Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          5vY2dAPfFhDQB31uNFOl+KEz9a4W60UItfV++zh/GXk=
Subject key identifier:   F4:D4:5C:74:47:A1:62:85:D4:0A:4C:AF:99:13:BC:43:1B:D3:9C:6A
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       35A4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          35A4
Signing time:             Sat 26 Sep 2026 14:22:23 +0000
Manifest this update:     Sat 26 Sep 2026 14:22:23 +0000
Manifest next update:     Sat 03 Oct 2026 14:22:23 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: EMMx1GUGj9BO5/pTJHHxE1KBV6eF51wSjh7OK3SNXCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 14:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13732 (0x35a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: Sep 26 14:22:23 2026 GMT
            Not After : Oct  3 14:22:23 2026 GMT
        Subject: CN=6ab7d51f-ac06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:9e:ad:13:a4:58:63:db:67:de:d1:9b:9f:
                    81:fd:c7:2a:33:a3:f6:f7:30:be:f1:f1:e9:02:e0:
                    d8:f6:f4:9c:0e:89:bd:e9:1e:4a:66:15:cf:7a:a7:
                    8c:ac:99:58:5f:af:0f:64:ff:2d:e2:07:58:e9:ed:
                    5c:7a:a5:19:bc:5a:80:76:73:33:6e:a5:20:82:fb:
                    60:a3:08:46:13:80:e7:bd:34:7d:0c:29:a1:38:1e:
                    7c:12:bc:a2:4d:85:fb:06:f9:dc:27:52:63:81:e4:
                    b3:4f:16:8e:9b:1f:85:85:94:74:60:57:71:56:7b:
                    87:dd:1c:40:d0:57:97:4b:ec:8a:66:3e:bf:ab:ac:
                    ff:fd:ec:53:cc:f0:20:fb:21:a9:7f:ab:f7:68:25:
                    60:24:9c:e3:43:0c:95:b0:29:a0:93:b9:1e:1b:ce:
                    e4:ca:a6:e7:8d:bb:ab:1b:ee:0d:26:ff:8e:f4:67:
                    20:78:74:a6:a9:0b:c5:d3:27:89:e9:30:35:85:a0:
                    ee:fb:ad:bb:c3:d5:db:bc:57:1c:dc:9a:39:a8:ed:
                    17:ad:63:8b:65:87:2d:74:ac:70:f5:85:9c:b0:d3:
                    46:46:c5:36:09:d8:ca:19:d9:49:95:3f:5d:ce:89:
                    fb:ae:f9:b4:25:9d:a0:19:34:48:24:e0:88:83:8f:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D4:5C:74:47:A1:62:85:D4:0A:4C:AF:99:13:BC:43:1B:D3:9C:6A
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:c5:3d:ee:84:8b:8b:11:3d:98:6b:44:92:5f:ad:2b:75:ea:
         95:9d:ce:91:df:8c:0d:b3:06:a5:b3:95:5f:56:ba:0e:be:bd:
         9a:14:01:db:a9:62:28:fa:52:92:f6:2f:89:12:c5:c2:9b:18:
         b2:34:57:1c:e5:a9:cb:12:6c:48:6c:cf:f4:de:4f:f9:ff:03:
         60:61:c8:ed:f2:86:40:7a:34:d6:fb:c2:12:04:5d:1b:a9:14:
         2c:41:30:cb:4b:a0:4f:37:68:b8:13:87:b3:32:b7:7e:4d:32:
         2a:9c:12:37:10:5c:6b:f9:6c:ff:e6:88:7b:de:3f:ba:fd:63:
         b0:7e:f4:65:60:61:73:d8:d5:e6:75:8e:7c:fd:5a:38:5b:47:
         dc:75:0b:54:ae:cd:5c:5e:16:c4:fd:8d:94:ea:8a:38:5c:a6:
         82:9e:19:10:c6:78:42:39:e9:e6:e1:94:73:fa:74:cd:6c:2a:
         47:44:54:2b:1f:14:91:7c:4b:48:bc:0d:91:8a:2d:ae:59:e8:
         c5:39:a8:b2:9e:0f:a2:1b:79:4d:ee:98:98:fc:75:21:3a:28:
         4e:09:85:34:35:9b:0c:6d:94:36:cc:d1:b1:52:3e:c9:5e:8b:
         3e:35:35:57:51:66:40:3d:b0:91:9f:6b:1f:b1:40:bb:56:ed:
         97:75:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:28:06 2026 by rpki-client