Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
File:                     hsjX-0IuFSejmUSD0fne8sYKMHI.mft (raw, json)
Hash identifier:          0IDHzBVBHixTxz9QxBltuBUUXTqRfoZvxvUesq+fuoM=
Subject key identifier:   A7:17:16:5B:53:D7:C0:B5:1C:8F:D8:95:F7:E5:1C:02:8F:43:BC:8B
Authority key identifier: 86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72
Certificate issuer:       /CN=A91BEB11/serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072
Certificate serial:       3513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
Manifest number:          3513
Signing time:             Sat 28 Feb 2026 14:56:52 +0000
Manifest this update:     Sat 28 Feb 2026 14:56:52 +0000
Manifest next update:     Sat 07 Mar 2026 14:56:52 +0000
Files and hashes:         1: hsjX-0IuFSejmUSD0fne8sYKMHI.crl (hash: /odmQbh2wr7CEe0lh3nVC24hZZ1hihx0CC0yl/vC0ek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl
                          rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13587 (0x3513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEB11, serialNumber=86C8D7FB422E1527A3994483D1F9DEF2C60A3072
        Validity
            Not Before: Feb 28 14:56:52 2026 GMT
            Not After : Mar  7 14:56:52 2026 GMT
        Subject: CN=69a30234-d5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4c:5e:81:f1:3a:b3:8f:ff:c0:91:4e:22:03:
                    a6:54:5c:02:cf:ff:56:66:ac:2f:8e:ec:a1:e8:f1:
                    25:5c:64:0b:f5:19:ab:7b:1e:d9:32:76:05:ce:17:
                    16:d5:d6:65:a5:81:90:18:49:dd:28:e3:43:ad:89:
                    98:9f:0f:36:ee:39:01:f4:0a:e0:27:44:2b:b9:bc:
                    e8:5b:3b:2f:e6:12:58:31:df:d9:90:65:ea:ff:f1:
                    ba:1e:58:3b:be:36:12:5a:de:14:58:ff:14:62:8c:
                    b5:8d:8b:69:6c:d4:85:35:b4:ec:83:14:00:9f:c6:
                    72:bd:6e:ad:22:2f:86:58:6c:0f:98:e4:b3:69:1d:
                    fa:b6:88:09:55:a0:21:c1:4b:31:f4:16:1f:e0:32:
                    3b:b4:8a:7c:e2:45:01:96:c6:0c:f0:c4:1d:e3:4e:
                    9d:10:d3:32:7b:46:2a:47:e8:2c:9c:19:be:ca:06:
                    58:b6:73:5e:81:8d:3a:30:0a:bf:0b:e1:75:5c:3f:
                    49:dd:e9:7e:02:5d:ed:f8:b4:0e:a7:29:aa:e2:62:
                    55:64:c4:bc:b7:e5:4a:80:26:ba:ac:1a:b7:82:b4:
                    4e:e5:25:dd:c4:6c:c1:7d:28:2e:72:d4:8d:1a:25:
                    d2:bd:6c:cf:b2:85:86:97:0c:4f:49:0a:f6:6e:68:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:17:16:5B:53:D7:C0:B5:1C:8F:D8:95:F7:E5:1C:02:8F:43:BC:8B
            X509v3 Authority Key Identifier:
                keyid:86:C8:D7:FB:42:2E:15:27:A3:99:44:83:D1:F9:DE:F2:C6:0A:30:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hsjX-0IuFSejmUSD0fne8sYKMHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEB11/9F43587E1D9A11E29AF6FC8708B02CD2/hsjX-0IuFSejmUSD0fne8sYKMHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:41:35:86:61:16:06:e2:80:8f:a6:a3:1a:06:2b:e3:c1:65:
         39:73:d1:88:19:03:59:09:c1:39:00:6d:72:b7:4b:c5:cb:00:
         57:43:da:0f:4b:09:81:e3:90:50:3e:69:b7:f1:cf:2e:41:75:
         44:13:ee:37:16:5b:d8:a9:63:40:e1:c4:5d:7e:e5:02:19:bc:
         5e:5c:ac:50:78:5b:4e:6b:47:e9:44:0d:b7:f0:c4:cf:9e:83:
         ac:13:f0:94:da:ad:f6:b7:da:c5:30:9a:6e:6a:19:ef:34:a9:
         b8:70:6d:6f:ee:52:d3:88:0b:c5:70:cc:6e:48:e8:a8:60:28:
         d5:e0:55:8e:e8:1a:c1:1d:3d:b2:8b:55:00:0f:41:ac:34:f3:
         ce:61:16:a3:4f:ac:d4:58:00:c9:73:d1:9c:52:87:3b:58:4d:
         4b:bf:16:a3:7c:ea:dc:6f:63:b6:dd:4e:8a:a6:56:b4:20:c0:
         60:22:bf:7c:fe:2c:d4:c3:26:13:a0:b6:c1:37:bd:af:48:5e:
         95:3c:bd:7c:c8:11:9c:19:64:d6:43:5c:16:d1:ae:1c:22:c0:
         d9:94:f7:e5:fb:11:bb:ec:d6:87:2a:5e:7f:3b:38:d1:cb:66:
         ba:c1:47:b9:1a:b4:42:2f:e8:fe:52:1a:44:29:9d:b2:f1:01:
         71:63:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:54:41 2026 by rpki-client