Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
File:                     hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json)
Hash identifier:          sYVqNTvc7kXbHbfsH0sP+X5Wi6f582c2QnnlWv03w1k=
Subject key identifier:   D6:E2:90:D4:7A:E9:57:DD:45:B4:34:D4:EB:57:C2:B5:77:B3:2B:3D
Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65
Certificate issuer:       /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
Certificate serial:       1025
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
Manifest number:          100F
Signing time:             Sat 28 Feb 2026 17:33:48 +0000
Manifest this update:     Sat 28 Feb 2026 17:33:47 +0000
Manifest next update:     Sat 07 Mar 2026 17:33:47 +0000
Files and hashes:         1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: VJsdcz9S3m5jaVBZ1OfKRTWFBcSODV1B6AiS/4I8hxc=)
                          2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: xqp4ztY1055hAOWGxzBB8IclFQx9Z0YAGfkQm9qw9nQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl
                          rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4133 (0x1025)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565
        Validity
            Not Before: Feb 28 17:33:47 2026 GMT
            Not After : Mar  7 17:33:47 2026 GMT
        Subject: CN=69a326fc-922c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b4:00:2a:36:98:93:55:8e:d0:d1:b1:2c:70:
                    42:80:9a:ef:b9:38:38:29:bc:c6:3b:91:b7:b5:ff:
                    6d:92:50:fc:33:48:1e:43:6c:07:1d:d0:2a:ce:7b:
                    1e:30:c7:cb:ff:2b:e9:47:93:a3:50:20:2b:0b:cb:
                    c6:7e:ce:3f:eb:00:2f:4b:55:44:ec:a1:e6:36:b0:
                    e3:aa:71:cf:e8:b2:b8:14:50:2d:4d:7b:17:a5:c1:
                    21:4d:12:54:ae:42:0a:a3:a9:c6:57:60:d3:fc:ea:
                    d2:5c:68:39:b0:23:79:4e:5c:22:7d:c6:e5:bb:de:
                    56:e8:eb:01:2a:0c:99:f6:7b:9b:1e:54:cb:d4:d8:
                    e4:f9:6e:e2:b4:8c:7d:04:5f:1b:29:01:a6:b8:b3:
                    09:92:d4:ef:3b:e8:64:ae:da:d8:f5:fc:e9:dd:bb:
                    c5:fb:70:d0:9c:9b:1c:2f:27:8d:58:5c:5c:e6:91:
                    a2:fa:30:9b:ab:f2:e3:03:45:33:39:d7:e4:cc:45:
                    16:b2:b1:65:b6:1c:02:de:b0:fd:dd:db:92:f0:45:
                    2e:0e:e4:f4:ce:6a:09:9c:93:9b:f6:63:e3:51:0a:
                    58:5e:d3:4c:32:bb:26:c6:87:d9:d1:b5:26:e3:de:
                    84:e8:a5:04:46:fa:88:dd:bd:5a:2f:7c:1d:25:64:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E2:90:D4:7A:E9:57:DD:45:B4:34:D4:EB:57:C2:B5:77:B3:2B:3D
            X509v3 Authority Key Identifier:
                keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:92:9c:e6:74:31:c2:db:e4:a8:d5:f1:3a:61:5c:87:69:c9:
         e7:cd:08:ed:dc:60:48:50:64:95:aa:3d:2a:01:02:7e:7b:7c:
         f6:66:bb:c5:19:a5:6b:2d:98:80:8d:f7:79:75:19:00:ab:8a:
         37:6c:a0:8c:75:1c:d4:99:0b:49:f2:c0:c5:de:ce:be:f4:a7:
         52:e2:12:78:47:08:79:94:b7:c2:fe:82:f3:19:7f:19:93:9f:
         03:c1:f9:45:9f:06:dd:60:cb:1e:21:60:78:3e:73:d4:e2:8d:
         70:1f:dd:21:e9:c2:91:be:a3:3e:f7:bc:c3:45:79:46:dd:86:
         82:7e:6b:05:1d:0c:53:06:e9:09:d9:9e:45:24:87:c8:8f:fc:
         d7:b9:57:15:b2:22:22:6f:69:1e:70:ce:6e:b3:d3:e4:1d:30:
         2e:18:46:66:c0:d0:4f:c0:ed:06:14:77:6a:36:3e:93:0a:bf:
         d4:61:98:58:0d:e2:b4:94:bb:5d:a9:74:ad:83:9e:bd:e9:b9:
         af:c1:a8:81:d1:c3:b8:fd:03:03:67:ba:8b:89:c8:ba:24:41:
         61:d7:0f:13:8a:87:98:fb:ca:8c:9b:f4:c7:e9:9e:39:40:d9:
         c5:65:75:d3:3d:a6:e1:a1:97:65:02:f9:3b:0b:40:c7:25:37:
         4f:18:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:28 2026 by rpki-client