Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          eAA2oTzuzrpReMHzKk9Hpp7oOGgj3Yj0NC5bv/FcZMk=
Subject key identifier:   4E:95:8A:0A:0E:35:8A:93:3A:6C:DA:D4:5A:9C:FE:DC:96:36:B8:6B
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       355A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          355A
Signing time:             Tue 12 May 2026 14:22:19 +0000
Manifest this update:     Tue 12 May 2026 14:22:18 +0000
Manifest next update:     Tue 19 May 2026 14:22:18 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: oCPAEwiHs71Mnr0klpcuEn5WGU0/UN0TrtJaCEYWeyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13658 (0x355a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: May 12 14:22:18 2026 GMT
            Not After : May 19 14:22:18 2026 GMT
        Subject: CN=6a03379b-5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:27:14:86:36:f5:d5:00:69:9a:96:74:e2:cf:
                    62:6e:ba:15:f1:37:f1:b5:5b:ee:6f:26:68:0b:3e:
                    ce:ec:fc:cd:7b:9a:9e:2b:c5:65:d9:0e:7c:02:76:
                    24:ef:36:03:7d:0b:4d:e9:ce:30:31:15:df:00:76:
                    88:55:b6:6d:a6:ee:be:5e:31:35:de:c5:fb:d3:84:
                    2e:c5:98:86:4d:ad:6b:32:3f:c6:4a:34:62:94:cc:
                    3f:73:de:e0:0e:03:17:89:a4:a1:a7:7c:fd:86:97:
                    9b:cf:e2:d2:07:8c:bb:7f:13:0f:35:3b:ff:74:7e:
                    18:a6:6c:39:e3:8b:fa:39:4b:23:1a:23:30:58:8e:
                    de:32:d1:2d:32:f6:55:f5:40:fb:24:53:21:d8:27:
                    fd:47:a2:c5:7d:51:98:0c:4e:2f:7a:ac:42:d6:3b:
                    7e:97:62:de:b6:7d:11:d2:8f:cb:fb:93:3a:80:ce:
                    b9:5c:b3:4d:f1:d9:c0:ae:3d:69:f2:fd:0c:b3:cf:
                    50:ee:89:ac:27:d3:c2:f0:f0:96:fb:4e:4c:d9:92:
                    68:cd:f5:c4:91:dd:ca:07:d3:83:a0:ac:c1:ac:60:
                    54:4a:4a:99:d7:a5:e0:9f:b2:7e:da:5b:a9:3e:17:
                    7b:96:b2:26:18:ba:b4:1a:7b:3f:e6:a2:5e:b4:68:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:95:8A:0A:0E:35:8A:93:3A:6C:DA:D4:5A:9C:FE:DC:96:36:B8:6B
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:bc:cb:71:cf:ff:48:23:38:3b:95:70:07:24:99:7e:a0:22:
         ef:95:af:83:82:da:ba:a9:2a:a6:31:f3:8c:6f:e3:ff:2a:24:
         87:b8:30:fc:77:c0:78:60:73:93:89:0a:dc:9e:4b:c0:99:e6:
         a8:cc:18:79:90:87:dd:e4:14:31:21:9e:2c:6b:39:cc:17:71:
         93:67:fb:3f:f0:23:77:85:6b:29:98:70:d7:ad:3c:2a:8e:32:
         63:70:25:86:cb:c1:c4:6f:7c:0f:e9:17:1b:6d:61:a3:c5:42:
         e0:cc:5c:e0:9a:e5:10:27:96:be:e8:56:40:8e:d0:bf:48:19:
         85:23:b2:46:98:db:c2:e8:4b:c9:2d:2c:84:be:75:f0:da:74:
         f5:2e:59:91:52:bf:1f:6e:af:6f:25:c5:c0:9e:b4:99:64:cb:
         9c:95:2b:b8:27:03:41:4d:13:bd:1d:93:bd:1d:19:b2:8b:6d:
         9b:db:8d:a8:51:d4:84:c1:09:8b:bf:08:e7:2c:ab:85:b1:15:
         58:04:b4:24:c3:b9:91:a2:d7:e4:46:44:68:8a:25:92:28:2c:
         e8:10:ad:1f:05:3b:7f:0f:f5:77:18:d4:9a:b1:63:10:13:6c:
         19:54:18:50:87:74:00:61:37:56:e5:f5:5c:99:fb:f8:01:e2:
         c7:ac:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:47 2026 by rpki-client