5:27:c4:e0:d0:e1:6b:87:
         b2:ab:a5:2e:7f:56:b0:b7:79:10:87:a7:b9:47:eb:d0:2d:a7:
         15:6f:94:99:a6:f6:b2:23:5b:99:3e:48:2f:0c:28:08:ef:1e:
         61:6f:34:51:c6:46:08:89:ea:34:13:a9:31:87:d2:8d:88:15:
         45:e0:7f:40:90:02:d0:23:2e:b5:d8:cc:9d:35:08:56:db:47:
         2d:34:88:95:7b:9a:77:b1:de:cc:77:18:c4:03:67:0e:c8:91:
         64:2e:30:c0:0d:f4:65:66:8e:c4:a1:e0:fc:15:12:c4:4e:18:
         7d:59:88:64:ed:d8:1c:22:d0:62:82:a3:20:08:b9:73:6a:49:
         43:9d:98:84:58:0d:95:f6:07:7e:76:58:1f:b5:b3:f0:3c:f5:
         25:9d:8b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:13 2026 by rpki-client