Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
File:                     hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft (raw, json)
Hash identifier:          hCWp4m7AbAdp8o+XCbI+Mx8cGbiV9amPWwtRwpXipC8=
Subject key identifier:   DE:A7:2E:34:F2:0F:7F:44:C8:14:CD:96:89:54:3D:46:E8:66:00:FA
Authority key identifier: 85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1
Certificate issuer:       /CN=A9191136/serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1
Certificate serial:       7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
Manifest number:          7B
Signing time:             Thu 21 May 2026 07:48:34 +0000
Manifest this update:     Thu 21 May 2026 07:48:33 +0000
Manifest next update:     Thu 28 May 2026 07:48:33 +0000
Files and hashes:         1: hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl (hash: O3UQvk8Te0WJHPFxcUg8AhgoMc+2gaDtwhnKkU8OLq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl
                          rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191136, serialNumber=855E11FA51BC261082C3DFB55A86D5D8273F39D1
        Validity
            Not Before: May 21 07:48:33 2026 GMT
            Not After : May 28 07:48:33 2026 GMT
        Subject: CN=6a0eb8d2-0ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:8d:9c:e1:db:60:d5:8a:21:b5:3f:32:34:
                    c6:a0:4e:4a:e6:b7:8c:48:99:e7:24:38:ff:5f:d8:
                    3e:9c:59:14:58:62:ba:8b:54:01:87:82:a5:ea:a2:
                    9f:c8:67:8a:07:db:53:a4:20:3f:ce:20:0c:4b:34:
                    55:b2:a7:63:75:3b:ea:f7:e7:57:92:9b:57:39:b2:
                    c6:18:53:c9:3f:ec:aa:8e:89:f6:c1:a3:d0:93:43:
                    60:76:e7:da:02:48:7e:4d:e1:2b:60:84:81:5d:05:
                    ae:5e:a7:80:4a:a5:f9:4c:cc:72:39:86:10:49:13:
                    4c:54:8a:76:06:65:ef:08:af:7a:ca:d3:57:5c:17:
                    f5:48:12:a1:bc:84:07:a1:eb:02:21:37:51:87:81:
                    ba:69:57:09:33:98:3b:f8:d6:63:40:52:70:f2:5c:
                    22:ec:6a:f9:3c:46:71:14:1c:64:9f:6f:9e:b3:f9:
                    2e:6d:cb:e5:1c:25:46:4f:2a:80:f6:2b:fe:b6:23:
                    e4:a0:18:23:bb:c6:b8:e5:8d:3a:0f:89:ce:c7:74:
                    f3:c5:d7:36:43:b0:e1:5b:e6:db:cc:12:0e:58:76:
                    01:e0:89:ae:b3:18:63:2a:3d:37:36:32:1b:64:c4:
                    82:03:43:0e:ea:e1:08:22:ee:83:23:5b:9a:c3:86:
                    94:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A7:2E:34:F2:0F:7F:44:C8:14:CD:96:89:54:3D:46:E8:66:00:FA
            X509v3 Authority Key Identifier:
                keyid:85:5E:11:FA:51:BC:26:10:82:C3:DF:B5:5A:86:D5:D8:27:3F:39:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hV4R-lG8JhCCw9-1WobV2Cc_OdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191136/0C9607849AA911F095AA0480C4F9AE02/hV4R-lG8JhCCw9-1WobV2Cc_OdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:69:2d:42:49:f4:70:bb:a8:b0:62:7e:a3:3f:44:fc:bc:ef:
         09:8f:4c:77:f5:ec:bb:4d:3a:5d:01:56:47:6e:24:88:58:3b:
         df:8e:90:ca:68:ee:a1:d3:47:53:b0:64:4a:0c:1b:78:d7:f6:
         2b:24:b8:da:30:7f:b1:d2:fd:7c:38:0e:3c:b6:1c:c8:2d:4e:
         e1:f7:73:b1:d3:ac:93:a8:9a:e6:e0:4b:7b:6a:bc:61:92:4c:
         9a:52:b5:d3:09:09:b6:aa:39:bc:57:2d:69:a3:6c:4d:52:7b:
         46:41:06:3b:5f:b4:01:f2:75:77:5e:18:8d:07:9d:cb:29:86:
         56:46:51:93:b0:7e:e2:de:2f:99:6e:ab:63:52:1d:b5:e6:30:
         b9:05:32:43:7c:a3:ec:f7:29:7e:f5:1f:51:a9:65:03:0f:cf:
         5b:56:ab:68:bd:d2:aa:7c:aa:74:ff:c7:92:38:fa:8f:96:35:
         43:f4:7d:6c:07:20:61:18:d6:0a:a4:d3:35:72:90:e2:fa:ea:
         03:d4:02:b7:9b:d5:c2:f9:e9:81:47:82:b8:4d:60:78:34:a0:
         cd:91:13:27:fc:66:d3:dd:f1:b4:be:f9:fc:a3:4d:76:fe:a1:
         73:91:f9:ad:24:9e:dc:e3:ff:c2:ef:b3:2a:5a:41:17:95:0c:
         0c:90:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:20:53 2026 by rpki-client