Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File:                     Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier:          aICpdk+FSyzdVkO5V3gmPpEM6QffWWRknYxFsfwE+8s=
Subject key identifier:   D2:BD:A2:C7:82:1B:69:3F:0D:E8:8C:DF:FC:47:65:FD:B4:28:A9:63
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       0572
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number:          056B
Signing time:             Mon 01 Jun 2026 00:00:58 +0000
Manifest this update:     Mon 01 Jun 2026 00:00:57 +0000
Manifest next update:     Mon 08 Jun 2026 00:00:57 +0000
Files and hashes:         1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: Xi1E+yMMIbzNTzYy/3AyCLsTg7KM/xCYXD5T5GryvDY=)
                          2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: Jun  1 00:00:57 2026 GMT
            Not After : Jun  8 00:00:57 2026 GMT
        Subject: CN=6a1ccbba-3e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:50:ad:c3:bd:50:95:c1:55:1f:f9:6c:cb:
                    c8:c3:5a:fb:9f:60:f0:c0:6f:13:4c:c5:fc:12:6b:
                    eb:53:1c:87:97:31:1d:6f:eb:8f:c8:c6:90:70:7b:
                    40:58:c1:bf:33:35:39:d1:42:a4:f5:64:cd:7d:09:
                    7e:95:e2:ca:65:2f:6e:0c:93:cb:66:bc:fb:09:34:
                    c0:fd:27:0b:e7:ba:62:f4:5f:c6:21:54:c8:44:24:
                    d0:2f:7f:ee:f0:12:db:68:93:eb:16:39:67:b8:c9:
                    cd:9c:21:1a:6b:5c:c7:2e:48:20:d7:73:04:2f:77:
                    92:1e:19:41:06:82:42:6c:1d:3e:3b:7f:38:ee:82:
                    6e:60:6e:fd:12:c9:c2:39:52:4d:b2:69:e7:1a:aa:
                    23:02:3c:c7:06:9b:7e:37:d1:88:e8:3d:71:99:8a:
                    9c:b3:4c:f8:1a:61:bb:94:b6:c5:67:b0:e0:3d:a2:
                    2b:f6:64:62:ee:be:4a:d4:d2:89:74:bf:bd:19:b5:
                    61:16:d0:be:8e:11:76:fc:53:53:9f:c0:8e:aa:07:
                    eb:98:98:2a:9c:c9:79:81:e6:c2:59:ef:a5:46:8b:
                    e1:09:b0:8f:55:31:10:29:41:41:54:b0:34:00:18:
                    d4:b0:b3:74:8c:df:ff:95:69:16:ba:c7:c2:c6:da:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BD:A2:C7:82:1B:69:3F:0D:E8:8C:DF:FC:47:65:FD:B4:28:A9:63
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d6:7d:cb:4d:35:5f:2f:a1:82:66:72:6a:73:83:6e:7b:a3:
         2b:41:0f:8f:58:91:c4:c3:d3:80:c4:9e:43:ae:fb:33:fe:fc:
         90:7d:03:d3:5d:98:74:65:6c:fc:cb:68:f6:af:f6:86:63:26:
         89:df:1f:01:a5:3c:bc:b2:2d:7d:d9:ab:3a:7f:9f:50:c6:9a:
         0a:d4:2d:7e:08:60:70:d6:f1:75:d8:d4:da:d3:b7:ef:1b:02:
         ba:1a:7f:68:f4:7c:75:70:08:31:61:3a:ad:95:97:76:da:5d:
         75:fc:53:10:a3:4e:3a:3a:25:e8:ec:78:b9:91:55:87:e5:d3:
         de:6e:a8:dd:8b:43:27:de:04:70:ee:02:08:c5:61:e4:52:77:
         35:15:b1:47:55:f6:9a:37:36:b9:c7:7b:1e:f0:5f:74:21:bf:
         38:26:01:f7:5b:10:10:03:92:05:19:c5:73:da:49:ad:e4:0c:
         41:f7:2b:38:91:56:47:13:65:ff:ab:f0:3b:b2:4c:c8:b6:4c:
         82:84:7a:2c:81:a1:7e:91:2d:89:e5:92:6e:9e:29:19:cc:02:
         43:c9:80:d7:dc:2b:d0:8a:7e:6b:c3:b4:6d:be:cc:a2:9a:9a:
         5f:36:50:df:f0:85:8d:62:0d:cd:90:fb:1d:d7:66:8e:a4:52:
         71:06:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:12 2026 by rpki-client