Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          RZAf4twWq0k1t7JMsSedYpzvIX4dxFmY83MMTqC4cPs=
Subject key identifier:   FB:39:11:20:9B:A5:7F:A1:5E:3B:0A:BF:D2:59:08:7F:C0:4B:1F:B3
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          0772
Signing time:             Sat 04 Apr 2026 21:24:54 +0000
Manifest this update:     Sat 04 Apr 2026 21:24:54 +0000
Manifest next update:     Sat 11 Apr 2026 21:24:54 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: OtfAtGykYGCQozOsKq6Xvj63SaIkLahJdz17KIBvxhs=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: EjQAXg2usCcTUh9gyvVBrkzQeLYgfkd976KZ0ehXsBM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:24:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Apr  4 21:24:54 2026 GMT
            Not After : Apr 11 21:24:54 2026 GMT
        Subject: CN=69d181a6-91ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:12:12:40:b8:01:e6:d1:22:a1:90:3a:cd:
                    78:92:65:84:5a:d2:03:b4:e6:e8:7e:c3:30:76:38:
                    79:e4:98:0a:1c:89:a9:f4:1a:95:61:87:35:cb:11:
                    77:f6:d5:f5:e5:0c:70:1f:9c:8b:9e:7a:24:7b:7a:
                    6c:2c:fd:74:36:f9:9c:f9:3a:29:aa:ba:bc:8f:a3:
                    92:f1:20:2d:ec:ab:6b:f1:ce:2e:86:b9:70:01:b3:
                    fe:ad:93:1a:15:37:01:56:ad:ac:6d:f5:80:64:64:
                    c9:19:3c:17:85:d3:73:32:13:b9:10:0f:c7:eb:f2:
                    37:c5:74:59:d6:26:26:a2:b4:15:8b:a4:ee:2d:b7:
                    99:75:65:58:3e:56:8d:19:8b:0c:26:18:44:e9:c9:
                    2d:84:fe:0d:0d:79:7e:54:03:5c:9c:48:02:0d:b5:
                    ce:2e:a1:4b:49:3c:b4:22:f1:63:8d:2e:fd:57:de:
                    93:94:b8:10:ac:c7:d7:b4:27:ca:ab:f0:b6:5c:15:
                    02:cb:80:14:ee:59:f0:f3:0a:83:d8:84:6f:ca:19:
                    b2:86:54:9b:52:25:e2:95:b2:0f:ca:ff:e2:94:e4:
                    96:12:04:e0:ab:bd:03:1d:0e:17:e8:11:45:ad:32:
                    d9:6a:97:bd:27:23:75:4f:7b:91:0a:0f:db:91:0d:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:11:20:9B:A5:7F:A1:5E:3B:0A:BF:D2:59:08:7F:C0:4B:1F:B3
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f3:d3:2a:d2:f8:2d:0d:b0:e8:a6:e2:a4:e0:4a:8d:17:36:
         21:5a:6e:77:90:93:41:6c:4f:f7:96:89:12:02:20:af:7c:62:
         fb:22:da:d8:6d:21:78:0b:cd:e6:2f:ca:6f:47:89:a0:c9:ed:
         b8:41:34:73:31:e0:98:48:06:b1:87:47:99:99:bf:1e:0e:05:
         0a:97:b2:37:93:65:22:a1:b9:87:79:27:14:a0:b0:e6:19:63:
         d0:a8:05:17:aa:fc:e5:6d:5e:aa:c8:b3:46:d0:21:47:19:d8:
         1b:66:27:d6:46:31:25:c0:bf:ba:41:67:78:6f:ff:7d:1f:e5:
         13:d8:02:b0:c3:6c:94:e4:ba:d3:61:13:5d:25:dd:86:b3:eb:
         5b:c0:40:a4:63:18:c0:75:fa:97:4a:02:98:35:b2:1d:41:ca:
         56:8d:b5:e3:f6:37:9d:f4:3c:31:8d:3a:eb:21:d2:23:7d:78:
         c4:bb:3a:1a:6d:6a:38:8f:58:2e:eb:75:ca:54:8e:34:4c:e8:
         bc:ea:18:d3:0f:e3:b7:ec:8e:0c:56:7b:16:27:c2:69:ce:55:
         f3:2c:d5:13:c5:31:eb:46:86:26:2d:68:a9:ce:30:a1:8a:4c:
         4c:85:61:8b:d7:c3:f3:4d:6d:bd:be:33:8f:7c:45:32:e2:3e:
         7b:da:3e:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZBOEQxMTAvBgNVBAUTKDFERUJCNzM3MUFCOTdCQjlGM0E5MDZFQjA3RDU5MUM5
Q0YzODhENUQwHhcNMjYwNDA0MjEyNDU0WhcNMjYwNDExMjEyNDU0WjAYMRYwFAYD
VQQDEw02OWQxODFhNi05MWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAstISEkC4AebRIqGQOs14kmWEWtIDtObofsMwdjh55JgKHImp9BqVYYc1yxF3
9tX15QxwH5yLnnoke3psLP10Nvmc+Topqrq8j6OS8SAt7Ktr8c4uhrlwAbP+rZMa
FTcBVq2sbfWAZGTJGTwXhdNzMhO5EA/H6/I3xXRZ1iYmorQVi6TuLbeZdWVYPlaN
GYsMJhhE6ckthP4NDXl+VANcnEgCDbXOLqFLSTy0IvFjjS79V96TlLgQrMfXtCfK
q/C2XBUCy4AU7lnw8wqD2IRvyhmyhlSbUiXilbIPyv/ilOSWEgTgq70DHQ4X6BFF
rTLZape9JyN1T3uRCg/bkQ397QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPs5ESCb
pX+hXjsKv9JZCH/ASx+zMB8GA1UdIwQYMBaAFB3rtzcauXu586kG6wfVkcnPOI1d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RC81NkZFRkY4MDU2
NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3bnpxUWJyQjlXUnljODRq
VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hldTNOeHE1ZTduenFRYnJCOVdSeWM4NGpWMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkE4RC81NkZFRkY4MDU2NEIxMUVCOEZFOUI0MjFDNEY5QUUwMi9IZXUzTnhxNWU3
bnpxUWJyQjlXUnljODRqVjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1fPTKtL4LQ2w6KbipOBKjRc2IVpud5CTQWxP95aJEgIgr3xi+yLa2G0heAvN
5i/Kb0eJoMntuEE0czHgmEgGsYdHmZm/Hg4FCpeyN5NlIqG5h3knFKCw5hlj0KgF
F6r85W1eqsizRtAhRxnYG2Yn1kYxJcC/ukFneG//fR/lE9gCsMNslOS602ETXSXd
hrPrW8BApGMYwHX6l0oCmDWyHUHKVo214/Y3nfQ8MY066yHSI314xLs6Gm1qOI9Y
Lut1ylSONEzovOoY0w/jt+yODFZ7FifCac5V8yzVE8Ux60aGJi1oqc4woYpMTIVh
i9fD801tvb4zj3xFMuI+e9o+qQ==
-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:45 2026 by rpki-client