Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File:                     hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier:          8SFPWF+MzVxDFpkxZ3VZQra04aZ1czikSqefbT0DdHI=
Subject key identifier:   3B:72:36:3F:4C:21:AB:D6:A2:0F:34:67:FB:03:83:69:95:6D:4A:08
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer:       /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial:       03BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number:          03B3
Signing time:             Wed 25 Mar 2026 00:22:02 +0000
Manifest this update:     Wed 25 Mar 2026 00:22:02 +0000
Manifest next update:     Wed 01 Apr 2026 00:22:02 +0000
Files and hashes:         1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: cbpeFaNVtNiVsbjbmKpW9A1jOM0ugLkvEQKJfWIXlWQ=)
                          2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
        Validity
            Not Before: Mar 25 00:22:02 2026 GMT
            Not After : Apr  1 00:22:02 2026 GMT
        Subject: CN=69c32aaa-1e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:c1:88:7c:8a:05:4c:a2:10:30:dc:b4:d7:
                    e3:d3:69:f7:2e:cb:fc:ff:93:af:25:3b:da:60:b0:
                    1f:9f:ac:4a:d6:56:7d:60:0a:13:f0:a9:53:d2:c4:
                    3c:df:6e:d7:c8:5d:4f:8c:71:7c:27:ce:db:37:f3:
                    0d:81:c0:4a:a1:6c:35:60:ec:70:b8:04:ea:f7:bb:
                    92:da:97:b3:3f:2b:59:80:d7:5b:d8:07:9b:24:56:
                    f1:91:96:1f:61:96:68:97:04:f1:c8:80:9f:a1:3f:
                    0f:fd:ee:3d:df:91:5d:e4:b5:eb:c4:2b:04:1a:28:
                    cc:e7:a2:a2:88:50:00:a5:9d:72:70:5c:41:e0:b6:
                    a9:25:c8:33:26:46:52:32:6b:34:2c:ee:e9:c1:1c:
                    b0:22:11:d8:ac:ef:fb:dd:ef:37:30:41:94:c6:7b:
                    10:9b:58:c1:17:f7:aa:a9:ee:3a:85:6f:7f:64:4b:
                    a4:e5:a4:e8:7f:61:67:c0:e1:c2:32:36:a7:ec:53:
                    04:c0:f9:47:1e:00:2e:eb:c1:96:5e:ed:0f:f0:e3:
                    b4:d7:41:09:20:f0:3d:30:6c:9d:0e:fc:5e:a4:18:
                    13:af:9d:90:cc:63:ae:a5:63:9f:34:51:00:86:9a:
                    e1:e0:72:a6:df:c3:2d:ac:95:d3:c8:ab:1a:84:53:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:72:36:3F:4C:21:AB:D6:A2:0F:34:67:FB:03:83:69:95:6D:4A:08
            X509v3 Authority Key Identifier:
                keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e5:b3:01:8d:4d:ee:e6:77:87:fc:b2:66:5c:bc:e0:7f:9a:
         4c:85:b7:d2:9d:8b:85:2b:a5:b2:fb:74:e9:aa:6e:41:9b:1c:
         4b:e1:75:b9:28:e1:a6:8a:e8:35:57:dc:41:c0:81:10:6b:63:
         b3:39:58:ae:7f:db:c1:89:7c:c8:24:07:f5:67:fb:1b:a9:f8:
         9a:a5:ee:c3:97:c4:7c:3d:43:91:88:a6:96:54:c1:76:38:16:
         20:05:87:20:65:ce:09:3f:79:0e:5a:84:5c:83:b4:6e:7d:4e:
         89:bf:50:5b:59:52:09:19:02:a6:29:54:6a:7b:47:93:c9:4c:
         2a:88:8a:00:87:00:f2:4d:a7:09:e8:6c:0d:eb:4c:78:ad:eb:
         ab:2a:c4:e4:1f:d2:b9:82:c1:a6:4c:0b:f8:a3:5e:ca:45:08:
         ad:05:c6:04:7a:64:8d:da:31:c7:8e:82:44:6f:be:3c:f6:eb:
         b2:f6:6a:e7:e9:71:d4:7c:45:cf:f1:a3:ba:a2:b7:5a:72:30:
         ab:7f:7e:43:ea:9c:7e:37:89:46:71:32:8d:18:e8:02:1f:1e:
         f6:74:51:e6:6e:53:e9:27:63:e8:01:4a:87:45:71:10:45:31:
         53:42:1d:50:00:c2:7e:39:3a:40:90:04:76:d3:14:53:4b:5e:
         85:fe:02:00
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjYwMzI1MDAyMjAyWhcNMjYwNDAxMDAyMjAyWjAYMRYwFAYD
VQQDEw02OWMzMmFhYS0xZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzIvBiHyKBUyiEDDctNfj02n3Lsv8/5OvJTvaYLAfn6xK1lZ9YAoT8KlT0sQ8
327XyF1PjHF8J87bN/MNgcBKoWw1YOxwuATq97uS2pezPytZgNdb2AebJFbxkZYf
YZZolwTxyICfoT8P/e4935Fd5LXrxCsEGijM56KiiFAApZ1ycFxB4LapJcgzJkZS
Mms0LO7pwRywIhHYrO/73e83MEGUxnsQm1jBF/eqqe46hW9/ZEuk5aTof2FnwOHC
Mjan7FMEwPlHHgAu68GWXu0P8OO010EJIPA9MGydDvxepBgTr52QzGOupWOfNFEA
hprh4HKm38MtrJXTyKsahFOrfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtyNj9M
IavWog80Z/sDg2mVbUoIMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAl+WzAY1N7uZ3h/yyZly84H+aTIW30p2LhSulsvt06apuQZscS+F1uSjhporo
NVfcQcCBEGtjszlYrn/bwYl8yCQH9Wf7G6n4mqXuw5fEfD1DkYimllTBdjgWIAWH
IGXOCT95DlqEXIO0bn1Oib9QW1lSCRkCpilUantHk8lMKoiKAIcA8k2nCehsDetM
eK3rqyrE5B/SuYLBpkwL+KNeykUIrQXGBHpkjdoxx46CRG++PPbrsvZq5+lx1HxF
z/GjuqK3WnIwq39+Q+qcfjeJRnEyjRjoAh8e9nRR5m5T6Sdj6AFKh0VxEEUxU0Id
UADCfjk6QJAEdtMUU0tehf4CAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:25:17 2026 by rpki-client