Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          IN1VP1fEgizpEg3nFUsXq7VOvvpmqaiNZrNHr+ExHnE=
Subject key identifier:   BC:14:57:E2:E1:78:28:3A:14:61:56:A7:09:CF:0B:74:1D:71:80:05
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          E0
Signing time:             Mon 11 May 2026 06:43:56 +0000
Manifest this update:     Mon 11 May 2026 06:43:56 +0000
Manifest next update:     Mon 18 May 2026 06:43:56 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: +Ktjk0Lt3lBbrqLgF4tgEiafEiaJHku//ri7g1/XUgE=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: May 11 06:43:56 2026 GMT
            Not After : May 18 06:43:56 2026 GMT
        Subject: CN=6a017aac-6a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:75:31:09:7a:bd:c2:69:08:30:c7:c1:c3:
                    78:5d:a0:da:50:cb:07:3c:88:9e:00:be:ac:92:66:
                    74:4c:18:fc:5f:17:99:c5:49:32:ac:ac:4f:fc:2f:
                    17:b8:c8:74:e2:04:96:ca:2b:03:d7:6b:6d:01:0e:
                    68:74:9f:8c:2c:87:18:da:78:ec:d1:bc:70:06:bd:
                    a3:2d:10:8f:78:2a:f4:93:a6:8b:da:d0:78:8a:5f:
                    94:1f:41:a7:cd:b5:08:13:4b:c3:02:80:b2:92:f6:
                    79:8f:fd:d2:73:82:c2:ec:9e:68:e2:eb:c4:44:c2:
                    8b:7d:66:31:95:80:04:0d:97:44:db:dc:f4:a8:ab:
                    97:0f:cb:5b:95:63:7f:17:f5:c5:25:fc:d2:f7:b0:
                    f0:ad:7a:e8:c7:7f:e8:5a:77:a2:9c:f1:3c:93:75:
                    32:5a:4c:63:36:82:e1:26:1e:32:19:e6:1b:8f:8a:
                    ec:01:88:8c:e5:8c:27:b4:75:ea:e4:73:18:f1:22:
                    b5:b5:fc:e9:ee:9b:6b:5e:87:8e:ac:09:c5:84:14:
                    5c:03:d5:75:00:6b:fe:cc:d9:d0:29:fc:74:b8:90:
                    1a:bf:45:31:ac:ad:85:33:4c:a0:fe:2d:44:bd:fb:
                    6f:81:61:27:07:13:43:66:39:f4:a8:85:c3:1f:cd:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:57:E2:E1:78:28:3A:14:61:56:A7:09:CF:0B:74:1D:71:80:05
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:bc:12:b2:f9:fa:1f:ce:b4:00:c0:81:e6:a1:88:e4:71:
         eb:07:c8:21:02:66:27:0c:40:db:9f:24:42:c9:4e:a4:8c:03:
         9e:7e:51:35:81:2a:cf:a8:af:03:13:bd:a2:2c:8e:8b:90:d2:
         0e:7f:f9:a8:34:58:9a:48:30:c3:86:30:1a:70:62:65:6c:6f:
         bd:b5:9d:83:3a:0a:d3:1f:1a:cd:bd:ba:b6:97:3c:69:ac:ab:
         16:6b:f2:d5:1d:25:f2:18:54:f1:be:d3:bf:e4:46:41:0a:33:
         a2:c8:2a:58:e7:36:f9:52:5f:6b:84:e4:36:62:69:f2:4b:4b:
         46:26:62:3b:9a:2a:85:59:aa:c2:27:b8:a3:4a:22:f3:30:8c:
         02:2c:53:87:62:46:75:98:27:f5:88:2e:07:4a:a3:ed:42:11:
         f8:66:50:00:db:61:50:7b:0f:6d:c2:c6:74:f8:50:16:7e:09:
         99:4e:0e:a3:f1:c1:ae:1b:82:87:6c:72:a1:89:9f:b1:20:51:
         e3:9e:d1:4f:9e:e0:64:43:8b:a8:1b:8f:ea:73:86:ef:6e:c1:
         bb:d7:c3:c8:60:d9:86:2e:04:76:32:88:37:13:a3:2b:51:33:
         39:63:6a:ef:99:cd:e9:90:c5:ec:eb:5e:40:f1:d3:bb:6d:d2:
         85:5d:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:26:47 2026 by rpki-client