Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
File:                     hav4SAyQlji9zKZTrx5pD1crI-E.mft (raw, json)
Hash identifier:          9YEPQUAGpR+BdxMSVWvc4cELRF3Db6TXNHsw8QZzqFs=
Subject key identifier:   74:5E:72:E2:D2:17:BF:82:1E:27:04:01:87:07:F2:59:BB:B5:C2:14
Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1
Certificate issuer:       /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
Certificate serial:       3587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
Manifest number:          357B
Signing time:             Tue 18 Aug 2026 14:52:03 +0000
Manifest this update:     Tue 18 Aug 2026 14:52:03 +0000
Manifest next update:     Tue 25 Aug 2026 14:52:03 +0000
Files and hashes:         1: hav4SAyQlji9zKZTrx5pD1crI-E.crl (hash: 7ZddETufIHQOGjY0E1hgzMo1vqXchsd0kSFtxWUqhxU=)
                          2: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (hash: r4Nk4/HNlZ5UILj9rqZCLRnsXQwXsj9IgRSHKtUZq+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl
                          rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13703 (0x3587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
        Validity
            Not Before: Aug 18 14:52:03 2026 GMT
            Not After : Aug 25 14:52:03 2026 GMT
        Subject: CN=6a847193-0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:1b:ef:79:cb:ec:85:3a:80:49:6b:36:0b:
                    50:89:b2:f6:1b:be:10:c1:15:c3:8d:c1:9d:79:08:
                    ba:f3:b6:3b:f9:7d:a9:b9:90:5d:96:78:4c:2d:dd:
                    dd:89:b4:21:0a:8a:27:31:3f:09:cc:95:25:07:4a:
                    65:0f:80:cd:1b:2c:8b:6f:91:a3:03:eb:63:2f:a3:
                    82:05:5a:12:fb:23:9c:f9:93:25:ff:3a:88:73:b1:
                    51:8f:4c:d2:0f:9b:b1:65:48:05:df:f1:1c:02:3b:
                    23:eb:9e:28:e7:22:6c:86:9d:0e:fe:41:86:28:df:
                    3c:bb:ea:e7:07:b1:b8:cc:f6:d9:87:0a:6d:a6:43:
                    a0:57:f4:d2:2d:52:cf:a6:95:a9:67:c3:b5:c9:5b:
                    50:f3:16:68:ea:ca:ed:f9:bc:4e:52:d3:8f:b6:6d:
                    1e:9e:d4:47:e7:d3:a0:b0:de:44:52:3a:94:f1:e2:
                    f9:d9:58:e1:9b:dd:51:1a:9b:f2:fc:04:44:31:be:
                    42:96:73:58:f0:51:b7:e2:12:8b:b7:37:64:e3:ef:
                    db:21:6a:d2:97:71:f6:cf:3c:fd:ac:cb:0b:93:6d:
                    b8:d8:03:71:9b:d2:90:2b:e4:a1:ce:df:51:7b:92:
                    35:f9:3f:8e:fb:1b:49:f5:d5:dd:d9:5d:f1:86:b0:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5E:72:E2:D2:17:BF:82:1E:27:04:01:87:07:F2:59:BB:B5:C2:14
            X509v3 Authority Key Identifier:
                keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9a:18:68:3d:05:f3:53:13:b7:47:97:b0:6a:19:6a:54:9f:
         5a:51:68:1b:60:3d:19:cc:84:a9:13:76:73:8e:0d:33:9b:74:
         47:59:94:26:5f:8f:c2:34:a5:d0:62:25:a1:96:e1:6a:5e:ae:
         c5:63:1a:f7:33:5a:1f:57:86:a5:47:ef:71:da:00:db:64:2b:
         b2:7b:8a:7f:dc:7a:9c:64:91:1c:e8:2f:5c:46:2b:26:01:0f:
         1d:e6:ad:87:fc:e0:18:40:f9:a6:24:bd:14:59:aa:af:bc:e6:
         d3:44:36:45:06:54:aa:e2:4f:7a:34:e7:1d:aa:dd:f6:cf:3e:
         41:eb:24:1d:79:07:fd:24:11:9e:65:fa:4c:0c:64:a9:2a:5b:
         e7:a0:9a:a1:da:67:94:48:ad:cb:aa:04:60:ec:e6:53:e3:f7:
         04:ab:8f:08:b8:87:ce:83:b5:fd:36:54:e4:d0:16:d4:1f:6f:
         32:79:17:96:86:6e:ee:e8:d7:84:65:44:1f:37:aa:d7:cc:57:
         c0:ed:7e:0a:07:56:25:76:bc:4c:09:6c:e4:0d:24:16:64:95:
         f1:bc:28:ab:56:e3:d5:85:6a:e1:3c:89:d5:40:f7:6d:e7:d6:
         db:1b:5f:27:bc:88:0a:2f:88:a0:56:b7:9b:d6:10:43:f6:d5:
         ad:21:f3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:12 2026 by rpki-client