Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
File:                     hDJHwKwYH8NmZqRDchryHZ2mUNo.mft (raw, json)
Hash identifier:          7fCnKuxiEwZVyHQRgRrcpckTTa6/v7WHNMidhYE/yhk=
Subject key identifier:   E2:A0:42:E1:46:88:B8:C8:11:86:44:C0:49:F1:D8:33:40:B3:3C:40
Authority key identifier: 84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA
Certificate issuer:       /CN=A91CEAE0/serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
Certificate serial:       0155
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
Manifest number:          0153
Signing time:             Mon 02 Mar 2026 15:14:00 +0000
Manifest this update:     Mon 02 Mar 2026 15:14:00 +0000
Manifest next update:     Mon 09 Mar 2026 15:14:00 +0000
Files and hashes:         1: hDJHwKwYH8NmZqRDchryHZ2mUNo.crl (hash: jBP4A6jxyNL+92pt0c39Gtn7RK8TcArrKps7w67CuHw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=843247C0AC181FC36666A443721AF21D9DA650DA
        Validity
            Not Before: Mar  2 15:14:00 2026 GMT
            Not After : Mar  9 15:14:00 2026 GMT
        Subject: CN=69a5a938-bb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:bb:76:71:9f:50:19:28:59:5a:dc:c1:74:
                    83:fb:1a:0a:17:59:7c:65:17:36:24:35:0a:b1:06:
                    0b:f4:38:45:65:66:8a:fe:2a:47:7e:91:bc:5a:17:
                    db:4f:54:05:47:1a:54:36:97:be:87:c5:91:21:56:
                    d2:81:79:1c:d4:f2:73:6e:64:73:3e:e7:dd:37:1c:
                    40:55:2d:65:f7:35:39:14:b2:bf:c5:0e:a9:f8:0c:
                    11:51:39:61:68:97:0c:57:be:46:37:fd:32:c0:84:
                    49:7a:d6:a9:46:2e:d5:68:8b:20:7b:06:bd:43:0e:
                    9b:01:1c:16:be:2c:84:f4:d5:e8:8b:ec:ce:4a:3f:
                    a6:13:5e:35:79:05:1c:70:f8:71:e1:98:20:a7:83:
                    a0:71:ae:a4:98:5d:b6:fa:ed:05:ea:e7:cd:17:cc:
                    15:d6:61:52:56:d8:0d:96:60:7a:bb:44:41:a6:19:
                    91:2b:40:7c:ce:30:9b:79:c0:64:0a:0e:08:56:e5:
                    cb:44:e2:9e:dc:48:43:10:c1:ac:49:b3:05:e1:e6:
                    e7:70:1a:35:f4:69:d4:34:1c:a4:cf:d6:b6:6a:cc:
                    a5:6c:03:a7:b0:ba:73:7a:87:dc:6b:ba:ea:0e:4f:
                    95:0f:5f:ea:ff:45:e9:87:c6:23:59:ed:72:ba:52:
                    1c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A0:42:E1:46:88:B8:C8:11:86:44:C0:49:F1:D8:33:40:B3:3C:40
            X509v3 Authority Key Identifier:
                keyid:84:32:47:C0:AC:18:1F:C3:66:66:A4:43:72:1A:F2:1D:9D:A6:50:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDJHwKwYH8NmZqRDchryHZ2mUNo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/BC521A54190A11EFA90EC929C4F9AE02/hDJHwKwYH8NmZqRDchryHZ2mUNo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:35:8d:2b:5e:dd:a1:e1:b1:e0:79:08:61:21:07:77:ce:b8:
         e3:5f:74:9f:d8:85:67:61:6e:3f:5a:04:74:6b:4e:93:4c:a6:
         b8:f0:44:07:a4:d0:77:11:a7:a5:76:7e:ca:ec:ef:12:e1:d0:
         2a:d9:b4:0f:93:92:b6:82:7b:f1:72:47:96:ed:d7:91:e1:37:
         1c:ae:0c:b9:66:19:c7:55:e8:20:cc:0f:57:5b:5d:a6:95:a1:
         88:6e:0b:00:f7:87:d2:c3:d7:6b:2d:57:dd:38:9e:8a:f0:a6:
         64:1e:d4:0c:cc:02:56:ec:a4:c5:07:c4:e8:08:12:89:7d:07:
         09:15:d9:18:00:94:5e:ee:7e:4e:6a:0b:b3:4e:00:d3:3d:71:
         87:f9:11:99:ba:07:cf:81:45:ac:3e:e0:46:2f:16:1e:dd:20:
         ae:d4:47:f4:e8:66:79:23:c0:57:33:6e:aa:15:c5:e2:26:de:
         cb:dd:a9:14:92:1e:0d:e0:a9:99:1c:09:a3:0c:71:0d:ef:57:
         40:9e:bb:02:e2:39:8e:6b:8d:2e:af:02:7f:6d:b4:7a:34:69:
         14:c5:b6:47:e5:cb:6f:a7:a9:3d:01:4d:ec:75:ed:22:d8:c5:
         de:bb:d3:2c:52:7f:f2:1e:36:93:07:d8:b9:0f:ca:39:a0:00:
         6d:78:5b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:15 2026 by rpki-client