Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
File:                     HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json)
Hash identifier:          2HbTFYgTwgfm/cOkDiB0wTSz2D876ETipaNfJyIH9rs=
Subject key identifier:   A8:2A:66:DA:42:53:3E:62:A8:21:98:FE:F9:10:3A:1B:15:E8:4A:68
Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Certificate issuer:       /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
Manifest number:          85
Signing time:             Fri 27 Mar 2026 07:11:24 +0000
Manifest this update:     Fri 27 Mar 2026 07:11:23 +0000
Manifest next update:     Fri 03 Apr 2026 07:11:23 +0000
Files and hashes:         1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: TKsb6UREsMRVd8OGnpcKU/hnl9MaJb5B45RrLHt0FBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:11:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
        Validity
            Not Before: Mar 27 07:11:23 2026 GMT
            Not After : Apr  3 07:11:23 2026 GMT
        Subject: CN=69c62d9c-f84c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:f1:9e:82:d6:20:22:74:8d:4a:88:2c:99:
                    4f:1d:a6:88:77:98:81:30:2e:2f:a9:30:72:03:3a:
                    45:2b:1b:e8:bd:ad:be:7c:ce:24:88:c4:1d:f8:43:
                    33:90:32:b0:c8:d5:56:d9:3b:8f:a7:b1:e8:b2:42:
                    46:f0:3c:f3:80:74:08:15:66:9a:95:d6:ec:68:de:
                    c5:1d:31:19:e2:49:98:d0:dc:93:33:a9:7f:57:2b:
                    9b:69:6b:94:da:24:b9:74:4a:95:c3:80:2e:8d:76:
                    35:93:a8:15:78:f4:bd:eb:39:9e:5d:4e:81:aa:60:
                    2f:40:44:82:aa:0e:9b:09:af:84:a5:e9:7f:98:cb:
                    1e:16:4d:fe:a2:0f:82:10:35:cb:17:7d:27:03:ba:
                    0a:61:80:a8:67:c6:f2:d4:68:22:ca:3c:2a:a3:c2:
                    d3:83:27:ea:b6:08:d6:7f:ec:bf:f3:32:3d:83:d5:
                    27:81:d1:bb:2a:d1:58:d4:98:0d:c9:18:72:a9:cc:
                    90:2b:9e:42:62:da:ae:fe:c7:33:11:a1:f2:0e:4f:
                    ef:e7:1b:c7:cb:bc:a6:73:2e:e0:f0:b2:dc:cf:6f:
                    97:bd:3c:1b:2e:df:ee:35:f5:45:d8:f9:1d:15:7a:
                    51:72:ba:a7:37:fd:e5:9c:f2:73:c8:5a:65:1b:33:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2A:66:DA:42:53:3E:62:A8:21:98:FE:F9:10:3A:1B:15:E8:4A:68
            X509v3 Authority Key Identifier:
                keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ec:e8:17:01:af:a9:da:55:f9:9a:e1:4a:47:4d:ff:24:be:
         5a:48:c2:ce:53:41:7f:26:f0:c1:03:31:09:d8:36:06:84:5a:
         fc:a8:d3:18:94:fa:7c:e7:98:03:9a:af:37:5b:da:e1:9e:bd:
         a3:db:44:a7:41:c7:93:25:1b:f9:76:db:61:e2:cb:9b:08:0e:
         5c:46:c3:52:e9:aa:6d:79:ff:5a:3a:af:d9:c0:47:92:07:c2:
         c5:07:87:af:bd:6b:ae:35:5a:b4:75:ae:cc:8e:73:8e:9e:a9:
         cc:47:54:e3:e4:ec:b0:8b:f1:68:c2:ab:b1:8a:09:57:6f:d2:
         83:6e:69:9a:0e:88:45:74:af:b4:1f:97:65:fa:7d:d6:fa:34:
         1d:ad:00:71:3f:3f:41:06:8a:ce:0a:f0:5f:69:89:64:e1:8c:
         3a:33:2d:c5:36:c7:21:2e:61:6a:43:73:82:6b:2b:cc:8c:96:
         60:3c:97:53:28:d2:07:0c:6e:cc:e3:37:5b:fa:52:21:b5:85:
         55:41:d2:11:dc:37:fb:05:f3:cf:de:19:0c:bd:59:f6:85:c7:
         b5:d5:0e:ef:d9:7b:40:4c:84:23:55:96:38:d3:aa:1e:72:55:
         fe:f4:85:1c:40:f4:0f:e3:81:ec:2a:ff:2b:d8:0c:a2:20:e1:
         3e:7b:aa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:43 2026 by rpki-client