Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          N4Y/yz4RDAOPoLQ20MeKelQjEJ2gQ3IGQqxfjAufLdw=
Subject key identifier:   47:3A:15:1E:57:BC:1C:03:FD:B8:FC:9F:60:08:3E:A0:55:C6:FA:9F
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          C8
Signing time:             Wed 25 Mar 2026 06:06:13 +0000
Manifest this update:     Wed 25 Mar 2026 06:06:13 +0000
Manifest next update:     Wed 01 Apr 2026 06:06:13 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: Ohlp/jPRudmTfaR6pBVzVVn45u31T9c3OrQpmSpt+40=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Mar 25 06:06:13 2026 GMT
            Not After : Apr  1 06:06:13 2026 GMT
        Subject: CN=69c37b55-54d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:00:59:06:f4:36:36:33:f5:cf:07:cf:5c:
                    d4:fc:b5:6b:0e:3f:09:14:53:88:7d:80:a0:9c:78:
                    db:b2:e8:b0:8e:61:ec:93:b4:71:e0:da:dd:4b:91:
                    18:4b:ac:c2:7f:bb:8c:f4:b4:04:5a:fa:f4:bb:a3:
                    f1:ba:90:08:08:65:cc:42:22:b1:70:53:5f:57:04:
                    7c:b5:97:4d:5b:73:a3:c7:6d:48:8e:97:74:df:7d:
                    63:ad:1d:a5:ff:d8:e1:ab:2f:23:91:1c:4a:9c:01:
                    42:16:50:b9:bb:79:f7:52:d8:18:e3:04:1f:d7:ce:
                    26:ce:6b:3d:36:6d:c2:f9:55:c8:b7:67:cf:61:29:
                    8e:6c:84:6d:35:46:92:b2:44:5b:01:34:b0:96:f9:
                    83:6a:b7:5a:61:b0:88:1d:76:90:48:bf:42:0e:42:
                    28:cd:c1:96:2e:fa:70:f8:17:40:41:fa:9b:86:8b:
                    7f:24:8a:9d:50:07:38:c3:0d:39:8b:98:1d:18:15:
                    e3:e2:50:97:20:0f:14:f0:44:f3:4b:2b:0c:34:b2:
                    87:0f:65:4f:55:79:1b:65:79:bb:f7:49:80:b6:30:
                    5b:a1:83:c7:7e:c3:fd:95:13:e1:31:28:c8:dd:2c:
                    7f:d8:6d:3a:25:ba:06:6f:94:f9:c0:26:e7:d3:55:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:15:1E:57:BC:1C:03:FD:B8:FC:9F:60:08:3E:A0:55:C6:FA:9F
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:46:34:8c:d1:17:5f:52:6a:fa:66:e0:0d:12:b4:94:71:07:
         02:dc:60:20:60:98:df:2f:20:15:b6:5d:5b:ce:6b:ea:08:3a:
         5d:e3:66:ca:ae:63:1d:ad:c5:3c:86:23:90:aa:3a:f7:30:ef:
         42:06:68:be:7c:61:6c:6a:bf:e0:cf:80:cb:92:ee:8d:1f:45:
         c8:59:66:32:80:c9:ab:38:b3:e2:7f:6d:0f:c7:c5:d8:5d:2c:
         a3:92:09:6e:4c:a7:ec:88:b7:ac:83:51:c5:a2:02:d4:f3:d3:
         e1:18:32:cf:7b:1b:db:32:82:84:1a:f1:ff:4e:6a:25:25:72:
         10:a1:c6:04:2b:57:b6:a0:a1:fb:91:79:64:a0:51:0b:b6:dd:
         e7:9b:9b:43:69:32:8b:77:d7:22:c5:65:52:2b:68:31:f1:77:
         f3:55:53:b7:5a:af:1b:6e:3c:91:58:d0:2a:1e:ee:49:3a:4c:
         00:f0:e4:5d:bd:90:04:0a:e5:d5:14:d0:34:ac:a7:56:40:42:
         10:a6:01:30:38:23:5f:ff:92:0e:15:e1:25:d0:b9:cc:49:f6:
         03:1b:a6:5e:e5:22:73:98:b8:df:5d:8e:21:be:d5:de:98:e5:
         92:12:e1:6d:ab:9d:68:e8:b5:09:47:b0:48:6d:7f:26:5f:2a:
         3c:b7:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:26 2026 by rpki-client