Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File:                     hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier:          nKZTnAJp4bmk0z3T0ajwcmgacIadSsb+9eXaQnQQoA0=
Subject key identifier:   8E:04:53:15:F5:F0:FE:B9:69:DB:38:69:2A:6B:CD:F1:26:70:69:6B
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer:       /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number:          0155
Signing time:             Fri 27 Mar 2026 04:28:57 +0000
Manifest this update:     Fri 27 Mar 2026 04:28:57 +0000
Manifest next update:     Fri 03 Apr 2026 04:28:57 +0000
Files and hashes:         1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: Tjshs5EhEMYluk6OfGs4cjwHxhAV5SIAowQ2BuRj7RA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
        Validity
            Not Before: Mar 27 04:28:57 2026 GMT
            Not After : Apr  3 04:28:57 2026 GMT
        Subject: CN=69c60789-1be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:8b:91:9a:6a:09:eb:30:24:dd:90:01:93:
                    16:c2:8d:87:02:68:12:b8:65:e5:92:40:18:64:74:
                    fc:63:ac:06:9c:28:88:6b:8a:b9:58:ba:90:fc:2e:
                    ac:45:0e:15:94:3e:62:58:a1:db:0f:80:40:5c:83:
                    1c:b0:ae:59:97:f9:e3:ac:d7:79:8f:f3:57:7d:a5:
                    5e:dd:2a:db:ff:f1:56:a1:45:4b:48:04:85:d0:c7:
                    50:18:94:1f:42:8d:09:dc:9d:ae:39:f5:ca:b4:14:
                    a1:4d:21:2e:c3:fd:4d:53:ce:df:7b:ab:86:e7:d0:
                    80:aa:cf:ee:8e:37:6c:c3:d1:fe:59:60:b4:7c:38:
                    60:35:28:03:08:5c:ff:d7:a0:30:ef:09:9d:4e:af:
                    10:c9:65:e5:6e:c6:8f:5f:85:d2:bb:ba:f7:f9:c4:
                    c4:7a:8f:c0:08:bb:44:9b:92:06:8a:c2:71:3a:9f:
                    ca:83:70:0f:db:1f:bd:eb:41:a7:ad:a8:40:30:30:
                    f9:92:78:09:6a:1a:39:79:5a:37:05:12:1e:5f:d1:
                    43:00:dd:b7:30:0f:8c:f9:3b:7f:95:0f:1d:19:ad:
                    70:6a:5b:03:54:1c:56:be:32:46:fb:30:c0:5e:36:
                    65:69:04:86:49:7b:83:0e:88:46:42:f1:71:10:cb:
                    7e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:04:53:15:F5:F0:FE:B9:69:DB:38:69:2A:6B:CD:F1:26:70:69:6B
            X509v3 Authority Key Identifier:
                keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:27:ce:66:ac:7b:77:b7:18:e6:80:cd:51:80:80:ef:e4:c2:
         0f:cc:ac:7f:71:e9:01:07:22:f1:8c:33:2a:78:ac:67:fe:1d:
         05:19:4f:56:a5:b6:0e:1c:59:bd:cd:69:d7:1f:6d:51:89:0d:
         78:b7:da:ea:6f:93:1e:6d:f0:1d:22:ba:a1:e8:4a:94:c0:0f:
         ad:19:03:5b:e5:23:aa:59:5b:d9:9a:85:08:29:4a:42:65:d0:
         28:ca:0e:74:99:5d:83:db:da:1c:18:e0:fe:a1:4a:12:c0:33:
         0d:0f:a6:23:94:1f:4e:03:96:0e:44:a9:f6:fd:4b:72:86:56:
         d5:f5:77:ea:08:d8:22:2b:68:95:08:1d:01:91:ba:ff:8e:d0:
         d5:f6:bc:59:07:f0:83:58:61:40:41:fc:3d:a7:1d:98:51:fd:
         a1:41:8e:a9:f2:aa:c6:0d:14:98:34:22:82:07:2b:08:47:ed:
         75:b0:0d:b0:1c:a9:97:65:0e:49:5f:02:94:f1:fb:a5:6a:b9:
         aa:3e:fb:6f:d2:cd:c9:6d:8c:2e:4d:fa:25:a6:a3:0d:79:ea:
         1b:da:45:dd:6f:58:0b:52:4f:f2:96:20:97:72:7b:af:d9:5a:
         9b:b4:de:4a:21:7a:4b:91:ff:e6:c0:47:2c:0d:b9:e3:54:9d:
         d6:27:ae:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQwOTExMTAvBgNVBAUTKDg0NTlGQjcyOTBENzRBOUJDRTI2MEUzRkFCNjA1RDdG
RDgzMjQ5MzEwHhcNMjYwMzI3MDQyODU3WhcNMjYwNDAzMDQyODU3WjAYMRYwFAYD
VQQDEw02OWM2MDc4OS0xYmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArQyLkZpqCeswJN2QAZMWwo2HAmgSuGXlkkAYZHT8Y6wGnCiIa4q5WLqQ/C6s
RQ4VlD5iWKHbD4BAXIMcsK5Zl/njrNd5j/NXfaVe3Srb//FWoUVLSASF0MdQGJQf
Qo0J3J2uOfXKtBShTSEuw/1NU87fe6uG59CAqs/ujjdsw9H+WWC0fDhgNSgDCFz/
16Aw7wmdTq8QyWXlbsaPX4XSu7r3+cTEeo/ACLtEm5IGisJxOp/Kg3AP2x+960Gn
rahAMDD5kngJaho5eVo3BRIeX9FDAN23MA+M+Tt/lQ8dGa1walsDVBxWvjJG+zDA
XjZlaQSGSXuDDohGQvFxEMt+4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4EUxX1
8P65ads4aSprzfEmcGlrMB8GA1UdIwQYMBaAFIRZ+3KQ10qbziYOP6tgXX/YMkkx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS82NTIxQTBGMDFE
OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNwdk9KZzRfcTJCZGY5Z3lT
VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hGbjdjcERYU3B2T0pnNF9xMkJkZjlneVNURS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDA5MS82NTIxQTBGMDFEOUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9oRm43Y3BEWFNw
dk9KZzRfcTJCZGY5Z3lTVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHCfOZqx7d7cY5oDNUYCA7+TCD8ysf3HpAQci8YwzKnisZ/4dBRlPVqW2DhxZ
vc1p1x9tUYkNeLfa6m+THm3wHSK6oehKlMAPrRkDW+Ujqllb2ZqFCClKQmXQKMoO
dJldg9vaHBjg/qFKEsAzDQ+mI5QfTgOWDkSp9v1LcoZW1fV36gjYIitolQgdAZG6
/47Q1fa8WQfwg1hhQEH8PacdmFH9oUGOqfKqxg0UmDQiggcrCEftdbANsBypl2UO
SV8ClPH7pWq5qj77b9LNyW2MLk36JaajDXnqG9pF3W9YC1JP8pYgl3J7r9lam7Te
SiF6S5H/5sBHLA2541Sd1ieuEg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:11:12 2026 by rpki-client