Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
File:                     hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft (raw, json)
Hash identifier:          JkETtYpkP1z5dxWbzPBWEGCHkYhe9wIdyWkSr0SHaTo=
Subject key identifier:   A5:AB:0F:DF:35:DD:62:45:AD:F6:AB:2F:3B:1D:3C:BB:E0:5D:21:57
Authority key identifier: 84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31
Certificate issuer:       /CN=A91F4091/serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
Manifest number:          015A
Signing time:             Sun 05 Apr 2026 04:23:13 +0000
Manifest this update:     Sun 05 Apr 2026 04:23:13 +0000
Manifest next update:     Sun 12 Apr 2026 04:23:13 +0000
Files and hashes:         1: hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl (hash: LRR4YsbNxd87IGxEEXSdAOktGgdwAe0eS3pMGDk2lPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl
                          rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4091, serialNumber=8459FB7290D74A9BCE260E3FAB605D7FD8324931
        Validity
            Not Before: Apr  5 04:23:13 2026 GMT
            Not After : Apr 12 04:23:13 2026 GMT
        Subject: CN=69d1e3b1-bcbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:93:ad:2b:3e:68:60:fb:f6:d0:88:c2:21:
                    b5:17:21:2e:91:e7:8b:51:83:65:e8:3c:2a:30:cf:
                    e3:9a:ca:76:04:86:34:8c:83:88:ec:0b:73:1f:f3:
                    cd:75:16:4b:91:1c:58:33:31:0f:35:90:b7:c4:7a:
                    1f:9a:48:0e:e5:d4:ea:06:36:ab:a4:00:ff:60:36:
                    4d:92:45:80:cf:91:3f:bb:59:48:ce:da:79:70:45:
                    f4:06:75:b7:cd:7e:a4:91:c7:95:fe:c8:56:a6:18:
                    8f:25:17:e8:15:e0:26:ca:ac:bd:6a:b3:c5:ce:c4:
                    6b:99:f8:a2:8d:71:98:95:bf:1e:3f:79:33:b0:3d:
                    b8:9f:de:07:a6:e2:f6:8f:c5:dc:0f:c0:4b:23:8b:
                    28:d0:73:49:67:7f:46:73:9b:f0:b2:a0:5f:07:38:
                    58:b3:c8:52:40:b0:48:d0:2b:9d:41:fb:0b:62:06:
                    d1:fb:d3:d0:e7:b7:d6:c1:12:33:a2:97:20:0b:cf:
                    e8:76:ea:09:ac:1e:90:37:cc:76:4c:76:c1:d3:a0:
                    3d:a7:70:b8:03:20:60:ab:e9:a1:cc:54:43:dd:a8:
                    a5:2b:fe:94:a3:2e:b4:ad:1a:ba:c3:03:63:d0:61:
                    ed:66:d7:d2:1c:dd:cd:d5:c9:71:4c:3f:f8:c7:89:
                    fc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AB:0F:DF:35:DD:62:45:AD:F6:AB:2F:3B:1D:3C:BB:E0:5D:21:57
            X509v3 Authority Key Identifier:
                keyid:84:59:FB:72:90:D7:4A:9B:CE:26:0E:3F:AB:60:5D:7F:D8:32:49:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hFn7cpDXSpvOJg4_q2Bdf9gySTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/6521A0F01D9D11EFA10F2D3AC4F9AE02/hFn7cpDXSpvOJg4_q2Bdf9gySTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:35:ad:c9:fe:1e:6e:ca:c5:1b:77:54:49:8a:13:ab:87:
         f2:33:a3:56:bf:88:2d:94:ea:b9:99:0b:3a:e6:70:7f:fd:a4:
         d8:0e:1c:2c:6f:38:f8:1f:e8:8c:3c:5d:4e:ac:a1:f8:71:19:
         33:62:cf:55:fd:11:87:62:57:5c:e6:d2:fd:0a:91:cc:33:37:
         6e:06:a2:22:a7:c7:d3:b3:ff:f1:2e:6d:0b:09:ab:f1:39:24:
         27:7a:8a:04:2b:c1:1d:03:39:c9:e1:8f:05:2c:b1:57:f4:96:
         bf:d7:f3:e0:41:06:1d:92:35:70:d4:a5:9e:8a:b4:22:0b:f7:
         55:df:e1:88:db:be:71:e1:d5:4a:4f:f4:d9:18:09:1d:31:20:
         6a:cc:94:a4:8f:26:67:fd:d6:a5:08:2a:3c:92:8d:13:23:2a:
         38:0d:62:b6:91:ed:54:de:41:95:dc:77:9c:05:15:3e:c6:48:
         0b:7e:ec:91:da:9d:91:17:77:f6:a4:39:d9:74:2f:bf:ce:37:
         97:8a:c3:9d:8e:0b:24:8b:00:08:ac:df:e9:1a:a7:8f:45:bf:
         4f:f2:83:0d:fb:13:1a:2b:58:3d:8b:5e:6c:4b:85:3e:e7:b7:
         ca:01:d3:0a:cc:ee:7e:d2:d0:0e:cf:3a:01:17:c7:5e:6f:79:
         1c:d7:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:05 2026 by rpki-client