Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
File:                     hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft (raw, json)
Hash identifier:          HsPakkFOzWE/60YMADuXvmorlrezdle+8OGPY9IzNvo=
Subject key identifier:   9F:E0:67:C1:BF:8A:23:9D:04:AA:14:A7:E6:88:31:09:84:AC:45:B1
Authority key identifier: 85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94
Certificate issuer:       /CN=A91BF5C0/serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
Certificate serial:       036E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
Manifest number:          035F
Signing time:             Sun 05 Apr 2026 00:40:29 +0000
Manifest this update:     Sun 05 Apr 2026 00:40:29 +0000
Manifest next update:     Sun 12 Apr 2026 00:40:29 +0000
Files and hashes:         1: hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl (hash: XnG07QRUlFIhyzEI4McCh2PQsFcV8yh/EyxdS3evZuE=)
                          2: 5AD85A56F1C811ECBBC34549C4F9AE02.roa (hash: VSmy2GGy/MUnJpKHQqfyFcFHs7o9CbczIhcZ8oDgTIM=)
                          3: 5B6AD2DCF1C811ECBBC34549C4F9AE02.roa (hash: nkQmNKNtDWtkko/kc3lrW6+9g0X+EY77aB0EFy2ZQ0I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 00:40:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF5C0, serialNumber=8579377261CA279F1C2FF2EBC44297437DD6E694
        Validity
            Not Before: Apr  5 00:40:29 2026 GMT
            Not After : Apr 12 00:40:29 2026 GMT
        Subject: CN=69d1af7d-4275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:03:d9:53:b9:2f:4e:46:94:5f:de:aa:e2:
                    87:2f:41:d7:e0:d3:43:44:89:2d:46:01:5a:47:8d:
                    fb:11:d0:c6:53:87:85:6e:12:7f:d1:89:38:e2:a3:
                    9a:9f:97:36:e3:a5:14:e5:fd:99:ed:6a:8e:de:55:
                    27:fb:13:60:d5:bc:51:f3:b6:24:d6:60:f9:4d:6f:
                    8e:69:b6:7c:62:3f:a8:2f:98:a4:2d:4c:94:69:a9:
                    3b:26:15:07:3f:0c:cf:dc:17:48:67:2e:13:74:01:
                    46:b5:02:c3:21:9f:e6:8e:f7:08:b2:2f:f3:56:52:
                    01:10:45:db:31:64:82:64:0d:dc:93:10:0f:29:64:
                    9b:d5:62:a4:b1:fc:39:0b:8b:92:d8:62:56:77:4e:
                    61:a6:ab:de:98:97:03:e6:f2:f1:d7:ed:65:f9:83:
                    fd:0b:db:1b:47:a0:5f:a1:8f:db:9e:19:08:47:3e:
                    bd:85:0b:76:4d:4d:0f:ff:64:39:94:00:fa:4b:aa:
                    93:cc:6a:cd:58:a0:2b:00:47:0e:ec:7a:a8:f4:f2:
                    02:37:46:15:62:5d:73:ac:3e:63:49:e1:6f:15:b1:
                    94:cb:b6:dc:f9:8f:0a:2d:25:9a:2e:90:a8:29:33:
                    e7:8d:79:7a:3e:18:f0:1a:04:06:48:e9:0f:44:84:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E0:67:C1:BF:8A:23:9D:04:AA:14:A7:E6:88:31:09:84:AC:45:B1
            X509v3 Authority Key Identifier:
                keyid:85:79:37:72:61:CA:27:9F:1C:2F:F2:EB:C4:42:97:43:7D:D6:E6:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF5C0/BCBD4FB6F1C211ECA163FD42C4F9AE02/hXk3cmHKJ58cL_LrxEKXQ33W5pQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:e8:7b:b3:8f:07:5d:a0:25:62:df:04:cb:eb:d6:b8:1d:
         a6:10:09:50:ba:c2:57:8d:2c:8c:df:c9:99:88:66:be:f9:d3:
         ac:46:bd:5e:16:5c:70:81:04:53:06:a1:b0:cd:d9:69:ea:e1:
         0f:67:8b:6a:f5:40:48:a2:a4:7b:48:02:8d:cb:39:fd:88:56:
         11:b8:8f:98:b4:4a:4a:e8:08:25:11:74:7e:00:09:88:b7:25:
         c4:c4:77:51:f0:c2:23:f7:19:e7:38:96:59:5a:0f:44:c1:75:
         40:83:81:2f:c7:15:e6:bb:4d:45:c4:9d:dd:9f:25:40:52:38:
         25:7f:36:5f:79:c6:bd:3b:c5:53:c8:23:b6:64:88:3e:e3:73:
         cf:ac:1f:22:35:19:1d:41:ac:87:47:68:28:75:e0:c0:4d:7b:
         c7:8e:d4:16:8c:91:59:5c:8c:3d:2c:b1:5a:3c:f9:e4:a8:1b:
         b0:a7:09:86:18:0b:c4:3c:7d:15:7e:95:92:cd:54:49:69:2e:
         00:4b:8c:ff:24:0a:28:d4:50:03:16:2e:a9:70:07:c1:d7:10:
         db:ad:50:2d:9a:5c:b4:8f:06:f1:48:3e:73:16:7a:4e:42:25:
         71:2d:78:d7:0f:15:0b:a9:d6:82:22:ab:63:5e:c3:48:17:63:
         4c:38:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:48:29 2026 by rpki-client