Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
File:                     HAF157M3En5uwlH0Og0qxhMRv04.mft (raw, json)
Hash identifier:          DiANzMiV6KM+luaR9X6q7yXzLptUg8GA2rT9ATSfGWU=
Subject key identifier:   48:91:28:EC:FF:59:FD:E3:73:A7:C5:74:EC:5A:B9:86:27:75:78:AD
Authority key identifier: 1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E
Certificate issuer:       /CN=A91E3584/serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
Certificate serial:       3587
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
Manifest number:          3584
Signing time:             Tue 06 Oct 2026 14:26:48 +0000
Manifest this update:     Tue 06 Oct 2026 14:26:47 +0000
Manifest next update:     Tue 13 Oct 2026 14:26:47 +0000
Files and hashes:         1: HAF157M3En5uwlH0Og0qxhMRv04.crl (hash: QD6t6KCExgxNW/NlqOeYpDMtA6r/J2SpWda6ztopDWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl
                          rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 14:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13703 (0x3587)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3584, serialNumber=1C0175E7B337127E6EC251F43A0D2AC61311BF4E
        Validity
            Not Before: Oct  6 14:26:47 2026 GMT
            Not After : Oct 13 14:26:47 2026 GMT
        Subject: CN=6ac50528-7818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:4a:15:ba:aa:cc:f1:2e:33:8b:fa:2c:9d:
                    4c:5d:61:85:3f:c0:e1:1b:d5:e1:28:32:b5:b5:44:
                    6b:3d:62:24:5b:01:08:6f:53:84:c7:b0:b8:28:59:
                    3d:7a:02:c5:67:7b:54:7a:4f:03:b2:a1:87:25:00:
                    96:0a:1f:d4:90:a9:b9:b6:bc:44:9c:ac:85:67:58:
                    fe:bd:b5:f2:f7:3b:25:72:3b:2b:4f:29:76:2a:83:
                    c3:81:30:7d:09:d7:ae:14:87:ca:fe:4b:3f:f0:3d:
                    43:f6:e0:37:13:e0:d2:dc:db:1c:07:a3:98:d2:0f:
                    fe:91:7d:f4:1f:40:ef:2f:99:23:12:84:16:97:95:
                    69:5b:bc:fa:c1:43:e2:11:d5:8c:cc:7c:48:55:23:
                    5d:9d:42:13:e6:09:95:0a:70:0d:cf:61:ad:ca:1a:
                    66:5b:d0:54:0e:91:b4:dc:7d:0b:52:5e:56:d8:57:
                    89:c7:fa:35:a9:d1:d9:ab:0d:44:12:74:0d:9d:6c:
                    45:39:a8:d5:0e:04:0e:81:16:a8:62:3e:af:81:f1:
                    e5:22:ba:e7:cf:18:9b:ed:de:66:c6:80:99:92:20:
                    02:9c:54:64:e7:cd:48:24:5a:23:a1:d7:4f:84:4e:
                    2a:4c:c2:28:19:b7:ae:fc:30:dc:ab:84:58:57:b3:
                    ea:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:91:28:EC:FF:59:FD:E3:73:A7:C5:74:EC:5A:B9:86:27:75:78:AD
            X509v3 Authority Key Identifier:
