Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
File:                     hYBFlRf-HXfU04pCnx0hxskt6TQ.mft (raw, json)
Hash identifier:          erynPQ9h8pdDK/2L7Kiu95177ntWHgIf9mRUDMjWol4=
Subject key identifier:   B4:55:98:85:96:A3:29:86:26:46:87:E6:61:D0:CD:E2:0D:2F:4C:8E
Authority key identifier: 85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34
Certificate issuer:       /CN=A9145B5E/serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
Manifest number:          015D
Signing time:             Thu 21 May 2026 05:06:11 +0000
Manifest this update:     Thu 21 May 2026 05:06:10 +0000
Manifest next update:     Thu 28 May 2026 05:06:10 +0000
Files and hashes:         1: hYBFlRf-HXfU04pCnx0hxskt6TQ.crl (hash: qsPcJjbSTpsVPRZK2kXg0qIg6F74BBLCKWPX5bBLYiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B5E, serialNumber=8580459517FE1D77D4D38A429F1D21C6C92DE934
        Validity
            Not Before: May 21 05:06:10 2026 GMT
            Not After : May 28 05:06:10 2026 GMT
        Subject: CN=6a0e92c3-6edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:0c:fe:97:9b:65:7d:ff:24:dc:4c:88:a2:
                    9a:15:e2:34:d2:79:0e:a1:16:41:15:16:15:f4:52:
                    3c:e0:49:b6:ce:06:da:c8:ab:ce:07:10:1c:88:65:
                    cf:6b:2b:72:4b:40:39:81:67:cc:1b:12:ee:c3:9b:
                    4d:d7:44:b6:c7:fa:ac:3e:ad:03:3d:80:25:8f:25:
                    31:b8:e3:8a:1d:4f:cb:2e:b7:d1:5b:ba:1c:92:e2:
                    92:35:2c:f1:ba:f7:a7:3b:13:37:52:ae:c1:3d:70:
                    34:14:1b:55:6c:b3:66:91:2d:9a:8e:c0:5b:64:94:
                    9b:48:32:ed:ec:1c:d1:08:3a:9c:da:51:7d:fc:a6:
                    0d:11:85:83:26:98:30:dc:98:92:82:78:0f:c2:13:
                    bd:db:fa:4e:00:1f:f3:d8:74:25:85:1a:6e:0f:7c:
                    bb:98:f4:ca:ec:34:7e:f5:ee:c4:f1:5a:0f:05:59:
                    29:2f:0e:b4:79:cd:b1:34:17:db:a2:d1:cb:87:91:
                    dd:8b:ca:2c:55:67:0d:d9:54:7a:6c:eb:9f:7a:85:
                    ab:ce:0f:c4:9f:76:e0:5f:a2:41:96:29:a2:02:c6:
                    34:52:ce:03:5e:ed:13:1a:3b:71:9d:1d:b7:2d:76:
                    27:4a:c3:f3:90:15:32:6a:17:27:29:ad:42:74:e3:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:98:85:96:A3:29:86:26:46:87:E6:61:D0:CD:E2:0D:2F:4C:8E
            X509v3 Authority Key Identifier:
                keyid:85:80:45:95:17:FE:1D:77:D4:D3:8A:42:9F:1D:21:C6:C9:2D:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYBFlRf-HXfU04pCnx0hxskt6TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B5E/85BCEE4C45B511EFBA4A621EC4F9AE02/hYBFlRf-HXfU04pCnx0hxskt6TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:43:d2:b7:8d:57:9b:31:0a:43:35:12:3c:24:a2:74:ab:04:
         49:ad:60:63:24:b0:ef:85:d5:27:e7:59:3e:dd:e1:c9:5f:c8:
         ea:df:e2:fe:ec:c2:4c:59:5a:d5:03:90:20:76:79:8b:ae:f4:
         d3:4c:af:a4:a4:3e:2d:80:32:25:75:57:6d:da:04:fd:43:9f:
         02:db:69:75:a3:b5:a9:1d:0a:6f:b5:57:a7:58:9d:de:f5:96:
         28:ff:51:2b:00:b6:46:c7:75:13:4c:45:90:b1:88:6d:7d:b7:
         07:fb:91:d5:c8:6f:a1:ab:0d:e2:4e:a6:1b:76:47:fc:f3:17:
         ec:7e:02:fa:34:c8:ea:b7:4f:94:40:a6:89:9b:97:a3:9a:36:
         4b:60:2b:6e:d8:6f:27:e8:85:58:3b:30:ce:31:5c:85:92:bb:
         76:e5:e4:2a:a4:4d:aa:0e:c5:a7:b4:75:d0:b0:c8:bc:57:47:
         ab:8a:6e:3f:93:4e:d4:6d:b2:b9:4b:d2:2d:bd:5f:d3:be:d7:
         52:8a:bc:59:a7:44:47:61:ef:45:e3:b1:e5:3d:e4:f9:80:00:
         8e:a8:5f:2e:6e:61:5a:94:c6:fa:35:84:58:d8:b4:ae:9f:05:
         90:4e:81:bf:74:e2:c3:e7:72:1c:65:f9:7d:03:e7:31:4b:cf:
         17:2a:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:47 2026 by rpki-client