Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
File:                     s-hiKkEGGf2XI_nR28U1fhX6fcw.mft (raw, json)
Hash identifier:          pO03Sk49fKqZAbLHp2vx3EF2zPHMkg8QsTBGr0BzccQ=
Subject key identifier:   5B:36:2F:C8:9E:4B:6A:F0:01:6C:FA:3E:1B:84:3A:05:49:8C:9C:54
Authority key identifier: B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC
Certificate issuer:       /CN=A91A85CF/serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
Certificate serial:       DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
Manifest number:          DB
Signing time:             Sun 01 Mar 2026 07:44:00 +0000
Manifest this update:     Sun 01 Mar 2026 07:44:00 +0000
Manifest next update:     Sun 08 Mar 2026 07:44:00 +0000
Files and hashes:         1: s-hiKkEGGf2XI_nR28U1fhX6fcw.crl (hash: j0PISy4jUj4XZpqJPn/kK43gLyCLDPKu33gYqigiwHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl
                          rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:43:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A85CF, serialNumber=B3E8622A410619FD9723F9D1DBC5357E15FA7DCC
        Validity
            Not Before: Mar  1 07:44:00 2026 GMT
            Not After : Mar  8 07:44:00 2026 GMT
        Subject: CN=69a3ee40-f6c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:8b:77:07:78:ab:62:27:70:be:a9:78:f0:
                    b0:67:c3:87:0c:ce:a6:e0:da:66:c6:69:41:17:d3:
                    84:08:dd:8c:97:c8:a8:02:7e:ba:55:8d:3d:b7:94:
                    f6:14:2b:82:0a:8f:aa:08:09:2b:00:ca:2e:fd:87:
                    50:36:13:ec:20:c4:f5:df:0c:7c:e5:bb:a6:16:5c:
                    cb:5d:40:35:68:1a:ae:3f:3f:c6:08:a7:ba:1f:9a:
                    19:50:94:c1:0d:63:6f:1e:f3:92:8b:8f:d7:83:7d:
                    0f:b8:d9:06:42:05:10:b6:28:78:26:25:ce:27:cc:
                    99:9d:f3:ec:f5:54:2c:fc:8b:1d:6d:58:fd:a4:f2:
                    c6:71:50:42:54:e0:7b:1a:cf:c4:be:e1:9c:e1:10:
                    45:90:46:2a:82:7f:b6:49:e3:2c:b8:f3:7d:f2:af:
                    51:d2:b6:2c:a2:c4:b8:fc:13:62:b2:2f:e9:82:3a:
                    2a:8b:55:b3:a5:22:5d:28:df:2c:0c:de:09:0a:c0:
                    42:70:c2:9b:09:ae:a0:96:28:9f:fa:92:37:23:44:
                    a0:0d:5f:41:a8:f6:17:d1:8e:9a:28:1f:db:63:60:
                    7b:64:dc:8b:0b:5f:0d:f5:72:6e:a3:d5:0b:90:00:
                    b7:47:45:72:de:04:90:40:ad:1e:51:ac:b6:1b:39:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:2F:C8:9E:4B:6A:F0:01:6C:FA:3E:1B:84:3A:05:49:8C:9C:54
            X509v3 Authority Key Identifier:
                keyid:B3:E8:62:2A:41:06:19:FD:97:23:F9:D1:DB:C5:35:7E:15:FA:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-hiKkEGGf2XI_nR28U1fhX6fcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A85CF/F0009774CAE211EFAF8F1011C4F9AE02/s-hiKkEGGf2XI_nR28U1fhX6fcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:df:1b:9a:67:63:98:48:5a:b6:12:88:c5:00:71:ae:d6:88:
         ee:3f:28:8f:91:a1:93:73:90:3e:05:19:c8:11:03:47:5d:74:
         5e:5c:d3:2e:ad:4f:eb:7e:75:00:97:6a:03:59:40:c4:06:28:
         57:ed:50:11:8d:fd:c2:d3:99:75:6c:38:90:cd:55:d2:72:d0:
         11:fa:e8:a7:f3:69:a5:ef:70:15:8c:5f:66:f6:a4:63:19:a6:
         6f:86:f4:7d:c4:b5:aa:56:48:77:7d:d7:28:63:9d:77:db:05:
         22:7f:f0:11:49:d1:7e:68:e0:f5:1d:64:5b:aa:90:57:7a:5e:
         dc:9f:07:f6:5f:e6:d2:f0:5b:9e:ff:08:22:4e:9e:72:d1:cb:
         cf:49:04:2b:96:23:41:9d:09:6f:67:88:91:09:9c:61:48:ea:
         1a:b3:94:a8:f2:9c:8e:30:a4:59:fd:fb:19:ba:c9:0d:f6:58:
         79:69:ee:38:33:67:cf:aa:06:9e:27:08:c4:60:f0:d4:48:b1:
         53:ff:8a:bb:34:01:09:33:5d:4b:27:25:76:21:ca:0f:1e:eb:
         5a:02:16:db:f1:a4:4a:74:e9:ef:34:0e:d9:99:dd:20:4b:54:
         da:53:61:19:cd:6d:43:85:fc:1b:93:39:ae:5e:97:d7:7c:d1:
         14:89:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:35 2026 by rpki-client