Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
File:                     HNyP8SmsVhBgxHINdUk_12hGxhU.mft (raw, json)
Hash identifier:          iFwk1b+4S/vaVLXGi2Y2psOrO4Opq6nFpZpdWId8tfY=
Subject key identifier:   D4:9C:63:BF:76:D6:81:D3:21:95:24:98:63:CB:F7:17:8D:E3:9E:CB
Authority key identifier: 1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15
Certificate issuer:       /CN=A919FE07/serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
Certificate serial:       0C0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
Manifest number:          0CFB
Signing time:             Tue 24 Mar 2026 18:39:29 +0000
Manifest this update:     Tue 24 Mar 2026 18:39:28 +0000
Manifest next update:     Tue 31 Mar 2026 18:39:28 +0000
Files and hashes:         1: HNyP8SmsVhBgxHINdUk_12hGxhU.crl (hash: lw8TaCvHSgDT6EkS7z5WnUJeU2n5qe1784fPubYiS4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl
                          rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3086 (0xc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FE07, serialNumber=1CDC8FF129AC561060C4720D75493FD76846C615
        Validity
            Not Before: Mar 24 18:39:28 2026 GMT
            Not After : Mar 31 18:39:28 2026 GMT
        Subject: CN=69c2da61-bcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9f:73:53:8a:0b:16:94:08:52:64:2b:70:69:
                    67:42:38:95:72:cc:08:32:5f:04:3d:5d:42:97:57:
                    8e:a8:78:11:59:9d:7a:10:6a:75:8d:3a:52:22:e2:
                    6b:c8:0c:08:d0:54:9b:bf:b4:97:a8:e5:64:2c:ed:
                    7f:38:35:0a:a0:fd:5c:70:bb:13:00:f2:97:23:bd:
                    2a:9e:09:61:9a:eb:ef:9c:d7:55:b8:7d:59:58:b2:
                    38:dc:37:8f:cf:69:32:20:8c:a6:91:c9:16:ad:79:
                    fa:13:28:a2:e7:7b:db:ed:46:46:82:10:87:f1:bc:
                    ba:a3:1f:a8:6e:c1:f4:d1:d5:1b:97:bb:71:4e:00:
                    3b:86:dd:95:52:9a:ab:09:7f:9b:ce:dc:97:b5:00:
                    16:42:9a:20:41:09:4b:42:e0:cc:e9:5a:2e:8c:f9:
                    54:62:25:11:65:8e:38:9a:dc:ef:1e:08:3d:ae:3f:
                    a6:6b:bc:3c:04:4b:31:3b:12:fa:f7:9a:99:05:3a:
                    88:b5:da:29:5f:1e:ba:3f:a0:4e:bb:af:3c:1e:51:
                    94:53:bb:71:48:33:c0:2a:3d:ea:9a:3a:85:fa:93:
                    e9:35:6f:93:22:dd:d1:1f:32:f9:b6:29:b9:96:3a:
                    ca:28:1b:24:fb:cd:ec:ae:b1:27:d8:2c:16:f3:37:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:63:BF:76:D6:81:D3:21:95:24:98:63:CB:F7:17:8D:E3:9E:CB
            X509v3 Authority Key Identifier:
                keyid:1C:DC:8F:F1:29:AC:56:10:60:C4:72:0D:75:49:3F:D7:68:46:C6:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNyP8SmsVhBgxHINdUk_12hGxhU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/HNyP8SmsVhBgxHINdUk_12hGxhU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:9c:de:6b:0e:d3:c2:fa:5a:df:a1:d3:ea:4b:c7:f6:c8:
         72:fd:eb:55:d5:e9:0e:ef:3a:b3:c9:ce:e7:56:f1:63:49:d8:
         ad:5b:f7:11:98:34:57:98:1a:fe:c5:c4:0c:4a:45:c7:e3:ac:
         6f:15:1c:2a:60:65:9a:1d:6f:c3:f3:be:7a:af:ac:e7:92:79:
         28:28:25:73:c0:22:cb:1a:3c:a2:a0:81:6c:a6:3a:00:54:5c:
         b9:39:ce:2a:e0:1c:e6:d6:47:4b:6d:fa:09:a5:ce:a6:24:0b:
         8e:16:24:30:ad:a0:60:81:61:04:60:e7:43:51:74:7c:dd:96:
         11:63:43:b0:0d:a3:8c:35:5d:29:98:48:5e:62:68:43:aa:60:
         03:06:de:da:59:2b:c9:86:47:e0:8f:ff:8b:86:66:d7:b8:3a:
         48:d7:c5:0c:f2:d2:4d:29:16:7d:74:a4:36:5c:a7:aa:9e:0a:
         38:56:67:8a:5f:26:3f:e4:2e:1f:79:2d:89:cf:38:3a:4f:a2:
         56:4f:c4:60:00:e8:aa:27:99:6c:b2:38:17:e2:ba:d1:b3:0a:
         69:fc:f7:39:d4:65:1f:e0:f4:12:1a:96:0d:83:35:b2:03:b7:
         c9:c2:5e:3f:70:fc:5c:8f:d1:ef:50:ad:dd:d2:0c:94:ff:7a:
         e7:be:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:53 2026 by rpki-client