Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File:                     HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier:          oO2yf/kWPdFFvRJ4RQe1KLZjTEi2zKsK/n94lgcxzDs=
Subject key identifier:   6D:08:55:39:7E:52:01:A0:01:8B:78:DA:44:82:C1:9C:AB:04:FB:C8
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer:       /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial:       3581
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number:          357E
Signing time:             Thu 24 Sep 2026 14:26:22 +0000
Manifest this update:     Thu 24 Sep 2026 14:26:21 +0000
Manifest next update:     Thu 01 Oct 2026 14:26:21 +0000
Files and hashes:         1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: IreffuPy7VoS0rwsK4n/Cn3viNpvh+AfkNqz1Pu0Pio=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
                          rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:26:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13697 (0x3581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
        Validity
            Not Before: Sep 24 14:26:21 2026 GMT
            Not After : Oct  1 14:26:21 2026 GMT
        Subject: CN=6ab5330d-6bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:84:57:9a:13:00:79:0c:38:1c:f9:28:c9:
                    d4:60:b8:73:c7:c8:c2:55:00:db:7c:a7:23:fb:e2:
                    5b:85:c5:e7:b2:bb:db:06:05:7b:4d:73:8a:a5:f0:
                    4a:6c:d6:ee:cb:17:86:41:f3:b8:b3:7f:80:14:02:
                    50:d8:74:79:2c:48:e3:f7:55:e6:92:ce:de:e4:86:
                    72:5c:e3:cd:54:99:08:5d:04:49:d6:2f:95:aa:a4:
                    e1:79:ef:5d:5b:46:bf:65:34:f8:76:10:ee:2a:c0:
                    4a:ca:0f:3e:49:59:83:38:a4:e6:b8:ac:15:f5:23:
                    d2:99:a5:77:8d:63:6e:87:6b:03:cc:d8:0a:54:02:
                    f4:b2:90:d7:45:98:f0:95:af:2f:ed:d4:74:54:3d:
                    b3:76:db:7c:bb:f7:39:8f:84:85:75:a7:fe:84:9d:
                    96:78:b7:75:ed:ea:06:d1:70:78:be:a9:29:14:e0:
                    8e:14:34:f5:9b:fb:00:f4:67:7f:bf:42:b8:12:8a:
                    b4:71:23:f7:76:32:ce:e3:6f:77:72:8e:e9:7a:fe:
                    18:8d:8d:d7:58:42:22:b9:90:14:aa:a4:a0:9c:7a:
                    86:fa:12:71:1f:d3:36:8d:3e:95:69:67:d7:c8:45:
                    91:30:2c:94:c0:05:cf:28:86:92:06:a2:2d:f1:59:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:08:55:39:7E:52:01:A0:01:8B:78:DA:44:82:C1:9C:AB:04:FB:C8
            X509v3 Authority Key Identifier:
                keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:95:2f:46:ca:f6:cd:9f:32:51:93:30:77:ac:37:93:d2:
         78:80:d7:13:ed:2a:ab:bd:00:34:16:3e:c3:df:bc:c5:f5:9b:
         b5:a1:49:fb:1d:e1:d4:f4:94:6b:e0:53:63:4d:6d:df:0c:bc:
         b7:cb:84:35:3b:d2:ab:98:1f:57:30:e0:af:4f:2c:3e:e1:92:
         bf:73:af:1e:43:c7:05:d9:7a:e1:eb:03:b4:14:3d:3b:7e:83:
         63:d0:a6:7a:a7:fd:c4:a0:9d:37:dc:4e:48:65:bf:16:43:23:
         18:82:75:ca:b9:f9:bb:77:69:a0:ac:24:0b:7f:d5:4d:7a:eb:
         be:fa:57:ec:d4:b4:bd:cd:94:d6:9f:2b:4c:7d:d5:fb:d1:0c:
         1a:0f:c2:be:06:94:ce:79:23:24:fc:26:05:7b:78:06:21:75:
         4d:9a:dc:1c:9d:8a:1d:af:49:a4:08:fa:72:20:4d:ea:46:d7:
         09:cf:5b:84:2f:cc:63:84:fa:ae:54:31:8d:0f:8e:01:4c:c7:
         1b:c0:f6:df:d8:00:e8:2a:77:47:96:2d:62:e3:4a:5c:df:58:
         b8:90:57:25:a0:30:f8:42:ad:d5:e3:bd:1b:3b:1d:0e:8b:ff:
         50:11:9a:ed:f9:cf:50:05:8c:36:18:0a:02:61:d8:93:9c:cb:
         1c:cd:64:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:19:13 2026 by rpki-client