Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
File:                     HVvjkVLqbW3wn52ErGmpYbfIOG4.mft (raw, json)
Hash identifier:          /85hNID2dTNDZN9pl3n7a64hgwxtcrp7roqGvUF5GPI=
Subject key identifier:   F5:4E:9B:D7:48:F1:2D:55:16:44:C3:55:95:5A:7F:45:BC:A4:83:4A
Authority key identifier: 1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E
Certificate issuer:       /CN=A91F43F2/serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
Manifest number:          77
Signing time:             Sun 01 Mar 2026 09:07:42 +0000
Manifest this update:     Sun 01 Mar 2026 09:07:42 +0000
Manifest next update:     Sun 08 Mar 2026 09:07:42 +0000
Files and hashes:         1: HVvjkVLqbW3wn52ErGmpYbfIOG4.crl (hash: O46rwFiCXEkx4uMRqZcplOWZV2sLNPUbUuFWOLtIyEU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl
                          rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F43F2, serialNumber=1D5BE39152EA6D6DF09F9D84AC69A961B7C8386E
        Validity
            Not Before: Mar  1 09:07:42 2026 GMT
            Not After : Mar  8 09:07:42 2026 GMT
        Subject: CN=69a401de-bdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:33:fd:b9:e5:c1:50:06:f7:9e:fd:c4:3a:
                    46:bc:fd:16:fb:b1:c3:58:54:45:99:e2:d8:66:b7:
                    a5:ef:5d:56:ba:37:7a:3f:c7:46:2d:d1:b5:7c:6f:
                    6f:6d:a2:c2:bd:93:01:d9:b5:79:6b:af:6b:ba:6e:
                    97:47:d0:97:d8:5d:1e:65:eb:2c:d5:1d:51:ef:17:
                    37:85:a8:9f:4a:bd:48:04:2b:90:b7:9d:e1:67:2b:
                    0a:d6:10:e7:1c:8b:ce:9b:4e:c5:1f:95:85:b1:27:
                    73:5e:c5:65:63:0c:5f:98:78:5b:a7:5d:e5:f8:a0:
                    c3:ec:ae:97:4c:cf:9a:f4:09:6e:c5:34:16:d2:29:
                    ef:7f:2e:68:47:75:62:0f:9d:d0:79:cf:6d:ba:0f:
                    53:8b:5b:4d:ab:17:1a:a4:8a:e6:8f:3d:7b:9f:25:
                    ae:bd:39:3c:95:ca:5f:1e:8c:bf:7c:d5:01:9a:67:
                    d0:02:2e:fb:a5:fb:ff:7c:56:97:9a:fc:51:78:5c:
                    7f:b3:45:45:c0:77:25:66:91:28:11:6d:21:d3:8d:
                    82:8a:e4:96:de:1c:10:2f:19:87:06:16:64:9d:45:
                    9f:8d:ba:75:5f:fd:29:91:6f:a5:ec:d1:33:88:a5:
                    be:ee:6f:98:70:c2:98:16:ed:ef:5e:f8:2a:e8:56:
                    05:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:9B:D7:48:F1:2D:55:16:44:C3:55:95:5A:7F:45:BC:A4:83:4A
            X509v3 Authority Key Identifier:
                keyid:1D:5B:E3:91:52:EA:6D:6D:F0:9F:9D:84:AC:69:A9:61:B7:C8:38:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HVvjkVLqbW3wn52ErGmpYbfIOG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4C04F06A60C011F0AFB4572BC4F9AE02/HVvjkVLqbW3wn52ErGmpYbfIOG4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8d:83:b0:d7:93:ce:39:bf:93:6d:c0:28:43:75:9a:8a:53:
         a1:67:7b:86:ac:60:6e:7a:5c:ef:74:71:f1:e5:88:71:0c:f3:
         9a:95:7c:b5:4c:f2:4e:af:e9:15:74:38:5f:2d:68:cd:e2:73:
         ca:34:21:56:c1:c0:5a:67:99:44:c1:fa:9a:17:64:cb:36:fa:
         85:fb:80:61:96:12:56:44:e4:bf:cf:fc:1b:66:43:10:60:9f:
         b0:c0:c0:af:df:40:ca:4a:2b:f8:9f:59:30:ff:f9:30:eb:75:
         68:21:b2:cd:85:2f:96:ca:c3:af:fb:3d:c9:5d:f2:f7:05:a4:
         af:4a:01:73:45:77:ab:5d:8d:13:b9:cd:1b:7e:64:ca:8c:1e:
         8c:1f:1c:5f:37:c5:ec:9f:35:77:c6:61:90:48:66:11:ce:94:
         1c:ba:a8:27:2c:53:ed:79:09:18:28:57:ff:08:ca:e7:84:10:
         a7:f0:a2:a6:a8:0f:46:be:d8:11:1c:3c:2e:12:da:8b:7b:87:
         6f:d7:63:45:b4:33:9c:ac:d9:22:33:da:d3:d2:83:95:ae:3d:
         24:91:ee:8e:7c:88:33:dc:c2:eb:9d:8e:f5:c3:20:4c:37:2b:
         66:0e:9a:e7:09:8a:3a:a2:88:d1:7d:13:3c:c8:d1:2e:8f:52:
         1d:4a:d1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:17 2026 by rpki-client