Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          WuxyLZ/jKYXzNWGuvwDmwhqCTDJQbMidYDhKwGTE+Mw=
Subject key identifier:   50:DB:F0:9A:46:19:E7:C2:25:00:C7:34:F1:24:14:FB:31:8F:58:13
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       028D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          0285
Signing time:             Fri 23 Oct 2026 02:18:01 +0000
Manifest this update:     Fri 23 Oct 2026 02:18:00 +0000
Manifest next update:     Fri 30 Oct 2026 02:18:00 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: SngXpvyHi1UOb9QBnsFjCvwqtz6D0+J7EXT3zU08TG0=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: 0vSjVDuwcme5SYhnnHj+3Jurf17kU0PfDgiNk0coHnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 02:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Oct 23 02:18:00 2026 GMT
            Not After : Oct 30 02:18:00 2026 GMT
        Subject: CN=6adac3d8-374b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:1a:b6:d6:c9:d0:f1:cc:0e:6c:30:4d:8f:
                    ae:db:3a:8e:68:c4:a0:55:16:23:bb:34:3a:f3:4d:
                    08:aa:fe:3f:c1:88:00:54:24:c2:e7:1b:0e:17:a6:
                    29:4b:20:82:f3:58:ed:85:49:c9:40:fa:7c:1b:30:
                    09:43:ff:ab:a9:45:20:86:8c:24:65:fb:4e:b4:ba:
                    ef:8c:29:02:8c:53:63:42:90:b4:f5:16:d3:b4:32:
                    ae:a9:5c:83:e4:7a:01:0a:b4:8b:40:b6:30:b8:ba:
                    fb:37:15:91:6e:5e:19:73:4d:d7:34:54:b1:6d:38:
                    3d:fb:e8:a5:03:d5:89:30:a9:43:d9:02:7f:06:35:
                    c9:f0:f5:cb:9f:2a:c5:c4:78:be:19:c4:68:b1:a0:
                    52:db:24:f7:8f:fb:19:76:96:ea:3c:cb:cd:82:25:
                    68:74:b9:3a:1f:8d:df:b0:ca:75:d4:64:1a:ff:8a:
                    3d:00:a3:9b:36:12:f3:bf:5a:2b:61:dc:b3:97:e5:
                    96:75:c5:01:93:c5:01:aa:ff:d9:ab:5d:d0:f7:d8:
                    d6:82:10:0f:99:12:89:0a:c2:f7:e1:3d:cf:8d:57:
                    9d:d8:5a:69:d1:b7:90:92:17:6d:dd:20:9d:d3:72:
                    02:ff:96:6c:83:f9:c7:93:c6:76:2a:e3:07:f1:66:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:F0:9A:46:19:E7:C2:25:00:C7:34:F1:24:14:FB:31:8F:58:13
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:89:4d:51:73:4c:3f:6b:01:90:e4:80:6b:59:bc:9b:9f:b0:
         01:1a:8b:8b:b3:17:07:f4:19:a7:e4:0f:0c:33:68:03:48:57:
         05:e4:ba:91:8a:89:f9:ef:8e:26:eb:ff:d8:d1:39:90:fd:6e:
         e5:b2:7e:85:54:5f:86:c8:a1:43:79:15:a2:b1:2a:80:3a:2e:
         ff:b5:59:e7:0c:ae:70:20:c6:2b:00:86:93:64:b7:31:c4:bb:
         36:27:46:5f:e4:4f:e1:cb:f6:23:30:a8:77:b0:25:7e:d4:87:
         bf:01:b9:51:0d:b5:a0:29:43:87:a7:de:38:48:ad:2c:4b:48:
         02:56:85:f2:7b:dc:c1:91:9a:52:28:78:38:9c:8f:1f:37:39:
         4e:e5:8a:9f:20:ab:c7:2c:ab:37:22:57:7d:ff:e9:6e:9d:cb:
         5a:9f:89:72:52:3b:2f:c5:39:8e:5d:ca:0c:e5:de:f4:e9:37:
         44:fe:2b:bb:2c:d8:a4:e4:64:4e:fa:94:f5:8b:73:ca:f5:5b:
         45:ee:0b:c1:c8:13:72:d6:05:f2:0b:fe:3c:6d:46:89:a6:88:
         9c:dd:5f:11:72:8a:c6:5b:09:d2:ab:f5:6f:7b:5c:29:e3:9a:
         3f:09:4c:7b:e0:f7:78:f7:a4:b4:3c:2b:3a:57:08:38:e8:e5:
         cb:78:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:14 2026 by rpki-client