Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
File:                     hav4SAyQlji9zKZTrx5pD1crI-E.mft (raw, json)
Hash identifier:          d73e5dzP6HwOGahUQ6jbJPZh8PiEHIyCFxZVpxldHls=
Subject key identifier:   FD:18:5D:63:5B:05:CD:44:18:D4:CC:C4:22:81:B2:E1:46:95:DC:0E
Authority key identifier: 85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1
Certificate issuer:       /CN=A91A03CB/serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
Certificate serial:       35A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
Manifest number:          3597
Signing time:             Mon 12 Oct 2026 14:50:47 +0000
Manifest this update:     Mon 12 Oct 2026 14:50:46 +0000
Manifest next update:     Mon 19 Oct 2026 14:50:46 +0000
Files and hashes:         1: hav4SAyQlji9zKZTrx5pD1crI-E.crl (hash: t3kV5T824a0Mxia90dJh3axxlLEovrYCeDj+u0Lcosk=)
                          2: ABF3C76E0C4B11EF87D4886FC4F9AE02.roa (hash: r4Nk4/HNlZ5UILj9rqZCLRnsXQwXsj9IgRSHKtUZq+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl
                          rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13731 (0x35a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A03CB, serialNumber=85ABF8480C909638BDCCA653AF1E690F572B23E1
        Validity
            Not Before: Oct 12 14:50:46 2026 GMT
            Not After : Oct 19 14:50:46 2026 GMT
        Subject: CN=6accf3c7-66fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:65:0e:fd:09:5e:97:c6:9d:6a:e6:53:b6:
                    a3:4a:3d:77:14:eb:66:e8:c4:0d:64:04:27:60:0c:
                    7d:d8:e8:66:57:ef:ea:0f:be:a2:0f:3a:2d:83:77:
                    f2:0e:6b:b2:32:fb:d8:27:bb:60:04:4c:85:40:2b:
                    1a:cb:31:e2:e1:9f:69:c1:c3:b0:5c:a5:e8:66:18:
                    df:0d:98:0e:23:56:a2:dd:5f:24:27:52:96:dd:d0:
                    a0:e4:e2:43:fd:3d:e0:28:16:21:51:7b:1a:5b:0d:
                    13:2b:47:0f:e5:89:7a:57:1e:f8:67:52:b4:86:51:
                    23:05:01:15:7c:eb:ae:6e:d3:7b:dd:c3:35:fe:1b:
                    39:e8:4d:50:02:c3:f3:7a:fb:39:c2:bf:87:1b:2a:
                    cf:0c:2a:de:21:b4:7d:7e:ee:ed:0b:9c:3c:b0:bf:
                    8e:7a:df:1e:5e:e2:5c:04:bf:96:e4:66:a2:62:13:
                    01:79:48:da:73:cb:79:15:03:22:22:d7:24:ad:e0:
                    bc:b3:8d:11:af:0b:3a:8b:c9:7d:67:6e:ba:25:01:
                    d9:2e:1c:90:01:a9:72:a3:12:ef:01:87:40:7d:0e:
                    7b:44:96:a5:d4:f1:10:d3:53:2e:6b:1b:01:6c:06:
                    b8:e0:fe:3c:67:8a:56:0b:79:8d:e0:65:06:2c:66:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:5D:63:5B:05:CD:44:18:D4:CC:C4:22:81:B2:E1:46:95:DC:0E
            X509v3 Authority Key Identifier:
                keyid:85:AB:F8:48:0C:90:96:38:BD:CC:A6:53:AF:1E:69:0F:57:2B:23:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hav4SAyQlji9zKZTrx5pD1crI-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A03CB/81D9E4A01D9611E2AAC2147F08B02CD2/hav4SAyQlji9zKZTrx5pD1crI-E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b8:ed:8f:79:3b:35:23:2d:37:4e:18:67:54:9a:15:0d:69:
         d1:9d:03:db:1c:ce:9d:4b:99:55:29:00:9c:04:cb:52:25:5d:
         b1:e6:64:f8:8d:50:80:13:90:e9:d5:35:47:24:cc:3d:18:f7:
         e1:8b:86:2d:dd:e3:ae:85:11:44:3d:c3:f3:f6:b2:17:31:80:
         92:42:c2:60:70:f4:7a:2f:35:87:ee:7a:72:f5:dc:1a:48:3c:
         64:05:21:f5:e6:2f:b3:40:8b:a9:30:13:98:a6:31:0b:a8:a4:
         15:1a:9d:a0:d4:c4:b5:45:5a:09:a4:44:58:75:90:50:b7:7e:
         f9:cd:0a:ad:6d:de:d7:96:5d:5c:d8:b0:9d:19:1d:e9:f6:0f:
         a4:f6:ca:49:9f:9a:4a:84:3b:04:e3:12:5d:78:28:00:39:50:
         7f:40:67:9c:38:8b:b9:ce:3b:c7:e1:40:d1:45:de:23:24:72:
         2f:5c:cd:c7:93:a9:e9:bf:79:c1:2e:09:21:9b:ea:84:94:e3:
         22:28:16:66:40:49:8d:3f:16:aa:a0:76:c7:f7:51:8c:5c:b0:
         95:a4:cb:00:6d:70:e7:ee:10:7c:e7:82:5e:26:8f:12:00:b1:
         06:f5:bb:3d:00:35:7f:4c:39:a9:72:be:54:73:4a:7c:2c:e8:
         fc:58:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:40:25 2026 by rpki-client