Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
File:                     hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft (raw, json)
Hash identifier:          5azfPXvs8IY1XKQUFNzexl1NqN3C/7uTTNT3UrI2NZE=
Subject key identifier:   A9:1F:04:6E:1E:1B:0A:F1:D6:AA:89:BC:FB:CE:ED:8E:EC:DF:E1:99
Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8
Certificate issuer:       /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
Certificate serial:       019D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
Manifest number:          0195
Signing time:             Wed 25 Mar 2026 03:46:21 +0000
Manifest this update:     Wed 25 Mar 2026 03:46:20 +0000
Manifest next update:     Wed 01 Apr 2026 03:46:20 +0000
Files and hashes:         1: hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl (hash: 82WLPcBLeynNHpnY0oa6PFVVQDWu27a6SbaN6Vm51Lg=)
                          2: BF886C00D26A11EEAF76482BC4F9AE02.roa (hash: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl
                          rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:46:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8
        Validity
            Not Before: Mar 25 03:46:20 2026 GMT
            Not After : Apr  1 03:46:20 2026 GMT
        Subject: CN=69c35a8d-f63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:c4:67:61:01:13:ec:7b:a0:87:02:49:bc:
                    02:c3:ad:30:8e:4b:26:0c:bc:24:73:80:5f:9c:05:
                    38:fe:89:79:78:ec:2f:ad:74:6d:79:10:38:c8:38:
                    5b:01:e4:e5:7b:8e:64:9f:83:4c:28:22:d1:a5:1a:
                    cd:b7:18:07:bd:fd:59:0b:24:70:ab:69:2f:93:0e:
                    32:f9:0a:ee:0b:c4:80:c9:53:6f:40:7b:23:cb:d6:
                    1e:56:7b:b3:33:a9:2c:7b:64:98:d6:ce:c3:bd:8b:
                    eb:5b:8d:a8:8a:82:85:b4:cc:c8:a0:1e:b3:a9:35:
                    6d:28:76:55:b7:97:37:51:72:ae:70:1f:6b:fe:ae:
                    1a:40:e1:27:fa:35:51:9b:ac:16:63:3c:2d:e7:a0:
                    f5:3f:ba:57:de:a1:1b:40:21:c9:87:b3:ec:1d:0e:
                    30:9d:3c:4d:9f:14:9b:ba:e0:0b:17:97:06:fb:74:
                    4e:a1:42:15:2d:ab:4d:2f:e1:1d:38:48:55:7f:3d:
                    72:c0:ba:98:4b:08:dc:da:30:54:1e:cf:89:c1:75:
                    31:b9:02:c0:eb:52:48:f8:ff:0d:53:a2:c1:cd:cc:
                    f1:44:3a:e2:8b:ec:93:cd:32:39:da:cb:0e:05:9f:
                    e4:36:f3:63:48:32:1e:b4:8a:71:6c:ed:07:44:3c:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:1F:04:6E:1E:1B:0A:F1:D6:AA:89:BC:FB:CE:ED:8E:EC:DF:E1:99
            X509v3 Authority Key Identifier:
                keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e3:bb:24:9e:30:07:37:d5:3d:68:c1:6d:a2:56:b8:51:45:
         52:b0:f5:78:e0:63:8d:b3:a4:ff:18:d5:95:51:d7:b9:df:b3:
         f9:31:5f:ef:d2:99:d1:e0:29:75:c5:e4:f1:b6:18:ec:15:46:
         af:c1:67:19:33:5b:11:8d:18:ab:15:0e:73:be:e0:d9:db:a4:
         b1:c2:99:15:2e:e7:5a:fc:d3:7e:93:94:11:de:74:05:8c:fa:
         fa:58:e0:de:3a:5f:66:30:a6:e9:d8:64:4e:70:b2:60:3d:3a:
         51:a1:80:dd:bd:ef:e3:9b:24:bc:c8:9a:d8:40:18:23:6b:44:
         51:bf:a5:be:08:50:b1:70:c8:3e:40:94:45:06:f7:e4:58:e2:
         87:3f:7d:63:fb:cf:65:01:0b:be:83:51:0a:d3:f1:23:8d:2c:
         88:a4:1e:aa:ea:b6:ae:10:7a:ff:44:72:20:84:3d:e5:a4:1b:
         6c:a9:26:93:90:3f:97:a8:42:a2:c7:6d:84:8b:20:10:86:8e:
         c7:d1:14:f4:04:5a:70:05:f2:a5:43:12:69:71:8c:50:83:d9:
         57:e4:db:ee:b9:cd:3b:d9:c3:1c:a9:40:d5:50:19:75:be:0e:
         b9:81:2b:8c:74:92:18:0e:be:5f:47:a3:b6:65:5a:e1:7a:48:
         74:d6:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:24 2026 by rpki-client