Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          lDOgtkVmbgrP2/mUoE+wl3ETlWsZ3bkitKiZo3nbhfE=
Subject key identifier:   68:2F:F3:17:78:79:86:71:FC:55:A1:BD:34:AF:69:49:6C:F5:4E:61
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          352C
Signing time:             Sat 28 Feb 2026 14:22:51 +0000
Manifest this update:     Sat 28 Feb 2026 14:22:51 +0000
Manifest next update:     Sat 07 Mar 2026 14:22:51 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: 2X/b4AkN0BFQh52ZffYaWv+92SMvwFbyWs1LbaO9IZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: Feb 28 14:22:51 2026 GMT
            Not After : Mar  7 14:22:51 2026 GMT
        Subject: CN=69a2fa3b-a224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:3c:57:79:1f:4d:8b:44:12:83:51:ad:15:
                    10:85:fd:7f:3f:51:e5:ec:f2:a7:75:30:8d:92:a7:
                    84:e2:cd:df:6d:1e:0d:85:0d:57:61:a6:bd:e7:59:
                    6c:37:e8:d4:77:fb:bd:11:5c:87:37:89:d0:b1:73:
                    ff:5d:2a:4d:a4:de:d1:66:d7:9f:b9:5b:e0:ba:5e:
                    86:2b:97:98:82:ad:c5:1a:2a:69:bd:ae:e5:fd:12:
                    b8:16:f2:0f:7e:d1:71:cd:d4:f0:f3:70:66:77:92:
                    c1:76:90:56:e7:66:ce:63:c2:06:43:3f:38:6b:2a:
                    c3:2a:ee:e6:22:75:0e:c5:25:72:aa:29:7f:f6:ce:
                    03:f6:96:cd:b6:a5:ed:fb:a0:5c:08:08:cc:2b:71:
                    8c:07:6f:e2:db:b2:51:24:a9:c3:f2:9f:a7:d9:bf:
                    6c:fd:5f:b7:9f:81:13:17:16:c2:c4:0a:6d:1a:cb:
                    83:2b:79:61:f8:9c:50:b3:4f:0d:2f:dc:6b:11:5a:
                    93:18:40:43:6c:38:92:9a:45:9e:c9:bc:d4:bb:ff:
                    b9:87:92:9e:ac:91:9e:54:cc:89:f8:12:55:f5:15:
                    93:28:11:75:14:38:42:6e:35:9f:e9:a3:94:c3:03:
                    8c:b4:ad:7e:db:c4:24:29:6f:02:e0:11:ea:2d:16:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:F3:17:78:79:86:71:FC:55:A1:BD:34:AF:69:49:6C:F5:4E:61
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:9f:90:a0:4a:93:17:5d:8e:17:83:36:25:a4:93:c3:e1:
         01:2e:ff:0b:ab:79:33:e6:f1:26:db:db:56:8b:1c:6e:e8:56:
         39:ff:96:72:30:f2:3f:7c:29:22:ee:26:11:53:9c:63:49:0d:
         05:c6:e7:e5:c0:75:89:d2:d1:01:04:dc:ec:cc:6e:6d:0e:a3:
         16:ea:48:39:0b:44:88:6b:ae:81:98:1d:60:ee:1b:b3:ab:ae:
         6b:14:df:81:32:86:c3:ab:f9:68:a0:15:ee:bd:50:1a:fe:e9:
         d8:f9:ac:62:90:44:4c:19:8d:8d:6f:da:96:ea:08:8e:b2:fc:
         17:4c:00:79:ef:42:b7:39:cf:2d:39:d7:14:31:b9:86:d7:98:
         b5:26:ea:a8:23:47:44:7c:7b:4a:97:fa:65:cc:22:a5:f8:72:
         42:bb:c2:08:01:c7:78:26:3a:ed:d5:fa:91:60:f0:15:30:e0:
         ab:9b:ae:fe:7e:68:78:41:df:79:92:33:9f:4c:fe:31:11:89:
         a7:75:7a:21:3e:a9:45:d9:c7:a6:aa:d1:bc:43:53:f8:7e:cb:
         eb:6c:5e:2d:60:76:3b:9a:ed:5a:db:0c:aa:66:b9:b5:be:90:
         c7:34:3f:af:22:e8:86:ed:18:2b:25:74:e6:5f:71:2e:54:a9:
         5b:7e:ee:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:55 2026 by rpki-client