Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File:                     hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier:          +mMtBYMwpbS81UbmqWnFNlhXkeAvswXqFQgCsyrlpTs=
Subject key identifier:   CF:09:D5:CA:EF:56:D6:CC:81:81:93:12:A3:FD:54:96:05:2A:5F:EF
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer:       /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial:       1597
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number:          157C
Signing time:             Thu 24 Sep 2026 16:46:07 +0000
Manifest this update:     Thu 24 Sep 2026 16:46:06 +0000
Manifest next update:     Thu 01 Oct 2026 16:46:06 +0000
Files and hashes:         1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: ghJNIL5USasF4cHNz2j4R7Wf64QE4R0o5nnAgN8aV9s=)
                          2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: N2GLw/jLpB8wgbjmUIKTSDkmTxJ/TeT4tcXsOMBvWsQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 16:46:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5527 (0x1597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
        Validity
            Not Before: Sep 24 16:46:06 2026 GMT
            Not After : Oct  1 16:46:06 2026 GMT
        Subject: CN=6ab553ce-0495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:ae:3a:10:45:37:6f:31:8e:9a:28:9b:80:
                    7b:2c:ae:7f:a7:65:17:12:4f:0d:53:7d:f1:59:c1:
                    b1:dc:28:4c:26:36:a2:8d:81:ce:a3:d0:03:84:1d:
                    26:b1:41:91:c7:93:78:a2:88:24:b6:6c:b6:e8:e8:
                    0d:fa:63:2e:4e:ab:17:aa:d8:a3:fc:15:6c:e1:c1:
                    fd:6f:8e:ec:92:a5:70:55:04:4a:3a:79:29:8f:7b:
                    cb:90:1b:ea:19:bf:87:51:58:3e:96:e5:fa:75:53:
                    86:4d:b8:6e:b3:05:1d:39:ad:60:7d:47:84:d1:e9:
                    82:d0:cd:cc:7f:45:aa:46:ed:89:ab:f5:5d:04:e6:
                    7a:2f:4a:5b:02:73:86:3b:28:f6:fd:28:e7:aa:c9:
                    10:3f:d8:bc:3a:45:d6:17:fd:ff:62:1f:a7:92:6a:
                    a3:fa:cb:71:a5:11:8d:b2:04:8e:4d:bb:02:37:b6:
                    74:46:2d:ad:09:fe:d3:95:e7:2e:53:e5:07:d3:83:
                    80:e6:2e:19:b8:6d:50:75:35:84:25:35:22:5e:de:
                    96:c8:0a:b9:5a:db:51:65:2a:b8:66:9c:0f:6e:f5:
                    88:60:51:7c:70:99:03:7c:f6:f3:e8:e5:08:7e:14:
                    48:5e:80:14:d8:f2:a1:95:54:f9:e0:3d:d4:21:0b:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:D5:CA:EF:56:D6:CC:81:81:93:12:A3:FD:54:96:05:2A:5F:EF
            X509v3 Authority Key Identifier:
                keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:78:8f:25:df:b3:b6:4d:3b:ee:01:88:69:ad:ee:08:02:a7:
         9e:5f:2f:3f:b3:28:31:7e:a0:3d:84:b8:d9:f5:79:aa:76:36:
         37:d6:00:b5:40:a5:e2:67:81:5f:85:a4:7b:65:87:6c:32:22:
         4f:03:65:4c:68:99:04:10:04:db:a4:b1:72:3a:f6:f3:58:fe:
         97:1f:cc:a0:a5:34:01:af:cc:fe:77:4d:f5:f3:d8:9d:82:eb:
         b8:4a:43:82:c9:a0:20:2d:59:6c:9d:f8:ef:cc:39:ad:fa:18:
         05:ed:a6:5f:88:c9:10:11:34:f4:8f:1d:35:f9:e0:a5:09:81:
         7f:a2:47:c7:e6:21:af:be:2a:16:82:60:44:b5:34:ec:54:4a:
         68:69:f9:8c:64:2b:0f:a0:6f:41:b7:fc:a6:5d:41:de:ec:03:
         93:c1:d0:51:2f:4b:1f:72:16:d1:cb:b9:ac:02:06:e0:41:64:
         72:04:c0:f6:f9:8e:5a:fc:2b:de:ae:33:21:6d:e9:bc:77:c7:
         6b:62:1f:12:fe:1e:df:30:bc:83:2d:be:bf:40:6d:84:6d:d6:
         5e:21:9d:27:72:34:9e:f7:b5:6d:c6:e5:c2:c8:1e:b5:a6:f3:
         89:87:4d:2a:e9:71:de:33:98:50:be:a0:2c:6b:9e:78:ab:7e:
         d0:76:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:32:38 2026 by rpki-client