Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
File:                     Hv520ajcbNAkyzz0B5Cl8UosITg.mft (raw, json)
Hash identifier:          D9zCmLTLfkhVTKKzQc8iG/vNv4NEvG1PmUHlfoi3RbA=
Subject key identifier:   13:44:4D:F0:58:C4:58:D5:80:19:49:78:36:B1:D3:0F:2F:38:8A:89
Authority key identifier: 1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38
Certificate issuer:       /CN=A91DB7B3/serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
Manifest number:          0571
Signing time:             Fri 12 Jun 2026 23:22:24 +0000
Manifest this update:     Fri 12 Jun 2026 23:22:24 +0000
Manifest next update:     Fri 19 Jun 2026 23:22:24 +0000
Files and hashes:         1: Hv520ajcbNAkyzz0B5Cl8UosITg.crl (hash: fnOQ5ixXyCqa6/35tHYWstKhbIc9N/vCwqBeQ9tM/rw=)
                          2: E52DE77630B611EC981BBF1CC4F9AE02.roa (hash: PcJZfXfLy1L3lPjl8IWMOAup670DbyOJDvUTrpg2JcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl
                          rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB7B3, serialNumber=1EFE76D1A8DC6CD024CB3CF40790A5F14A2C2138
        Validity
            Not Before: Jun 12 23:22:24 2026 GMT
            Not After : Jun 19 23:22:24 2026 GMT
        Subject: CN=6a2c94b0-5a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:b4:98:7f:53:e5:30:b0:b5:73:95:16:d9:
                    e5:63:de:5b:0f:82:85:54:ac:68:88:23:86:98:03:
                    b9:5a:c3:5e:57:02:b5:e0:8a:91:f7:6d:30:8f:ff:
                    28:98:91:92:af:40:bc:21:af:3b:4b:ef:f4:0b:74:
                    a0:82:5a:9b:cc:af:68:c6:b6:c7:fa:14:dd:12:a8:
                    a9:77:1f:da:67:86:ec:03:1c:1f:a5:57:3d:b6:4b:
                    80:83:c0:c7:c2:12:2b:28:63:00:47:d1:4b:32:c4:
                    d3:36:25:ee:13:91:32:39:60:64:fe:51:ea:9c:f6:
                    04:29:04:56:06:9e:f6:47:16:01:f1:f3:31:d7:2f:
                    c2:21:aa:fa:a9:64:4d:fb:4e:03:82:1c:ca:1c:99:
                    c2:0b:c3:a7:08:81:d0:29:95:68:d6:9f:f8:f4:71:
                    d9:5e:be:27:01:5d:c1:d1:75:01:8a:ed:8c:2e:f3:
                    00:bd:2d:9e:0d:9c:4f:bf:21:58:a6:09:b3:6a:e1:
                    ab:9d:d0:b5:7e:cd:d4:85:84:57:0b:13:27:5e:f3:
                    00:0f:83:b5:d0:e3:0e:4c:c6:9a:b6:ad:c3:df:83:
                    ef:1a:6f:99:9c:dc:32:cd:5c:ef:e2:d3:56:9a:8e:
                    6e:bd:90:d9:ba:1f:8d:35:0e:32:4f:50:d9:2c:52:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:4D:F0:58:C4:58:D5:80:19:49:78:36:B1:D3:0F:2F:38:8A:89
            X509v3 Authority Key Identifier:
                keyid:1E:FE:76:D1:A8:DC:6C:D0:24:CB:3C:F4:07:90:A5:F1:4A:2C:21:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hv520ajcbNAkyzz0B5Cl8UosITg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB7B3/2FD815EC30B411EC80609275C4F9AE02/Hv520ajcbNAkyzz0B5Cl8UosITg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d1:26:7d:33:98:16:8f:d0:2f:a8:3b:1a:78:39:8f:bd:1e:
         47:38:a5:83:2b:3a:7d:a6:98:a8:e1:b7:ec:42:6f:3f:08:22:
         7f:58:b7:c5:81:2a:58:f7:37:f3:ee:ba:56:45:92:9d:b8:e2:
         86:44:b3:64:e8:c0:01:30:d9:25:40:e1:62:ef:5b:e4:d0:63:
         c4:f2:d0:c4:1a:a4:3d:7a:75:7c:82:0c:7d:4d:00:d7:1f:c7:
         51:68:c9:05:5c:42:5b:e0:a7:16:6f:83:39:49:46:b1:6c:bf:
         24:4e:4a:a2:43:98:99:37:39:1a:9c:35:b3:c8:1a:99:94:5a:
         35:dd:d3:91:03:28:8d:49:83:c0:ed:ea:43:da:c1:13:ab:6a:
         5e:5e:7d:8c:ad:7f:8b:ae:02:7d:08:9a:96:16:6e:ff:20:fb:
         e5:0d:12:f8:9b:58:83:a7:3e:c2:65:0e:8a:6f:7c:71:cd:f4:
         7a:fa:5e:02:85:71:d5:dc:4b:fc:0d:db:5a:da:85:95:22:73:
         a0:d9:3e:41:68:08:59:18:a8:58:77:47:b2:ce:11:44:88:ec:
         ca:54:b3:8e:96:d3:2c:4f:dc:4c:8d:38:02:1d:6b:67:81:26:
         af:8a:4b:8e:8b:43:28:7b:ff:64:30:9c:56:d4:c9:dc:72:79:
         45:cb:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:18:00 2026 by rpki-client