Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
File:                     HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft (raw, json)
Hash identifier:          hoTSfQfJnwCwQWWYCgss/lk7IM4OdBPsS4SEcR6O800=
Subject key identifier:   7B:44:5F:E4:50:00:D7:C0:71:CE:43:AA:30:25:0B:1D:EF:08:27:62
Authority key identifier: 1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1
Certificate issuer:       /CN=A913277C/serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1
Certificate serial:       0239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
Manifest number:          0283
Signing time:             Wed 25 Mar 2026 01:58:43 +0000
Manifest this update:     Wed 25 Mar 2026 01:58:43 +0000
Manifest next update:     Wed 01 Apr 2026 01:58:43 +0000
Files and hashes:         1: HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl (hash: Gl2fzWwPF81xnXTJyjmPsXBDx7v6FT8IygtBf15Sb2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl
                          rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913277C, serialNumber=1CD49EFBC37EF4A8C6C8876562BD113344BC7ED1
        Validity
            Not Before: Mar 25 01:58:43 2026 GMT
            Not After : Apr  1 01:58:43 2026 GMT
        Subject: CN=69c34153-f106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:38:a1:36:e6:17:32:12:f8:fb:b0:b6:ae:
                    09:aa:ab:c5:69:d1:be:46:52:06:85:9f:a8:e6:b9:
                    97:b0:92:97:c7:12:13:be:24:c2:ed:7a:23:b5:8f:
                    cf:71:aa:d8:8c:8d:84:e5:6f:78:73:09:00:cb:b7:
                    23:75:15:f4:88:7d:10:34:ea:25:55:20:07:d9:3e:
                    06:94:a4:da:3e:03:f8:97:a6:b7:e1:80:56:14:c0:
                    63:f0:5f:32:ec:22:ed:51:b9:0f:f3:47:13:62:c8:
                    c1:76:1b:8e:af:ac:bd:f1:f1:44:f2:94:6a:35:26:
                    52:1d:f6:84:9a:b2:b6:a7:9e:f9:a0:7d:b2:86:90:
                    41:f2:00:44:0f:bd:3f:55:24:65:87:ce:9d:c5:a6:
                    3e:e9:07:fc:e1:44:22:59:48:33:19:20:8b:cd:ce:
                    9b:d1:9b:3f:04:ac:1f:d3:db:5a:47:77:63:b0:15:
                    b6:f7:2b:c4:19:52:99:75:e1:dd:77:8a:26:fc:c4:
                    1b:65:21:db:15:7e:99:a9:59:b4:c1:e4:4f:df:3d:
                    b5:33:c3:e6:a5:79:0e:a3:21:c5:d5:ae:e6:98:57:
                    d5:2e:27:db:ca:ed:4d:88:34:4c:f3:50:c1:95:12:
                    c4:82:91:4e:21:2b:f0:bb:38:a0:51:c3:80:e1:a8:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:44:5F:E4:50:00:D7:C0:71:CE:43:AA:30:25:0B:1D:EF:08:27:62
            X509v3 Authority Key Identifier:
                keyid:1C:D4:9E:FB:C3:7E:F4:A8:C6:C8:87:65:62:BD:11:33:44:BC:7E:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNSe-8N-9KjGyIdlYr0RM0S8ftE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913277C/B97C7396C9F211EDA1D99E65C4F9AE02/HNSe-8N-9KjGyIdlYr0RM0S8ftE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:72:c9:0b:91:39:6f:9e:08:4b:b8:7f:01:64:47:b8:62:4c:
         19:57:c6:59:e4:5d:cd:1e:ce:a1:9b:69:cf:a4:ec:a5:ff:bb:
         53:87:98:25:f2:91:89:0a:03:21:0e:2e:62:0e:a1:58:e6:02:
         62:26:9e:3f:01:ca:85:1b:20:67:03:4d:78:bc:e8:39:87:d6:
         77:81:5e:e2:d0:cf:68:7c:2b:3f:66:04:b2:3a:31:78:3b:4a:
         0b:2b:70:59:ef:62:4d:53:65:75:d6:28:04:15:a2:ef:73:3e:
         e4:2d:18:3b:1f:40:25:8e:c8:d3:d7:66:47:cb:55:ff:c1:33:
         d4:b1:f9:5d:48:74:f7:49:ee:38:e2:54:7e:81:70:46:62:d7:
         dd:0f:5f:53:54:66:66:ed:6a:ba:49:e3:98:d5:3c:4b:a6:ff:
         93:cd:be:4f:28:44:77:54:89:f3:bb:67:69:09:ce:46:bf:93:
         95:5f:8f:79:de:9a:d3:f0:d4:e7:d4:80:1d:7e:a6:e4:fd:05:
         9c:06:0f:0e:d1:d7:a6:77:25:f9:83:f3:d0:c3:35:e1:6a:00:
         a5:94:94:85:30:28:07:da:30:e8:18:15:ce:0b:e2:bf:1c:90:
         42:56:0b:90:c8:93:ad:cc:c0:6c:84:64:35:d3:1f:c1:0f:98:
         b2:4b:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:31 2026 by rpki-client