Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
File:                     hav4SAyQlji9zKZTrx5pD1crI-E.mft (raw, json)
Hash identifier:          sE9+O587dP9TyDMEPDglDU1hku+lX7uF9GwQFlcffgA=
Subject key identifier:   E1:01:2A:E3:E0:23:22:F9:54:C5:14:4A:9C:E9:62:BF:97:65:C0:6A
Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1
Certificate issuer:       /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
Certificate serial:       3548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
Manifest number:          353C
Signing time:             Thu 16 Apr 2026 14:50:01 +0000
Manifest this update:     Thu 16 Apr 2026 14:50:01 +0000
Manifest next update:     Thu 23 Apr 2026 14:50:01 +0000
Files and hashes:         1: hav4SAyQlji9zKZTrx5pD1crI-E.crl (hash: Q9sUtyr2HQDelzexKvQ5o4zSShCR4SsLOHyWxa91YCU=)
                          2: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (hash: r4Nk4/HNlZ5UILj9rqZCLRnsXQwXsj9IgRSHKtUZq+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl
                          rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13640 (0x3548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
        Validity
            Not Before: Apr 16 14:50:01 2026 GMT
            Not After : Apr 23 14:50:01 2026 GMT
        Subject: CN=69e0f719-e107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:e6:7b:61:04:74:30:2d:9f:b1:a7:0e:9e:
                    3a:f1:bc:78:a3:db:04:89:06:e7:55:5d:27:4c:3b:
                    c0:95:2f:4d:a7:c2:42:57:b5:35:3a:88:2a:9a:57:
                    12:38:9f:75:88:f2:6e:83:ab:2a:01:de:07:4c:19:
                    29:54:09:56:ca:f5:4d:80:a0:8f:0c:1e:e2:13:71:
                    c6:6c:11:64:98:a8:91:d1:a6:cd:5c:ac:cf:f6:be:
                    09:22:94:16:96:25:dd:6c:7e:e1:bd:54:bc:be:b5:
                    0c:e3:cb:cf:1b:62:63:a9:e5:a9:72:f7:e7:46:02:
                    6b:d6:3c:bb:ce:19:31:ff:e5:ae:1b:ae:aa:31:ff:
                    58:70:4d:ca:49:cd:6b:b2:ff:e0:7e:5a:76:2f:aa:
                    9f:10:66:1d:ae:61:fd:1d:63:a0:70:c1:20:0b:14:
                    72:b0:8a:79:b4:9a:09:c6:1e:20:32:6d:69:55:15:
                    e9:77:57:83:ab:65:14:f8:24:2e:7c:80:a5:74:d5:
                    9c:54:d9:10:a9:f0:d4:7f:37:ab:57:88:ac:9a:be:
                    40:4a:5b:74:d5:3e:05:e1:3c:29:fc:38:54:a8:50:
                    74:24:61:c1:5a:41:85:87:59:4e:13:19:fb:29:9d:
                    a0:5c:e1:54:75:3f:58:51:e8:5a:92:e9:24:8c:2a:
                    df:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:01:2A:E3:E0:23:22:F9:54:C5:14:4A:9C:E9:62:BF:97:65:C0:6A
            X509v3 Authority Key Identifier:
                keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:9e:9f:c9:59:bc:db:ba:51:06:31:f8:dc:dd:29:ba:41:
         9d:36:61:bf:cd:d2:b2:7c:f3:d0:c1:ca:47:46:8b:ca:2d:03:
         1e:46:72:79:88:d4:21:e2:d6:5a:43:80:a2:13:2f:3c:61:94:
         49:12:62:a8:a7:e5:03:70:4c:8b:29:92:da:53:ac:a4:96:d0:
         74:75:1a:33:42:f6:65:d7:2f:57:51:41:5d:9e:8e:cc:41:f1:
         64:b3:f9:28:78:b1:92:a8:b1:10:d6:5a:33:ce:95:65:19:99:
         00:33:8b:b0:7c:eb:08:c7:40:22:af:f5:e9:22:81:fe:20:cb:
         25:ea:3a:72:a5:98:50:a3:42:98:d5:bc:a5:e0:0c:97:32:9b:
         d4:56:37:75:1c:47:54:e3:4d:da:37:2e:61:bd:1d:06:29:7d:
         04:42:df:11:b6:ac:fe:8e:9a:02:64:ac:1b:c7:e4:cb:7a:e2:
         16:81:3c:fe:7a:7e:d4:f7:17:bf:24:8a:d7:b3:ac:93:bb:e8:
         28:c1:ec:e4:2a:2e:28:aa:18:1d:d7:d1:09:f9:97:ae:c1:a7:
         c0:34:71:ad:bc:1b:3d:ce:a9:6f:da:c4:b1:3d:00:6f:1a:23:
         ca:ee:12:c8:c9:8c:9f:7b:be:59:29:4c:0d:40:ee:7b:60:24:
         b8:30:45:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTAzQ0IxMTAvBgNVBAUTKDg1QUJGODQ4MEM5MDk2MzhCRENDQTY1M0FGMUU2OTBG
NTcyQjIzRTEwHhcNMjYwNDE2MTQ1MDAxWhcNMjYwNDIzMTQ1MDAxWjAYMRYwFAYD
VQQDEw02OWUwZjcxOS1lMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArHzme2EEdDAtn7GnDp468bx4o9sEiQbnVV0nTDvAlS9Np8JCV7U1OogqmlcS
OJ91iPJug6sqAd4HTBkpVAlWyvVNgKCPDB7iE3HGbBFkmKiR0abNXKzP9r4JIpQW
liXdbH7hvVS8vrUM48vPG2JjqeWpcvfnRgJr1jy7zhkx/+WuG66qMf9YcE3KSc1r
sv/gflp2L6qfEGYdrmH9HWOgcMEgCxRysIp5tJoJxh4gMm1pVRXpd1eDq2UU+CQu
fICldNWcVNkQqfDUfzerV4ismr5ASlt01T4F4Twp/DhUqFB0JGHBWkGFh1lOExn7
KZ2gXOFUdT9YUehakukkjCrfEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEBKuPg
IyL5VMUUSpzpYr+XZcBqMB8GA1UdIwQYMBaAFIWr+EgMkJY4vcymU68eaQ9XKyPh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDNDQi84MUQ5RTRBMDFE
OTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxqaTl6S1pUcng1cEQxY3JJ
LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hhdjRTQXlRbGppOXpLWlRyeDVwRDFjckktRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MDNDQi84MUQ5RTRBMDFEOTYxMUUyQUFDMjE0N0YwOEIwMkNEMi9oYXY0U0F5UWxq
aTl6S1pUcng1cEQxY3JJLUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAb6een8lZvNu6UQYx+NzdKbpBnTZhv83Ssnzz0MHKR0aLyi0DHkZyeYjUIeLW
WkOAohMvPGGUSRJiqKflA3BMiymS2lOspJbQdHUaM0L2ZdcvV1FBXZ6OzEHxZLP5
KHixkqixENZaM86VZRmZADOLsHzrCMdAIq/16SKB/iDLJeo6cqWYUKNCmNW8peAM
lzKb1FY3dRxHVONN2jcuYb0dBil9BELfEbas/o6aAmSsG8fky3riFoE8/np+1PcX
vySK17Osk7voKMHs5CouKKoYHdfRCfmXrsGnwDRxrbwbPc6pb9rEsT0Abxojyu4S
yMmMn3u+WSlMDUDue2AkuDBFXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:35:15 2026 by rpki-client