Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier:          68tbZxkGrT4R/LLK2YiwFr/xTkDtLCVRyLUMC4/zOLc=
Subject key identifier:   A4:B2:BC:24:7F:DF:D3:B4:7D:08:8E:00:38:CB:D2:85:74:7C:6B:09
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer:       /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial:       1871
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number:          1858
Signing time:             Mon 02 Mar 2026 02:32:49 +0000
Manifest this update:     Mon 02 Mar 2026 02:32:48 +0000
Manifest next update:     Mon 09 Mar 2026 02:32:48 +0000
Files and hashes:         1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: LSr0OCDIIgX+W2uCrb262ykDEV/MfVVZYZPGR/JYy2w=)
                          2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: N4cKaS0mhdfetjDQpuoB6/wb9rZig3P5I710RWYjulM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
                          rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6257 (0x1871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Validity
            Not Before: Mar  2 02:32:48 2026 GMT
            Not After : Mar  9 02:32:48 2026 GMT
        Subject: CN=69a4f6d1-fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:b1:95:14:bb:5a:6e:53:b2:5e:2d:d4:2d:
                    69:a8:2a:40:d6:b1:d0:85:d9:a8:ec:cb:12:5b:7d:
                    05:0a:36:5d:ac:13:54:b8:91:2a:3b:e2:1d:73:bb:
                    b2:ad:c0:61:32:82:7c:8d:94:19:e2:56:9d:61:c5:
                    7e:95:a3:c1:84:a5:d6:a4:04:e7:5a:98:74:6e:c9:
                    a0:30:0b:ec:5e:f1:53:23:e8:2e:55:2a:e8:62:4a:
                    62:b3:c0:b6:6c:e5:27:b8:71:1f:88:f6:34:25:59:
                    bd:a2:8a:08:43:d2:a9:6b:3a:9e:16:0e:7f:b9:6c:
                    51:6d:51:a4:38:2e:00:1f:41:eb:8a:f6:76:d5:78:
                    87:b4:58:5c:52:92:d4:fb:61:3a:ae:43:79:44:14:
                    1c:dd:95:44:91:97:14:e6:a5:c7:39:3d:32:af:f3:
                    f0:3d:1b:87:a3:99:c3:d6:52:4d:63:9e:3a:e4:1f:
                    bd:2d:34:70:83:2f:7d:6f:62:81:65:2f:b5:e0:c0:
                    e9:dc:93:1c:44:96:5f:1c:05:39:fc:18:9e:74:1e:
                    6e:14:5e:14:27:7d:27:9f:35:f8:e9:52:a4:5e:9e:
                    f9:46:d4:40:c2:8d:aa:77:d8:ff:6f:8a:70:4a:0c:
                    37:04:52:31:d3:84:4f:25:ff:a9:ef:21:b0:04:b4:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B2:BC:24:7F:DF:D3:B4:7D:08:8E:00:38:CB:D2:85:74:7C:6B:09
            X509v3 Authority Key Identifier:
                keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:3d:fd:e7:6c:2c:71:87:f5:3f:44:65:dc:7a:d4:29:23:
         7b:80:63:47:43:72:59:94:5d:93:37:d2:22:3d:a6:63:44:ee:
         35:f3:b3:5f:ca:f0:d9:40:f5:7e:b0:00:5e:c5:92:4d:28:c6:
         91:a5:80:98:71:0b:40:bd:83:2f:c4:89:06:85:9c:71:9d:9c:
         4f:99:36:dd:99:e4:8d:6d:cd:15:17:01:8b:00:36:0a:9e:81:
         b1:85:10:06:74:f7:72:6a:83:e3:83:69:8e:ed:3d:fd:af:d3:
         99:cb:5a:a4:4c:4b:bc:d6:b3:66:6b:1a:38:af:a7:9b:78:3c:
         17:b9:d9:2b:ab:30:b1:be:80:e4:17:da:04:dc:ba:c4:4e:64:
         d1:3e:0e:44:f4:52:75:80:8e:cd:96:7f:49:83:ca:b6:c6:9c:
         18:82:8c:29:14:35:3f:c5:09:91:c0:83:91:1e:df:ee:c7:f2:
         b0:e3:47:03:74:06:25:a5:7d:cb:21:3b:d1:05:57:86:46:f1:
         f4:21:45:60:36:29:7d:7c:64:9a:96:20:43:85:9e:39:20:4e:
         ee:9b:35:18:51:68:cc:88:95:46:64:43:96:fc:23:0e:29:b0:
         f7:a6:fe:73:d1:ee:cb:c6:23:72:97:be:ed:ef:c1:14:05:04:
         fb:de:1e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:01 2026 by rpki-client