Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          Oep3LKgqGmfi2DkT6/L1fNeEWEVPjpjW/SWq1XJaeSg=
Subject key identifier:   F6:7A:24:10:A5:B9:BE:3A:B4:87:F1:D6:02:1E:32:38:8B:CD:11:0C
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0214
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          020D
Signing time:             Tue 03 Mar 2026 02:43:50 +0000
Manifest this update:     Tue 03 Mar 2026 02:43:49 +0000
Manifest next update:     Tue 10 Mar 2026 02:43:49 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: /a+V/uXUN63V3XV6ukrO3PV9zluP3d1uZYlaFL68Da0=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 02:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532 (0x214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Mar  3 02:43:49 2026 GMT
            Not After : Mar 10 02:43:49 2026 GMT
        Subject: CN=69a64ae6-b6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:73:54:2c:3e:cf:46:20:e8:2f:91:ac:54:
                    2d:1c:44:c2:92:d2:24:2e:ab:9d:02:c1:60:51:8f:
                    00:63:0d:0e:de:fa:9a:15:b3:a4:25:13:fa:60:1a:
                    db:66:65:0b:4e:49:66:09:99:ac:26:70:b7:97:79:
                    d6:88:aa:bb:55:57:e9:9b:87:77:1b:f8:47:9d:8a:
                    56:6f:56:d1:0a:48:5e:7c:21:ae:7e:58:2c:3a:73:
                    11:3b:d8:ae:1e:cd:e5:bc:62:72:e0:e4:eb:06:d5:
                    8a:09:0f:ec:47:91:50:6f:9d:1e:13:49:48:89:df:
                    9c:0b:dd:ef:45:ce:18:c7:ad:b6:b3:c3:06:d1:65:
                    06:b7:a1:60:62:ec:0e:d3:88:70:c2:f0:01:1b:f9:
                    f3:c9:d8:52:0f:be:a7:b1:91:04:37:21:eb:99:02:
                    b5:cb:30:76:38:75:9f:61:8e:34:03:92:e7:86:a5:
                    98:59:be:8c:ff:35:d6:17:37:53:a3:ed:f8:5f:01:
                    d7:be:e5:8f:60:09:ae:ae:ea:e0:90:26:cc:1b:fa:
                    66:b3:87:d4:93:14:f4:32:37:46:ab:6a:dd:34:36:
                    1c:3d:58:70:ef:d4:15:29:22:77:73:c6:64:78:0a:
                    7c:ea:e3:08:01:ec:3d:d0:fa:bf:53:42:7e:72:10:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7A:24:10:A5:B9:BE:3A:B4:87:F1:D6:02:1E:32:38:8B:CD:11:0C
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:fc:6b:28:de:61:ae:29:66:2a:a2:cf:62:b5:13:b4:73:78:
         70:b8:fc:e0:9e:7d:14:c8:54:55:af:41:5b:b9:6f:57:63:6d:
         33:77:2e:7c:08:ae:9a:1f:5a:95:98:bf:7a:ea:2c:1a:57:8a:
         04:56:73:eb:bc:12:8e:e3:fe:ae:e5:fa:9c:83:48:c8:af:34:
         c1:8e:21:41:06:da:11:d1:75:e1:a6:bf:bd:fe:fd:22:06:67:
         3f:0b:2e:37:a3:cd:4f:25:a0:df:ad:42:5c:32:13:c3:55:0c:
         0f:23:b3:79:8a:67:d9:49:1e:0f:ef:0e:f1:62:b9:4e:29:29:
         6f:95:44:65:c8:a8:b5:b9:c6:dd:a4:fe:b2:c3:81:11:bd:4b:
         9c:7f:3f:70:ba:40:7f:5a:60:8f:d6:1a:c9:15:da:77:cf:34:
         3c:2c:e6:9d:44:6d:78:51:fd:bc:21:b8:1d:38:a1:1b:dd:7e:
         a7:5c:29:a2:88:cf:15:85:03:e1:14:37:9a:61:de:86:55:0e:
         ce:27:2d:56:c4:76:75:6c:03:0b:7c:ce:c3:e1:65:0a:b6:d7:
         31:42:69:80:95:ab:1a:49:a5:d3:8a:90:d4:90:d8:9b:05:64:
         d5:52:79:67:8f:77:fa:44:85:75:0a:24:19:58:62:5c:30:39:
         3f:15:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:22:38 2026 by rpki-client