                keyid:1C:01:75:E7:B3:37:12:7E:6E:C2:51:F4:3A:0D:2A:C6:13:11:BF:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HAF157M3En5uwlH0Og0qxhMRv04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3584/D1A129461D8511E2BB4FA4DC08B02CD2/HAF157M3En5uwlH0Og0qxhMRv04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:c5:a6:4e:75:af:d3:06:8e:b3:ef:2d:a5:8f:37:ba:e4:
         87:d5:b5:2b:5c:cb:0c:af:2b:b9:3b:ea:0f:6b:8e:7c:d0:ee:
         43:05:4a:dd:e2:98:b7:ea:28:c4:aa:f2:b6:70:b8:fc:52:7f:
         c9:a7:d8:43:3a:85:2e:75:5f:28:ff:c8:6e:98:fb:b1:dd:18:
         21:1b:b5:98:83:b8:1e:09:44:d2:bc:c1:a2:59:2a:d4:c0:8e:
         de:60:7f:78:c0:b1:3b:e6:98:01:20:cb:91:63:ae:fb:36:c6:
         3d:5f:da:b9:67:90:99:4c:2b:13:6a:ea:13:45:3a:27:b0:ec:
         80:b1:7e:81:0e:d6:00:16:2b:a5:e4:af:d9:e0:f9:46:ba:bb:
         0b:4e:70:22:9b:47:19:47:e8:5e:c9:32:4d:e8:6d:4b:a7:62:
         96:cc:35:b6:12:cd:d1:86:15:14:13:13:df:49:d4:a7:ab:f5:
         d5:7b:93:b1:22:16:93:65:e3:bb:1d:2c:8d:cd:db:92:18:7a:
         ca:c9:c1:cd:97:32:3e:40:b0:9d:be:ba:9f:74:5b:e0:ca:c5:
         59:be:62:cc:ac:e8:91:57:3c:74:d3:f8:6a:27:78:c6:a4:9d:
         00:a6:f9:0f:4e:8a:6d:72:dc:8d:e3:81:b4:78:aa:6e:bd:7e:
         9e:39:48:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTM1ODQxMTAvBgNVBAUTKDFDMDE3NUU3QjMzNzEyN0U2RUMyNTFGNDNBMEQyQUM2
MTMxMUJGNEUwHhcNMjYxMDA2MTQyNjQ3WhcNMjYxMDEzMTQyNjQ3WjAYMRYwFAYD
VQQDEw02YWM1MDUyOC03ODE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8BKFbqqzPEuM4v6LJ1MXWGFP8DhG9XhKDK1tURrPWIkWwEIb1OEx7C4KFk9
egLFZ3tUek8DsqGHJQCWCh/UkKm5trxEnKyFZ1j+vbXy9zslcjsrTyl2KoPDgTB9
CdeuFIfK/ks/8D1D9uA3E+DS3NscB6OY0g/+kX30H0DvL5kjEoQWl5VpW7z6wUPi
EdWMzHxIVSNdnUIT5gmVCnANz2GtyhpmW9BUDpG03H0LUl5W2FeJx/o1qdHZqw1E
EnQNnWxFOajVDgQOgRaoYj6vgfHlIrrnzxib7d5mxoCZkiACnFRk581IJFojoddP
hE4qTMIoGbeu/DDcq4RYV7PqMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiRKOz/
Wf3jc6fFdOxauYYndXitMB8GA1UdIwQYMBaAFBwBdeezNxJ+bsJR9DoNKsYTEb9O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzU4NC9EMUExMjk0NjFE
ODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0VuNXV3bEgwT2cwcXhoTVJ2
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hBRjE1N00zRW41dXdsSDBPZzBxeGhNUnYwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MzU4NC9EMUExMjk0NjFEODUxMUUyQkI0RkE0REMwOEIwMkNEMi9IQUYxNTdNM0Vu
NXV3bEgwT2cwcXhoTVJ2MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt57Fpk51r9MGjrPvLaWPN7rkh9W1K1zLDK8ruTvqD2uOfNDuQwVK3eKYt+oo
xKrytnC4/FJ/yafYQzqFLnVfKP/Ibpj7sd0YIRu1mIO4HglE0rzBolkq1MCO3mB/
eMCxO+aYASDLkWOu+zbGPV/auWeQmUwrE2rqE0U6J7DsgLF+gQ7WABYrpeSv2eD5
Rrq7C05wIptHGUfoXskyTehtS6dilsw1thLN0YYVFBMT30nUp6v11XuTsSIWk2Xj
ux0sjc3bkhh6ysnBzZcyPkCwnb66n3Rb4MrFWb5izKzokVc8dNP4aid4xqSdAKb5
D06KbXLcjeOBtHiqbr1+njlIPQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:32:04 2026 by rpki-client