Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
File:                     HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft (raw, json)
Hash identifier:          Gh6+lqxlFrCLVM/lMGglRYroHuCXLznEOmLXw4Mm0Gk=
Subject key identifier:   4F:31:55:0A:A7:EB:B8:12:8F:1D:92:B8:EA:63:50:45:17:5D:99:D6
Authority key identifier: 1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6
Certificate issuer:       /CN=A91F3FAF/serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
Manifest number:          0216
Signing time:             Sun 01 Mar 2026 23:37:28 +0000
Manifest this update:     Sun 01 Mar 2026 23:37:27 +0000
Manifest next update:     Sun 08 Mar 2026 23:37:27 +0000
Files and hashes:         1: HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl (hash: dmX6sqPjTsr4zWfPvfEBGQnUqCzT5uY/bg6Y2KwngJI=)
                          2: 5EDB6B50EE9311EF8EB9700BC4F9AE02.roa (hash: oh8GWEzQtGlGtjvymgIqo4L8CHCprgoVIrX7RTa8ArY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl
                          rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3FAF, serialNumber=1E85A860D62E26079233CB7A01DB0BACBB0369A6
        Validity
            Not Before: Mar  1 23:37:27 2026 GMT
            Not After : Mar  8 23:37:27 2026 GMT
        Subject: CN=69a4cdb8-09ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:1c:be:7e:ed:c4:ca:18:47:5e:22:85:d7:
                    38:82:29:90:c6:4e:9e:e6:cc:10:6a:aa:35:66:be:
                    9d:0f:fb:cb:d0:b4:9b:02:22:45:b2:b3:1f:09:79:
                    d1:2f:91:63:28:68:a3:46:31:06:07:20:66:f4:6a:
                    9d:96:d7:f2:f8:cf:96:08:4a:46:cf:09:bc:09:ba:
                    f5:b4:86:d2:6e:4f:e6:00:82:05:a9:f7:e3:68:60:
                    64:8a:2c:92:59:e4:49:28:65:c7:c3:67:6b:cd:04:
                    4d:35:10:04:f8:7b:ce:6a:d1:b5:97:b1:db:d9:e8:
                    88:20:62:a0:fc:63:30:1a:67:ce:7b:a3:f6:7b:36:
                    96:e6:94:64:1b:bc:93:ea:da:26:fe:10:0f:8e:56:
                    fb:ec:3e:82:6c:1c:61:da:5d:4f:af:89:2d:98:f3:
                    56:00:71:a2:33:84:25:95:f3:82:5a:98:57:bb:bf:
                    09:68:ce:cf:27:0a:92:8a:37:6c:d3:de:50:68:b7:
                    26:52:2e:64:98:84:ad:c8:d5:60:c0:8a:44:12:1a:
                    43:4a:4c:80:69:a0:7a:9d:ad:96:ed:7b:54:c4:ca:
                    2c:f1:75:ea:7b:4a:bd:1e:4a:c1:42:48:36:4a:68:
                    1e:77:81:4f:e0:de:a5:7d:9e:59:02:85:0d:3e:16:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:31:55:0A:A7:EB:B8:12:8F:1D:92:B8:EA:63:50:45:17:5D:99:D6
            X509v3 Authority Key Identifier:
                keyid:1E:85:A8:60:D6:2E:26:07:92:33:CB:7A:01:DB:0B:AC:BB:03:69:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HoWoYNYuJgeSM8t6AdsLrLsDaaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3FAF/A90D1B96415C11EE9D355D2CC4F9AE02/HoWoYNYuJgeSM8t6AdsLrLsDaaY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:67:81:ea:6d:6c:a0:ae:49:97:57:c9:ea:db:b3:74:c6:
         41:5c:a7:8a:7f:75:2c:d7:62:8c:14:8c:b8:65:3e:4e:e0:7a:
         4b:c4:b5:ff:1e:c0:1a:3a:2e:00:34:ea:c3:d0:c3:4c:4e:cb:
         31:38:13:ab:53:5f:db:e1:60:46:da:4f:57:bb:f8:6d:c9:af:
         c7:cd:61:6f:59:28:97:f9:59:05:3d:30:c4:db:dd:49:fa:f6:
         7c:78:b8:03:7a:d7:a7:3f:3d:76:53:59:de:81:11:71:19:0e:
         72:ba:b8:82:79:3c:64:cf:9b:38:64:f6:da:aa:01:d3:62:11:
         80:80:65:2c:51:b1:b0:65:3e:e4:12:f2:ba:14:77:f9:68:55:
         32:1c:01:53:f0:df:75:14:90:d9:23:ef:e7:ef:36:a1:9a:51:
         95:d4:c6:50:df:58:60:a8:00:e7:a4:ab:cb:23:b5:36:37:09:
         d3:89:68:32:b9:33:10:c1:fe:30:2a:ae:5a:9b:81:72:a9:06:
         08:03:ce:19:52:6c:f3:fb:a3:72:05:87:a9:28:53:e6:34:3f:
         3c:95:11:68:3b:41:1a:6a:78:9b:0b:0d:53:e1:19:b4:07:43:
         bd:cb:ea:5d:c5:72:ff:f3:0f:e5:a6:3a:50:3c:49:8c:ce:f7:
         49:5f:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:47 2026 by rpki-client