Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
File:                     H4-gq_qNf39-fqANVuoBxwky5gc.mft (raw, json)
Hash identifier:          0PhN2HB9fOK5vXj6nBVj0YBTom+uLAUlJz0b0rnXgdM=
Subject key identifier:   7C:C2:25:10:40:11:0E:D2:3E:37:87:E0:F3:38:B0:98:59:A0:01:55
Authority key identifier: 1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07
Certificate issuer:       /CN=A91BDD82/serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
Certificate serial:       0F32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
Manifest number:          10F4
Signing time:             Mon 02 Mar 2026 17:35:06 +0000
Manifest this update:     Mon 02 Mar 2026 17:35:05 +0000
Manifest next update:     Mon 09 Mar 2026 17:35:05 +0000
Files and hashes:         1: H4-gq_qNf39-fqANVuoBxwky5gc.crl (hash: 6i/ZUa2yLt10zaaQ6WKOWOAH+YGfZ7k9UX8rhuZl+HA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl
                          rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3890 (0xf32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDD82, serialNumber=1F8FA0ABFA8D7F7F7E7EA00D56EA01C70932E607
        Validity
            Not Before: Mar  2 17:35:05 2026 GMT
            Not After : Mar  9 17:35:05 2026 GMT
        Subject: CN=69a5ca4a-b002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:db:46:70:a8:88:bf:67:7b:77:28:4e:cb:
                    c0:19:93:e9:e9:2c:3e:4c:2d:c8:81:f0:94:fd:9d:
                    f8:a0:47:20:0d:0a:2e:a9:7d:43:24:a2:b5:c6:18:
                    70:99:7a:ce:be:7c:19:1d:07:ad:7b:a7:9d:b1:b7:
                    e4:af:d0:2a:b5:84:d7:4e:24:3c:08:80:34:6a:59:
                    aa:68:f9:d2:ae:e6:8c:03:86:62:b0:b2:e1:92:96:
                    15:38:1a:7c:d4:22:2f:80:80:ae:35:9e:1d:2a:2e:
                    93:a7:85:63:44:e9:71:8d:2d:39:56:7c:a3:eb:ea:
                    4a:fe:5e:55:9e:ce:95:48:8e:25:01:7e:f5:36:e6:
                    f5:59:86:88:17:b2:a5:54:c6:60:15:c9:c5:39:ca:
                    db:73:32:6b:40:87:ef:0d:04:1a:26:f2:00:d1:15:
                    ce:de:48:cd:cd:cc:1b:a5:87:be:f9:82:3f:98:ed:
                    3e:e7:cb:36:14:0b:72:3f:1f:2b:bf:1d:54:b4:76:
                    f3:63:a6:36:4a:87:ad:95:52:ab:0b:5c:71:85:b8:
                    a1:fc:26:34:7b:63:71:3f:e3:2c:1b:db:6b:3b:a4:
                    a5:0a:3a:ce:31:e1:44:e1:41:12:14:3d:fb:40:bc:
                    86:d9:47:a4:74:17:69:23:44:25:ab:67:52:5c:bd:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:25:10:40:11:0E:D2:3E:37:87:E0:F3:38:B0:98:59:A0:01:55
            X509v3 Authority Key Identifier:
                keyid:1F:8F:A0:AB:FA:8D:7F:7F:7E:7E:A0:0D:56:EA:01:C7:09:32:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H4-gq_qNf39-fqANVuoBxwky5gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDD82/197F9D9291E211E99768890EC4F9AE02/H4-gq_qNf39-fqANVuoBxwky5gc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:71:f1:ce:b7:1c:bd:6a:59:f1:d3:6f:d5:0b:72:cc:c7:ae:
         c5:2a:91:a8:96:23:7a:50:f2:45:5d:50:17:1d:a9:b5:e5:0f:
         26:98:ce:64:66:fa:ba:91:d7:e1:ac:76:e0:c5:0d:00:1a:b3:
         4a:4a:3b:b7:b8:bc:0c:81:40:24:bc:cf:61:3d:91:ed:2f:86:
         7e:28:31:c8:82:91:01:c1:75:b7:78:fa:40:3e:79:09:0b:75:
         ea:00:42:ea:65:95:58:f3:3c:dd:6c:63:ff:3e:d0:9a:21:ec:
         90:a8:7c:a7:f0:dc:7f:5a:0e:e8:69:8f:97:67:10:bd:55:42:
         f4:62:e5:16:37:1d:5d:59:1d:08:fb:f9:23:91:1e:24:dd:38:
         ab:c6:6d:cb:22:93:a9:a7:6f:31:45:ff:52:dd:28:4f:69:b2:
         1d:b3:94:b1:81:79:2b:d6:41:74:2c:69:aa:3b:f8:7b:4f:2c:
         3a:1a:31:5d:b3:d3:ed:cd:df:e4:ce:92:1f:34:d7:84:24:a6:
         c6:4e:58:56:68:9e:6a:4a:0d:f8:e7:b9:20:9f:29:58:50:2b:
         87:92:36:dc:23:82:21:85:ec:a3:12:06:d0:37:0f:ae:cc:ba:
         c2:a1:37:31:34:30:e3:ac:0e:6c:1a:d8:0f:79:e6:83:ec:01:
         67:fe:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:02:05 2026 by rpki-client