Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
File:                     HsyXilPvK-iOXyatm4q4g3PRl6Y.mft (raw, json)
Hash identifier:          cvm5Wi3C1l0z6ggjGTbn+ePF4ofyqKFgGiedSycc61w=
Subject key identifier:   A3:04:C4:75:AE:5F:58:B7:F6:12:B5:27:BA:F1:55:65:90:19:67:20
Authority key identifier: 1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6
Certificate issuer:       /CN=A9149F3E/serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
Certificate serial:       35A3
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
Manifest number:          35A3
Signing time:             Thu 24 Sep 2026 14:22:05 +0000
Manifest this update:     Thu 24 Sep 2026 14:22:05 +0000
Manifest next update:     Thu 01 Oct 2026 14:22:05 +0000
Files and hashes:         1: HsyXilPvK-iOXyatm4q4g3PRl6Y.crl (hash: dm3OtJ/5aYd9GHSiPaQ0SfweymenRClBRTjbIeaWbaE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13731 (0x35a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=1ECC978A53EF2BE88E5F26AD9B8AB88373D197A6
        Validity
            Not Before: Sep 24 14:22:05 2026 GMT
            Not After : Oct  1 14:22:05 2026 GMT
        Subject: CN=6ab5320d-cb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:83:ff:26:dc:81:5a:50:68:7f:05:26:5a:
                    6f:97:c2:20:92:0b:c0:ea:39:85:cf:ef:da:7d:67:
                    df:1a:92:46:9c:77:a7:b7:39:d9:06:6a:a8:48:3b:
                    21:d7:19:9a:73:55:76:43:5b:1e:04:e7:35:42:5e:
                    ca:ed:00:7a:ea:9d:12:cb:7f:67:0f:37:59:e2:51:
                    ed:ba:da:fa:8c:c2:48:e1:2c:7c:ba:2e:96:7e:4b:
                    f3:f9:a5:4b:a8:d5:6f:04:b6:22:4b:8e:1f:aa:05:
                    11:54:ae:2a:03:21:61:5f:b7:0e:fc:cd:11:23:f1:
                    f0:be:67:58:bc:5d:ed:eb:48:a3:f8:54:ed:e9:bc:
                    26:fe:4f:dd:67:57:bc:4b:f6:cb:cb:f3:a5:b9:2e:
                    fe:b6:c6:62:01:cd:53:cb:f2:57:02:10:bd:70:4a:
                    91:6c:7b:27:a3:19:7f:0e:bb:55:6b:0c:9c:52:62:
                    1d:72:fe:3c:03:60:b2:01:e7:c4:84:66:db:56:ac:
                    0c:22:ff:e9:2a:9d:fa:79:5f:f9:c9:c9:5f:86:2b:
                    25:51:53:b4:39:85:d9:3c:c3:ec:38:a5:f8:5a:c3:
                    89:03:7e:95:f9:17:9e:d5:f3:9b:a4:76:10:19:d0:
                    ae:f4:9c:5d:29:06:eb:6f:51:28:70:49:c0:8d:05:
                    d3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:04:C4:75:AE:5F:58:B7:F6:12:B5:27:BA:F1:55:65:90:19:67:20
            X509v3 Authority Key Identifier:
                keyid:1E:CC:97:8A:53:EF:2B:E8:8E:5F:26:AD:9B:8A:B8:83:73:D1:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/HsyXilPvK-iOXyatm4q4g3PRl6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/BFEB00081D8211E2BC6417D708B02CD2/HsyXilPvK-iOXyatm4q4g3PRl6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:6b:86:6f:ef:62:5b:e4:45:2b:59:bf:b1:c7:43:39:06:
         30:55:2f:34:46:67:8f:6a:66:f0:1c:7c:b7:5e:42:d9:2d:e0:
         89:f6:f2:f5:e0:aa:0c:73:30:a9:65:2b:51:1b:84:9c:0b:97:
         75:30:4b:e9:50:d0:48:2e:f9:f0:91:d3:4a:e6:56:b9:ad:6d:
         43:32:0f:c9:cd:f0:b3:61:79:b8:67:53:91:c6:1c:6e:80:1e:
         bf:4f:63:86:9d:f8:70:b8:4f:4a:68:45:5c:2d:0b:6c:a1:5c:
         ea:b6:f8:38:1d:58:3b:6b:0a:cb:91:ff:91:80:08:83:f2:c2:
         ad:38:ee:c5:10:ca:c2:bf:10:2b:bb:99:96:68:64:e0:54:8f:
         2f:a7:b7:f5:f1:8f:f3:aa:d2:41:b5:30:31:33:46:ec:7f:90:
         d9:65:54:1a:5b:51:5d:f3:b2:90:fe:fd:1a:1e:08:83:5a:8e:
         55:ba:71:6a:62:21:43:14:83:f4:08:6c:92:5c:11:55:83:17:
         2a:cc:6a:92:09:54:07:a9:69:a6:6c:fc:1b:2e:39:94:26:3a:
         62:97:c1:1d:80:84:1e:33:7e:77:76:67:65:93:e2:ff:0e:ad:
         f5:48:ed:a6:bc:c5:e4:9c:59:d6:78:3a:52:0a:42:bd:c4:7d:
         01:ca:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:19:53 2026 by rpki-client