Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
File:                     hrKx0eeCRIuE9pgY8WofcHtUyGw.mft (raw, json)
Hash identifier:          5XQScOVtMrb8dMOzrySeJuKxy6GLF85AKzTJTsC4mCQ=
Subject key identifier:   94:89:29:01:3D:64:B1:9F:CF:3D:9B:AD:F1:D4:7C:A8:9D:16:9B:27
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Certificate issuer:       /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
Manifest number:          0762
Signing time:             Sat 28 Mar 2026 21:35:09 +0000
Manifest this update:     Sat 28 Mar 2026 21:35:08 +0000
Manifest next update:     Sat 04 Apr 2026 21:35:08 +0000
Files and hashes:         1: hrKx0eeCRIuE9pgY8WofcHtUyGw.crl (hash: Hpgjh12FBwff3XH0FMH5LRU7xAsL4RQuMg8bNRk0SFo=)
                          2: 06E6952AAB4211F08DC86D66C4F9AE02.roa (hash: Ac5D1VocSkIxBJU8V/4LRUmQRbTw+flgUSB3ZRW3o8U=)
                          3: E658D57AAB4111F09E35ED65C4F9AE02.roa (hash: PEXjSnRuyjRlPGGQw5DqvBSsiQtAtGebvla4PdBpVog=)
                          4: 7A27A6E45FDB11EBA5C9EA7CC4F9AE02.roa (hash: kobGUu1ByDri4VT+YEcCMbSP5W+2KrXkfmSpExJ4PNQ=)
                          5: 8A5AA9BAAB4111F09E531265C4F9AE02.roa (hash: uIB/iGD9NSR9Z5Dx/6iTyvp39u2y6pd5/0tMf3x9ZRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
                          rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 21:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC979, serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
        Validity
            Not Before: Mar 28 21:35:08 2026 GMT
            Not After : Apr  4 21:35:08 2026 GMT
        Subject: CN=69c8498d-a757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f5:3b:cb:75:af:05:aa:87:cf:5a:21:26:5e:
                    d5:72:32:d8:24:78:0f:1d:a4:48:d1:8a:2d:45:a4:
                    01:d6:c1:dd:f5:31:bd:8d:41:a7:35:66:ca:8b:9f:
                    d3:ad:7f:83:bc:e8:eb:12:fb:b2:2c:08:70:99:75:
                    b3:37:79:8b:9f:23:e6:7e:ca:55:da:d7:99:97:5b:
                    83:aa:5e:3a:5a:ae:27:25:1e:ca:85:24:de:a6:f4:
                    e2:3c:a9:6f:b0:0e:b4:49:4e:02:e9:47:6f:4d:3b:
                    b5:73:35:4e:88:1f:ed:f7:17:7f:02:12:bb:94:14:
                    81:ee:58:5d:50:53:a1:bb:2c:02:99:1a:5b:1c:5c:
                    6b:86:55:79:08:a2:2d:4f:86:48:bc:de:ed:28:ef:
                    01:d5:4f:ec:47:68:d0:b9:e5:8c:ae:93:ee:19:7a:
                    3d:87:af:32:95:97:bd:c6:42:09:20:b5:73:5d:ee:
                    1b:8f:dd:1e:c5:83:5f:dd:15:95:78:71:6d:24:11:
                    ee:20:f7:39:b5:9c:3c:05:b1:5b:58:d3:9a:e1:f7:
                    d6:b3:68:52:ec:5f:bf:59:56:a0:d8:cb:58:a8:96:
                    80:13:d1:4a:7d:bf:70:d5:80:21:7f:5a:8c:67:53:
                    d7:5d:fa:d2:d5:e7:6f:09:0d:29:a2:22:f8:4b:a3:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:89:29:01:3D:64:B1:9F:CF:3D:9B:AD:F1:D4:7C:A8:9D:16:9B:27
            X509v3 Authority Key Identifier:
                keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:25:34:2b:c2:a0:89:40:cc:0a:8b:10:cd:f1:a6:99:b4:46:
         13:29:1c:cb:7d:7f:fb:f4:15:24:fa:ec:d8:06:6b:13:04:50:
         8c:06:7c:d3:e3:df:02:19:b0:72:6c:73:a1:28:a1:a3:e2:24:
         b7:84:9f:a4:3a:7b:57:c7:9e:7a:71:86:fd:e0:1a:de:04:81:
         69:6f:e4:e1:44:98:c8:0d:8b:80:88:67:2a:5a:14:a2:37:af:
         56:62:2f:5c:41:05:34:b3:2d:6f:be:f8:e2:7a:2a:70:f9:d1:
         77:4a:41:b1:68:40:0d:a4:e5:be:12:e5:f6:9d:a2:dc:2f:2d:
         4c:71:e5:ec:ed:f6:c3:87:6e:0f:18:f9:82:15:00:12:54:43:
         2a:2b:61:79:1e:79:97:be:69:c2:d5:18:9b:93:c1:00:b6:31:
         6b:62:34:8c:a5:97:4b:79:01:d8:2c:80:a1:06:38:c8:5e:f7:
         5f:ed:fe:9c:8c:9a:cf:af:38:4d:e7:76:e4:4f:fb:8b:b0:c1:
         c3:0e:1a:06:49:97:8f:c9:54:76:6c:02:69:e5:3d:d1:c2:0e:
         c6:d3:6f:e6:51:7a:01:59:0a:f3:5d:2a:2f:e5:f7:af:24:99:
         7f:f6:b8:82:8d:67:fc:74:57:c3:89:d8:36:29:b8:89:41:40:
         43:18:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 17:27:12 2026 by rpki-client