Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
File:                     hemZwivuAcMmTT0iZ1ghCS__0Cw.mft (raw, json)
Hash identifier:          fcv0TLcz5zJlJ9iXvIVUCxFRUHz9dtSVvWpVJaQEmq8=
Subject key identifier:   50:CA:BF:EE:79:C5:FC:04:7D:52:2F:6F:41:B8:22:9E:7D:91:5B:D3
Authority key identifier: 85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C
Certificate issuer:       /CN=A91AC132/serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
Certificate serial:       E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
Manifest number:          E6
Signing time:             Sun 01 Mar 2026 07:36:57 +0000
Manifest this update:     Sun 01 Mar 2026 07:36:57 +0000
Manifest next update:     Sun 08 Mar 2026 07:36:57 +0000
Files and hashes:         1: hemZwivuAcMmTT0iZ1ghCS__0Cw.crl (hash: YoiNaxIf6YyTcezzJ3OgteA3y9Bu+XfVPC3T6Is+Y3k=)
                          2: 8B91AD8CD6B811EF86FC5149C4F9AE02.roa (hash: ztHcyied63n5u52LWMJ9U0s6jM6YVpsvBanXfX0Gx6w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl
                          rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:36:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC132, serialNumber=85E999C22BEE01C3264D3D22675821092FFFD02C
        Validity
            Not Before: Mar  1 07:36:57 2026 GMT
            Not After : Mar  8 07:36:57 2026 GMT
        Subject: CN=69a3ec99-1927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c1:e7:60:b9:22:57:c2:ae:2f:23:3b:25:65:
                    29:ce:7b:e7:fa:06:50:65:ef:79:f6:d8:16:41:2c:
                    ea:a5:3c:24:ab:47:cb:9d:ce:7b:6c:69:d4:8a:67:
                    20:d5:e4:a9:42:e8:59:64:15:ff:d4:49:3d:a1:ec:
                    90:15:9d:07:25:13:e5:4f:69:34:71:15:68:f1:c4:
                    a8:cf:28:b4:51:6e:a3:c5:43:8d:cc:0c:79:7a:eb:
                    4a:e1:38:6b:b9:12:c5:b0:e4:01:04:b8:38:76:d0:
                    0a:25:5e:83:19:bc:54:d4:13:5c:f0:fe:ae:b3:30:
                    69:01:6b:98:d5:b4:86:e4:a9:79:c4:6f:46:c3:92:
                    47:01:76:11:8c:c6:24:2f:ed:9c:d7:27:3e:42:9d:
                    5c:d2:c5:b9:80:ae:16:c0:c7:0d:a1:aa:fe:f6:6d:
                    2a:c5:31:e6:35:21:88:8e:c2:1b:be:21:2b:d6:84:
                    98:c5:c3:aa:17:42:2f:f4:e5:b3:04:19:a9:7c:e2:
                    27:f8:ff:b3:f4:19:e4:3b:71:cb:d8:ba:c7:fe:d5:
                    6a:20:f8:95:df:f8:8d:37:1b:f8:90:76:2b:f0:79:
                    32:46:e5:dd:c0:51:7c:f2:b8:e8:3f:38:3e:ea:dc:
                    a6:ed:05:44:93:1d:9b:7a:cd:45:2d:60:78:59:6d:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:BF:EE:79:C5:FC:04:7D:52:2F:6F:41:B8:22:9E:7D:91:5B:D3
            X509v3 Authority Key Identifier:
                keyid:85:E9:99:C2:2B:EE:01:C3:26:4D:3D:22:67:58:21:09:2F:FF:D0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hemZwivuAcMmTT0iZ1ghCS__0Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC132/C4FA14F8B80C11EF84FA3E35C4F9AE02/hemZwivuAcMmTT0iZ1ghCS__0Cw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a4:04:46:d5:d4:86:47:4b:dc:9d:84:65:56:f2:47:2e:c9:
         03:2b:30:dc:67:0d:69:c9:f1:82:6a:43:df:83:fa:48:0b:69:
         b9:1c:4c:8c:09:ed:ce:da:ad:57:80:3b:96:be:62:91:75:90:
         67:ec:8e:da:40:af:be:0b:75:44:ce:00:55:05:8c:cb:f4:ae:
         ea:d1:ae:c3:59:e8:b7:ef:27:99:23:74:f5:ba:55:78:4f:8b:
         90:58:0e:5a:68:a3:a0:10:a4:8b:6b:15:b9:d2:d2:04:01:81:
         a7:5e:45:e4:27:6e:61:bf:31:fe:5f:e9:81:e7:b5:42:4f:f2:
         5b:62:b0:77:b1:2b:49:3e:43:6b:1f:fb:cb:6a:63:e4:7b:b5:
         3f:03:1d:95:27:37:04:37:bb:94:7e:79:de:cf:35:07:fa:9c:
         19:fd:ce:dc:dc:fb:a8:0f:c2:e6:dc:89:26:14:f4:77:04:6e:
         dd:c5:d0:0b:07:01:7c:d5:ac:87:2d:1c:d5:b5:4f:7a:09:34:
         b1:ed:6a:e3:02:49:69:32:3a:80:14:ce:1c:4f:b0:86:cc:7c:
         6b:94:2f:4c:7d:44:b3:6f:6b:20:b0:48:3c:b7:9c:0e:3e:89:
         8e:de:76:07:96:a8:ae:4e:5d:55:70:4b:fb:2e:de:28:31:00:
         3f:d0:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:35 2026 by rpki-client