Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
File:                     Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft (raw, json)
Hash identifier:          8bJ/l05hc4r67dmoV3FoTafJm8yyKDqdRWeMyUYY1No=
Subject key identifier:   BA:B4:1B:46:2C:44:A1:7E:25:0A:0C:6B:0C:80:44:CE:F4:4A:45:E7
Authority key identifier: 1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A
Certificate issuer:       /CN=A91AFC4E/serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
Certificate serial:       0580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
Manifest number:          0577
Signing time:             Sun 20 Sep 2026 23:09:31 +0000
Manifest this update:     Sun 20 Sep 2026 23:09:31 +0000
Manifest next update:     Sun 27 Sep 2026 23:09:31 +0000
Files and hashes:         1: Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl (hash: 2ensMurg4CX8nqoLGfk28lTw7am942030KGBeQ41GBk=)
                          2: B5F911E8429411EC8882FA1EC4F9AE02.roa (hash: /+VDsq15X1B0EicipfKhRf/bc7zJlndTh+wNdlKxteI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl
                          rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFC4E, serialNumber=1EFEDA34287F858DDCF4DCE8428C33B61C41D99A
        Validity
            Not Before: Sep 20 23:09:31 2026 GMT
            Not After : Sep 27 23:09:31 2026 GMT
        Subject: CN=6ab067ab-667a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:be:cd:17:4a:84:51:60:97:41:7e:47:a5:30:
                    c2:06:5a:32:64:20:ae:12:30:ed:6b:1f:c4:8c:b9:
                    60:30:c0:c7:c6:f6:56:e7:aa:72:82:d9:a5:56:a7:
                    b2:22:49:2a:2f:5a:ad:d1:c7:15:00:31:62:99:d4:
                    b0:e9:07:7b:3f:3d:bc:f0:f3:e3:70:b2:22:ac:4a:
                    2b:0e:ba:f8:b4:0e:a5:ca:5c:a7:43:68:d2:b3:5c:
                    3b:10:ed:a0:46:5b:5c:31:0d:cc:9f:0a:8e:c2:54:
                    2f:92:20:52:e3:17:9f:64:ba:85:95:d7:9a:5c:89:
                    77:44:80:65:b3:e4:ba:6d:3e:b4:d4:ac:71:e6:f0:
                    f5:fd:bf:93:4d:41:d9:13:12:9a:60:50:b3:2b:91:
                    ad:27:cf:fd:a2:7a:f8:65:47:b4:4b:60:94:68:ac:
                    8e:8b:f6:58:d5:24:bc:81:68:1c:d5:a0:3f:e5:0f:
                    eb:93:18:8c:04:6a:e6:2e:60:d3:40:90:21:8a:27:
                    d9:c3:71:47:7c:3d:22:40:04:37:18:e6:3d:03:a8:
                    59:3e:fd:8d:da:14:58:c1:b8:7e:ad:a7:4e:17:60:
                    63:a3:19:c8:61:56:66:60:b7:33:7f:9f:e7:07:19:
                    b7:a1:fa:bf:e0:ad:cb:cf:f6:35:40:21:d4:fb:ae:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B4:1B:46:2C:44:A1:7E:25:0A:0C:6B:0C:80:44:CE:F4:4A:45:E7
            X509v3 Authority Key Identifier:
                keyid:1E:FE:DA:34:28:7F:85:8D:DC:F4:DC:E8:42:8C:33:B6:1C:41:D9:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv7aNCh_hY3c9NzoQowzthxB2Zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFC4E/FB221D40429011EC9D21A316C4F9AE02/Hv7aNCh_hY3c9NzoQowzthxB2Zo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:26:93:26:56:75:6d:74:8c:ea:78:79:08:ee:8a:3e:cf:98:
         62:27:f8:e3:db:68:11:88:c8:a3:d0:fc:c8:d4:30:e8:4e:6c:
         95:16:f1:52:61:ca:b3:f1:c1:e6:80:21:ae:cb:47:17:b9:ee:
         fe:36:9c:ec:5d:2d:6a:b5:b2:59:7f:af:7c:b9:05:ce:03:c7:
         57:dc:49:7a:ff:85:9f:26:75:1e:7a:f1:fe:c5:7e:58:42:6c:
         b2:ac:8d:cc:6a:7e:a5:ad:be:47:bb:e2:af:7b:0e:8f:c3:52:
         f7:91:42:ae:2a:67:fc:62:aa:a9:dc:c1:d5:46:78:9c:15:83:
         78:2c:1e:c0:d0:23:ad:fe:28:ac:5f:74:19:5f:7c:54:14:58:
         2c:2f:27:e4:99:30:e2:ca:33:07:c2:fb:80:92:1f:1e:4e:16:
         e6:85:13:28:6d:8e:ca:68:4c:30:9c:2f:24:ce:02:8b:03:b8:
         35:c9:d7:61:88:43:3d:9a:d6:29:df:c5:56:25:f6:5d:ff:78:
         28:48:40:a4:c6:de:76:b6:8f:d9:32:be:e9:4e:68:d6:5b:30:
         a5:6c:86:5a:31:91:26:e5:54:42:61:88:35:90:0a:5a:5a:2b:
         8a:21:38:d5:db:a0:7c:5c:0d:dd:01:3a:e4:d0:ca:b1:c7:d2:
         5a:f0:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:17:54 2026 by rpki-client