Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
File:                     hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft (raw, json)
Hash identifier:          7YUjTAIzeIyIDGckZaJBOW2cz4vrq/RtGJSGPtjHjxA=
Subject key identifier:   5A:87:8E:B2:0E:32:CC:62:16:04:BF:5E:1D:E4:35:8A:1F:8B:C3:D9
Authority key identifier: 85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC
Certificate issuer:       /CN=A91AC567/serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
Certificate serial:       8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
Manifest number:          89
Signing time:             Thu 21 May 2026 07:39:41 +0000
Manifest this update:     Thu 21 May 2026 07:39:40 +0000
Manifest next update:     Thu 28 May 2026 07:39:40 +0000
Files and hashes:         1: hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl (hash: K1cpecsUOkktNtOCkzsHWLP4AbTaWiSaWCQFgMIio90=)
                          2: 675D716092EE11F0990BEA65C4F9AE02.roa (hash: F/yniYuZFpGynCu35Clniv/S+sipN7kzwj3zVvT9o2o=)
                          3: 3014B5BC86D011F08795B91FC4F9AE02.roa (hash: icWxf2EeuNRrL9AzCEZgALKnzPw6palewZWFR0NzHmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl
                          rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC567, serialNumber=856BC19FEEBEB0B5595F03BB121483E53A8103CC
        Validity
            Not Before: May 21 07:39:40 2026 GMT
            Not After : May 28 07:39:40 2026 GMT
        Subject: CN=6a0eb6bc-245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d4:ec:26:ae:8e:02:91:39:e1:e4:bb:7f:27:
                    4f:64:10:40:ba:fb:42:0f:c6:30:32:78:a0:fe:07:
                    da:76:c3:5d:c3:3e:97:a0:6c:27:52:c9:f4:fe:f0:
                    fb:b7:e1:f6:1c:68:bd:40:c3:e2:36:e2:da:f5:00:
                    97:3c:60:ec:81:cd:15:e5:ef:c6:3d:24:6d:9c:06:
                    c6:10:4e:70:9f:a7:8e:36:b6:48:3b:54:20:a7:3c:
                    89:19:e5:57:ef:ba:b3:ac:c7:5b:fa:c7:45:d1:34:
                    18:ef:22:04:c2:15:d9:75:87:c5:43:6b:1f:66:3a:
                    bb:67:43:c0:f8:82:9e:d1:07:22:14:72:b6:e8:8c:
                    d6:aa:65:f6:b4:00:4a:67:8e:42:96:6d:7f:92:34:
                    76:d9:00:d4:a6:b8:b7:32:df:37:b8:4e:9c:53:43:
                    f4:d4:1f:70:c8:2a:1f:b7:ea:1c:33:2d:29:96:3a:
                    dd:01:f8:8d:b4:f2:b5:80:61:9a:ae:fd:e0:a2:74:
                    2d:b3:f4:3e:34:61:89:87:f7:31:f1:b1:c8:60:bd:
                    b4:a5:2c:33:e7:83:44:6e:ae:99:16:2b:35:c6:7f:
                    34:0a:ec:52:43:ca:78:e6:2f:52:a3:18:5e:ce:e4:
                    47:5d:5f:68:c2:66:76:3e:27:8b:5e:7e:e0:49:f6:
                    e0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:8E:B2:0E:32:CC:62:16:04:BF:5E:1D:E4:35:8A:1F:8B:C3:D9
            X509v3 Authority Key Identifier:
                keyid:85:6B:C1:9F:EE:BE:B0:B5:59:5F:03:BB:12:14:83:E5:3A:81:03:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hWvBn-6-sLVZXwO7EhSD5TqBA8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC567/40EF2FD086CF11F0B8707A54C4F9AE02/hWvBn-6-sLVZXwO7EhSD5TqBA8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:cc:30:04:0e:76:4d:4f:ae:d5:4b:6b:37:1c:80:e6:17:
         75:46:06:6b:80:ca:26:66:90:d9:2a:22:98:f3:6c:55:73:e3:
         8d:13:e8:0c:a8:f7:db:46:72:9e:d8:7f:01:1d:77:32:1d:a5:
         0f:8e:2a:25:ee:cd:f1:66:18:31:0b:68:39:fd:be:de:0e:83:
         e9:de:2a:16:d2:77:e3:01:9e:2f:b5:73:49:17:a7:f8:dc:37:
         43:ea:5d:19:87:35:c7:4b:67:14:07:42:2b:42:b3:d6:1a:92:
         20:31:89:03:65:8c:15:6f:0a:dd:8f:0f:37:9c:c2:5c:f5:74:
         e3:bc:80:e1:3a:98:9f:7d:88:ca:12:be:ac:33:2c:37:9c:82:
         ca:78:41:44:4e:f9:9e:73:89:b4:ca:a1:7d:83:bc:b7:fc:59:
         43:2d:59:5c:0e:08:4f:f0:54:0b:00:ed:1f:61:70:42:e0:2f:
         5a:90:ae:9c:05:0e:d7:1e:d9:74:da:0b:39:a1:98:4d:96:6d:
         30:7e:1e:fc:b6:37:62:11:ac:23:0d:53:c7:3f:5e:e9:6c:a7:
         b5:51:a6:46:46:78:15:6a:6f:50:c2:84:fa:4c:89:35:22:9b:
         7e:6b:40:39:e9:64:11:25:6c:37:a7:49:17:30:af:6c:d5:8c:
         c8:b1:6e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:33 2026 by rpki-client