Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          3M0AOeIn9AnLYsERWZ+GFaLHfKQJJZnIPfW9NzPAMYQ=
Subject key identifier:   B4:C9:E7:79:64:C9:54:F0:1F:BB:0F:C6:2F:5A:8D:6E:DC:D6:35:35
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0C1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0D13
Signing time:             Thu 16 Apr 2026 18:43:56 +0000
Manifest this update:     Thu 16 Apr 2026 18:43:55 +0000
Manifest next update:     Thu 23 Apr 2026 18:43:55 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: pwfZmrYG7AEK4LRxJE9gnDRGmei8NulOi5UtTYCVWdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3098 (0xc1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Apr 16 18:43:55 2026 GMT
            Not After : Apr 23 18:43:55 2026 GMT
        Subject: CN=69e12deb-10e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:5e:83:38:33:f0:a1:0b:79:9c:83:63:0d:
                    5f:ba:30:01:df:c5:1b:72:8d:09:f4:7d:c7:64:c3:
                    bb:cf:cf:cc:f5:d6:4b:f8:a5:bd:5f:3a:81:93:41:
                    b1:28:5b:89:3d:71:60:c1:20:ca:79:40:8d:62:a2:
                    23:ea:a7:75:64:58:06:8c:31:be:82:3f:f0:c9:36:
                    a3:a9:2b:b6:dd:86:93:d4:7d:d7:71:ba:f4:76:01:
                    a4:66:32:32:cc:10:b0:f6:fd:aa:8f:af:a7:92:c6:
                    55:b8:62:ff:ae:06:55:a4:91:53:57:ea:c6:35:b5:
                    b8:e2:a9:24:b4:c7:da:9f:35:47:10:7f:c2:ed:2b:
                    40:6b:a6:6e:b2:b6:a8:27:d6:27:9d:78:be:1b:f8:
                    ac:24:b5:a6:96:e1:0f:e1:dc:aa:c2:7a:ce:f3:98:
                    ba:de:f2:3a:00:5f:4d:89:20:50:17:dc:b4:2d:88:
                    11:9c:51:75:4f:4a:80:72:a6:30:bf:d5:19:ab:d6:
                    ca:19:70:b5:be:57:7f:3f:f8:62:4d:c0:bc:5f:be:
                    3f:37:19:21:47:4e:c4:f3:33:fa:e3:17:a9:7a:69:
                    62:b4:1b:f2:46:1a:7f:90:68:1d:d9:c0:95:7a:6f:
                    1c:4e:bf:a0:89:0a:c9:5d:86:5e:a5:2a:f5:ee:cf:
                    72:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C9:E7:79:64:C9:54:F0:1F:BB:0F:C6:2F:5A:8D:6E:DC:D6:35:35
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:00:3e:6f:1a:3c:dd:33:96:3c:e8:a2:f3:73:b6:0b:ac:8a:
         79:a1:81:55:71:0e:38:4f:c7:8a:8b:57:ad:55:99:ff:79:e1:
         f4:d6:af:6a:51:63:7d:05:2a:a1:8b:b0:c6:6a:64:b1:33:eb:
         58:a0:3f:f7:c2:7b:a1:27:67:0e:db:19:93:7c:d1:6c:b5:23:
         61:7e:c6:83:da:1f:8a:c2:a4:22:c2:62:4b:09:bd:63:68:04:
         a7:f4:fa:2f:73:8b:bf:e9:d4:c7:f5:04:b4:d1:85:da:b4:c8:
         eb:c1:07:90:6c:43:fa:84:fc:8e:6f:94:d5:47:6e:eb:62:2d:
         9e:02:06:34:95:d5:6f:b6:e0:bd:e3:cd:73:08:aa:5f:40:43:
         3c:3b:34:1b:4b:4d:90:18:47:0c:b8:71:36:9a:aa:14:00:10:
         9d:cc:80:17:93:a4:33:21:14:31:9b:e4:0d:6a:13:90:d1:1c:
         93:50:5d:27:90:24:e3:3b:ba:ec:c1:45:83:99:d1:93:96:09:
         95:b6:fd:c5:29:4f:6c:33:ec:36:3b:aa:a2:c7:61:a9:78:f9:
         8d:05:fa:ee:91:a8:96:92:75:5a:fb:9e:5b:60:c0:70:99:45:
         2e:df:84:b6:f5:16:64:23:e0:89:fa:cf:f5:2f:af:b1:33:44:
         3d:69:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:07:03 2026 by rpki-client