Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File:                     hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier:          MD8OKhVJCH2DgY98MZA3CMrmXgJ1oHyOhM4qQKSB/lQ=
Subject key identifier:   E6:DB:B2:C0:5A:AE:BD:E5:4C:6C:95:A1:BA:32:FF:96:FE:25:66:4F
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer:       /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial:       03D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number:          03CC
Signing time:             Wed 13 May 2026 00:45:21 +0000
Manifest this update:     Wed 13 May 2026 00:45:20 +0000
Manifest next update:     Wed 20 May 2026 00:45:20 +0000
Files and hashes:         1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: knjmgCPEnDtwjYW7kz/dGGpzem130nMjlycr8fobFQI=)
                          2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
        Validity
            Not Before: May 13 00:45:20 2026 GMT
            Not After : May 20 00:45:20 2026 GMT
        Subject: CN=6a03c9a1-93e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:90:8a:68:07:86:0b:0c:f1:82:bd:1d:7e:
                    36:b5:71:15:be:84:ba:e0:29:b8:89:6f:8d:da:3c:
                    99:53:0b:66:8a:51:81:0b:4e:d9:7f:75:f5:97:e7:
                    14:60:b4:bb:85:53:2a:7c:70:44:a9:a3:17:1e:1f:
                    f5:2a:a7:69:2c:96:b3:5d:4c:96:52:71:1e:2e:44:
                    3b:22:93:2e:68:b1:ad:31:0f:dd:20:2f:b0:c1:8f:
                    37:7c:29:a2:3c:ca:8c:6c:64:e1:5c:2d:0e:db:71:
                    c5:8b:45:01:57:ce:26:87:ff:12:ec:48:5f:2c:88:
                    ee:7d:a5:3f:7f:52:a7:45:01:86:70:a8:83:67:7e:
                    d2:28:f9:56:8e:c8:02:1a:32:ca:f8:89:24:16:c3:
                    58:7e:2f:15:75:e0:5c:92:71:b3:e4:13:36:e5:25:
                    33:db:d5:04:72:5e:3a:1a:14:f0:d8:3c:a5:5a:0e:
                    c6:8e:cc:c9:14:1d:df:af:e3:38:08:1d:b7:78:8e:
                    d0:92:16:10:73:23:51:83:7a:c0:da:44:e0:e7:37:
                    e8:fe:2e:e4:5b:8d:c8:9f:b4:29:6d:e2:af:a4:b4:
                    90:bc:12:e3:25:7b:90:20:7e:40:3b:78:d1:6d:5d:
                    51:a5:2f:df:73:6e:71:a7:2a:53:8c:75:5c:f8:4f:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DB:B2:C0:5A:AE:BD:E5:4C:6C:95:A1:BA:32:FF:96:FE:25:66:4F
            X509v3 Authority Key Identifier:
                keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7e:a5:66:2b:90:43:93:2f:1c:8c:94:c2:23:e4:e9:42:e3:
         43:18:f3:ff:70:a7:da:ec:98:6f:78:5c:b8:01:fa:be:a0:8c:
         88:aa:5b:81:a6:57:ab:bc:a7:2b:ce:67:7b:e3:75:57:3c:89:
         d1:0a:ab:bd:6e:9e:42:c7:6f:4b:30:43:79:43:78:4d:b1:21:
         42:59:3e:a7:4b:cf:3e:8f:3c:97:bf:e4:0d:10:ae:2b:12:b7:
         ac:d5:bb:b9:96:7e:4b:f6:7a:85:85:21:9e:a6:42:5b:24:2d:
         56:9d:58:3c:09:99:1f:91:2e:df:6e:e6:de:64:44:c7:e5:5a:
         3f:ec:f6:56:e9:e2:c4:b1:46:98:a3:83:d8:c2:38:73:40:01:
         86:75:b9:11:12:20:33:2f:53:15:d9:b1:06:8e:60:fc:89:83:
         10:64:5f:dc:f8:d5:77:39:b2:dd:55:0a:82:c6:86:68:c7:da:
         a5:0b:a6:a6:b4:2f:49:33:d6:a5:8e:6b:aa:4c:1a:7f:98:21:
         eb:f2:50:61:55:3b:49:f8:64:95:b0:74:d5:f8:b3:9b:21:d8:
         b3:59:39:8e:ad:a2:a5:ac:49:45:5e:d5:ff:2e:65:c5:e1:a1:
         89:b4:5c:2f:c2:aa:c3:1e:e1:ee:6f:14:02:db:45:f2:cd:cd:
         67:e5:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:56 2026 by rpki-client