Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
File:                     Har0X7TSckB6UqY7tzllNp6RIO0.mft (raw, json)
Hash identifier:          VEgJL9rDVkQ7HHY78AMs6p22fBoBbG9M4pA+JGjKTLY=
Subject key identifier:   5E:8D:60:7C:2F:3B:AC:76:14:9B:AA:D9:11:1A:DE:EF:BD:FA:95:68
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       0242
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
Manifest number:          023B
Signing time:             Mon 01 Jun 2026 03:17:50 +0000
Manifest this update:     Mon 01 Jun 2026 03:17:49 +0000
Manifest next update:     Mon 08 Jun 2026 03:17:49 +0000
Files and hashes:         1: Har0X7TSckB6UqY7tzllNp6RIO0.crl (hash: lgBwNzVjAWp70F0aWwbFapXp1q9dq3GFBoe+jTijMDQ=)
                          2: C369BA98260D11F082934618C4F9AE02.roa (hash: cXQDcqjGHQK7UALmkZP5e0hc3VzG0s7yGBDOUKs2gKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Jun  1 03:17:49 2026 GMT
            Not After : Jun  8 03:17:49 2026 GMT
        Subject: CN=6a1cf9de-0f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:45:1e:69:35:cc:5f:d0:6f:8f:7a:a9:8a:08:
                    53:24:8c:65:02:bd:fa:bb:77:da:82:25:6e:ed:67:
                    b4:ba:f7:10:a7:55:16:69:8d:a6:46:b7:ac:96:ef:
                    36:23:a4:e9:5f:49:eb:0c:10:0b:76:2b:fe:0c:3b:
                    f6:1d:4f:4d:e0:80:4d:7e:88:c0:37:ee:dd:fb:7f:
                    26:b8:49:c8:12:76:4a:ae:50:33:eb:af:ab:10:b9:
                    78:6e:8c:30:74:b1:de:7b:85:3f:17:dc:7b:04:15:
                    39:1b:c8:23:e9:a5:f7:43:7f:27:ad:b3:ce:68:ce:
                    2f:0f:b4:aa:f0:b0:e0:ac:44:88:05:db:9e:4c:a4:
                    97:b5:5a:a0:4d:6d:8e:6e:24:4a:07:2b:60:46:fc:
                    fb:71:6d:80:1b:d8:e6:24:61:55:a3:cd:16:97:71:
                    14:80:bc:42:aa:d7:a7:dc:fe:d6:a0:63:1d:f6:a5:
                    66:e7:f0:cb:5b:4c:c8:50:70:0b:43:39:60:8e:98:
                    3e:c6:f0:ca:fd:81:d5:74:b6:04:dc:50:33:1b:a6:
                    98:af:0e:d4:ce:de:9b:59:de:ef:2b:91:f2:41:66:
                    71:94:2e:f5:97:5e:9c:8b:37:89:a0:8e:ac:de:fe:
                    65:60:71:22:f5:4d:a7:59:44:60:80:20:60:ec:15:
                    0e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8D:60:7C:2F:3B:AC:76:14:9B:AA:D9:11:1A:DE:EF:BD:FA:95:68
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:c6:9b:b0:6a:78:3f:0e:48:49:67:2e:a3:73:fa:41:e0:
         63:cd:68:61:fa:78:d8:da:df:a0:77:ac:22:41:2c:ad:e9:9b:
         ba:78:bc:74:38:a1:a4:1d:ce:0c:f6:40:5e:bb:18:47:63:27:
         1a:d5:b6:f0:0e:da:7c:ff:00:16:f2:a7:86:a5:95:9c:26:de:
         df:ea:07:32:3d:c5:5e:8c:33:bb:0f:48:66:3d:b3:f3:2e:5f:
         03:ce:ff:d9:61:81:93:15:73:98:11:47:e4:a6:fe:76:c3:87:
         f8:94:27:b0:8b:f5:b6:af:30:07:43:28:f6:bb:f7:a8:89:49:
         f4:a5:23:c0:41:3f:07:b3:be:bd:d9:6d:82:0b:c5:04:0b:47:
         76:0c:25:09:f3:37:12:b0:06:9c:19:82:58:30:ea:04:16:a4:
         1c:03:d3:56:3c:48:29:b2:bc:62:6a:26:77:96:f5:12:e1:45:
         5d:90:8c:9a:fa:66:ae:28:dd:62:a3:a1:8a:ec:bb:8e:61:eb:
         5e:ed:98:f9:25:c9:6e:4b:b6:08:2d:97:1a:3f:74:5c:d8:c4:
         42:8c:e6:b8:cc:91:f1:a1:40:c4:6c:23:d5:81:56:8b:49:df:
         a7:95:a1:f9:6d:f3:97:0a:f5:21:72:e5:3a:12:4d:e3:4c:6a:
         d6:f2:22:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcyOEExMTAvBgNVBAUTKDFEQUFGNDVGQjREMjcyNDA3QTUyQTYzQkI3Mzk2NTM2
OUU5MTIwRUQwHhcNMjYwNjAxMDMxNzQ5WhcNMjYwNjA4MDMxNzQ5WjAYMRYwFAYD
VQQDEw02YTFjZjlkZS0wZjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+EUeaTXMX9Bvj3qpighTJIxlAr36u3fagiVu7We0uvcQp1UWaY2mRreslu82
I6TpX0nrDBALdiv+DDv2HU9N4IBNfojAN+7d+38muEnIEnZKrlAz66+rELl4boww
dLHee4U/F9x7BBU5G8gj6aX3Q38nrbPOaM4vD7Sq8LDgrESIBdueTKSXtVqgTW2O
biRKBytgRvz7cW2AG9jmJGFVo80Wl3EUgLxCqten3P7WoGMd9qVm5/DLW0zIUHAL
Qzlgjpg+xvDK/YHVdLYE3FAzG6aYrw7Uzt6bWd7vK5HyQWZxlC71l16cizeJoI6s
3v5lYHEi9U2nWURggCBg7BUOuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF6NYHwv
O6x2FJuq2REa3u+9+pVoMB8GA1UdIwQYMBaAFB2q9F+00nJAelKmO7c5ZTaekSDt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzI4QS81MzdFNDZDNkY5
QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2NrQjZVcVk3dHpsbE5wNlJJ
TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hhcjBYN1RTY2tCNlVxWTd0emxsTnA2UklPMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzI4QS81MzdFNDZDNkY5QzQxMUVEODk2ODI0ODFDNEY5QUUwMi9IYXIwWDdUU2Nr
QjZVcVk3dHpsbE5wNlJJTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHXzGm7BqeD8OSElnLqNz+kHgY81oYfp42NrfoHesIkEsrembuni8dDihpB3O
DPZAXrsYR2MnGtW28A7afP8AFvKnhqWVnCbe3+oHMj3FXowzuw9IZj2z8y5fA87/
2WGBkxVzmBFH5Kb+dsOH+JQnsIv1tq8wB0Mo9rv3qIlJ9KUjwEE/B7O+vdltggvF
BAtHdgwlCfM3ErAGnBmCWDDqBBakHAPTVjxIKbK8Ymomd5b1EuFFXZCMmvpmrijd
YqOhiuy7jmHrXu2Y+SXJbku2CC2XGj90XNjEQozmuMyR8aFAxGwj1YFWi0nfp5Wh
+W3zlwr1IXLlOhJN40xq1vIi3Q==
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:50 2026 by rpki-client