Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
File:                     Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft (raw, json)
Hash identifier:          UGtL6SPu0hlyqRhQxpNavF95CRw6/EvnsSfUt65DJXw=
Subject key identifier:   EC:7B:A4:33:6A:09:18:A7:AE:7A:EF:F5:18:EB:DC:65:40:12:6C:B5
Authority key identifier: 1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D
Certificate issuer:       /CN=A91CFA8D/serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
Manifest number:          075E
Signing time:             Mon 02 Mar 2026 00:07:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:07:29 +0000
Manifest next update:     Mon 09 Mar 2026 00:07:29 +0000
Files and hashes:         1: Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl (hash: wJfPZSQ+m8nc3avJFBW6CdGAdQOH1iWKyWPBpruBkX8=)
                          2: 6AA36A7E564D11EB8B387024C4F9AE02.roa (hash: FdR4cJFggt3ghkSLs8FW6NUcy7CkfyfswvELLmGkH5M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFA8D, serialNumber=1DEBB7371AB97BB9F3A906EB07D591C9CF388D5D
        Validity
            Not Before: Mar  2 00:07:29 2026 GMT
            Not After : Mar  9 00:07:29 2026 GMT
        Subject: CN=69a4d4c2-8cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:78:d0:b2:33:d6:24:2a:5b:28:ec:47:ed:9f:
                    c5:4a:38:f7:bd:f8:ae:65:8d:82:67:97:a9:c6:ba:
                    30:e3:10:9b:25:0f:d9:41:0c:eb:96:f4:e6:1a:00:
                    3e:44:ad:cd:63:98:a5:54:de:dc:05:6c:5f:66:bd:
                    47:41:5b:86:e0:e5:b4:87:db:48:3a:19:7c:f3:ac:
                    1f:cc:8d:7c:af:81:b0:9a:7a:dd:74:ba:dd:87:20:
                    d1:d7:b2:4b:9b:d2:e9:28:c4:8c:83:d7:5c:ed:03:
                    64:6d:4b:0b:7e:08:fd:c4:93:f6:3a:d9:1d:79:78:
                    4b:ed:fa:00:6f:de:ac:9e:db:e0:52:9d:52:77:55:
                    cc:33:b0:b9:91:61:e0:11:8f:ed:05:f8:55:0c:9e:
                    5b:6b:8d:a3:b5:d1:5c:8d:67:75:ef:2d:73:1f:be:
                    73:c6:4f:9c:d9:c9:39:c1:ce:fe:52:24:da:97:1c:
                    6f:48:c5:eb:bf:49:e3:4b:6e:07:f9:75:d4:4f:5e:
                    5e:04:37:fb:1b:a0:26:c7:30:1d:9a:bf:5e:87:53:
                    c7:d0:12:4c:ee:08:cb:13:85:42:c8:ff:95:ee:aa:
                    bd:92:4b:f3:12:77:a3:0d:9b:e7:cb:6f:c5:08:79:
                    b0:3b:25:57:0b:fa:71:1e:d4:9d:63:21:37:ca:db:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:A4:33:6A:09:18:A7:AE:7A:EF:F5:18:EB:DC:65:40:12:6C:B5
            X509v3 Authority Key Identifier:
                keyid:1D:EB:B7:37:1A:B9:7B:B9:F3:A9:06:EB:07:D5:91:C9:CF:38:8D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Heu3Nxq5e7nzqQbrB9WRyc84jV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8D/56FEFF80564B11EB8FE9B421C4F9AE02/Heu3Nxq5e7nzqQbrB9WRyc84jV0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ae:11:4c:e5:e5:a2:d8:32:55:21:ea:38:71:5a:a2:66:31:
         90:9c:47:6d:eb:a8:a6:bf:33:fe:e6:79:ed:df:19:e2:6a:c4:
         03:33:40:eb:5d:e3:46:05:a9:7d:44:a6:d6:f8:53:7e:19:61:
         49:09:b3:d6:d7:21:03:12:30:c7:0d:79:bf:68:d6:1e:93:4d:
         88:d8:56:2d:36:8d:c7:b8:11:24:d1:bd:7e:4d:e3:37:e0:61:
         56:10:60:36:37:fe:4a:6b:8a:88:91:89:f7:7c:dc:3c:6d:34:
         d5:2a:12:9b:55:a0:f8:61:a5:32:f4:b5:6b:e0:ac:82:2d:d2:
         cc:cc:16:75:91:b2:8f:d8:aa:1d:01:de:9e:31:ad:a0:ab:63:
         3c:22:26:05:c7:b8:52:1a:51:2c:c0:d0:d8:df:fe:77:24:a1:
         db:21:21:01:0c:10:cf:2f:4d:fc:a9:e6:2a:14:79:5f:aa:9c:
         f8:f2:cb:14:71:04:5a:06:41:43:cf:70:5d:2c:ca:fd:ee:99:
         92:b0:af:3d:01:56:0c:c8:21:3c:79:c9:4a:66:86:b5:e1:81:
         e6:14:9e:49:e8:d7:28:71:4e:ce:fb:c6:fd:39:15:e6:1c:07:
         22:b0:dc:8a:7d:87:e1:69:00:84:fe:ff:6c:d7:b8:92:ec:1a:
         01:57:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:20:58 2026 by rpki-client