Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          pDWy+OOS44eczGabw9kdrByHBm6hH+3YyxLgpeU/CbI=
Subject key identifier:   24:63:A3:C7:2B:E6:C7:7C:96:06:15:CF:A1:9F:F8:A1:23:A8:4D:E9
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       356A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          356A
Signing time:             Fri 12 Jun 2026 14:22:03 +0000
Manifest this update:     Fri 12 Jun 2026 14:22:03 +0000
Manifest next update:     Fri 19 Jun 2026 14:22:03 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: Yj7sr9rhr2UbnIcWUZ2+q0SppK+mCU/w6dvCoD8rhLc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:22:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13674 (0x356a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: Jun 12 14:22:03 2026 GMT
            Not After : Jun 19 14:22:03 2026 GMT
        Subject: CN=6a2c160b-7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:45:f0:f5:9d:e5:15:d4:78:b7:87:59:d9:
                    26:17:e0:c4:4c:c6:61:6c:83:6b:0d:1c:8e:21:c4:
                    4a:96:4b:9b:33:d6:af:96:ee:0a:de:cc:70:86:66:
                    e2:be:3b:d9:f2:5b:8a:ef:81:b9:d4:d0:9a:63:38:
                    62:7f:04:0a:4c:d0:7f:4a:29:db:f7:9e:65:a4:bd:
                    6e:e3:90:5c:f1:e4:2e:1b:f6:5e:17:66:00:b5:7b:
                    a0:c5:6c:85:f4:6a:fa:ce:49:19:0c:52:b4:6c:cc:
                    70:6f:87:b3:07:67:27:71:5d:45:7c:2a:97:3b:61:
                    47:d7:fe:e7:b2:fe:bf:dd:c9:b3:80:f9:25:96:31:
                    a5:65:f2:e6:cd:6f:9b:77:34:48:27:e2:ef:8a:ff:
                    66:67:4b:b1:63:10:78:f5:94:04:db:ad:87:e0:b4:
                    a0:8f:50:4f:b7:ab:66:4d:d8:e0:47:21:c6:99:f5:
                    86:69:c9:78:2e:2b:79:80:66:46:75:6c:63:3a:39:
                    7f:bf:0e:84:f0:98:54:04:c4:0c:de:c8:35:67:df:
                    48:03:34:c7:6a:19:e0:ae:85:c2:80:d5:02:2c:ea:
                    2a:55:b3:3c:25:b3:db:0b:0f:f6:e8:d0:ae:6e:c0:
                    6d:cd:b1:ab:2d:88:f5:a2:76:9d:12:57:f3:8d:24:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:63:A3:C7:2B:E6:C7:7C:96:06:15:CF:A1:9F:F8:A1:23:A8:4D:E9
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f2:31:11:64:c0:1c:c2:ac:77:33:cb:55:ce:4e:69:78:95:
         c9:87:2b:d2:98:5d:55:e5:23:09:56:3a:c6:fc:17:af:83:f8:
         f6:69:90:44:2a:08:da:de:79:18:4a:06:31:bc:6a:d2:e4:1d:
         d9:93:10:be:fd:7b:4c:af:ba:1c:0a:2b:f3:f8:70:b5:5e:93:
         5e:c4:35:3d:c9:dc:15:b8:40:53:f1:04:54:54:3c:e1:c4:c8:
         8f:59:d0:31:80:5b:5d:d0:fa:3b:bc:56:cf:af:8e:9f:42:3d:
         81:11:4a:39:e7:f3:07:9a:e0:60:cc:d4:5a:72:70:1e:4b:0a:
         d1:52:7d:ab:36:90:5c:d2:37:d1:45:5a:4e:17:2c:6f:3e:f5:
         80:9d:e2:72:32:a4:59:5a:24:7c:15:24:4d:38:9a:fe:9f:09:
         0b:cc:8d:bb:dd:29:e3:d0:63:f5:59:6b:98:e1:a4:8a:1a:ad:
         88:6f:a5:1a:89:2e:d6:8c:ee:42:8e:3b:3b:1e:a4:4e:f1:80:
         6b:27:76:3d:89:95:6e:40:75:90:2b:66:86:30:d6:81:71:74:
         a7:1e:7a:38:b5:ab:f2:d7:09:9d:89:38:64:64:08:2e:71:b9:
         68:c8:d8:a3:31:f2:3b:04:6d:57:3c:73:03:42:d6:9a:d8:fd:
         98:b6:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:38:23 2026 by rpki-client