Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File:                     hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier:          QRp73j1FZaV75DFIzq//p0A2kmOiaxT/hlA6YT/2Tlc=
Subject key identifier:   89:93:8C:E2:7F:B4:D8:4F:F8:55:84:D6:DF:72:1B:13:3D:DC:43:2C
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer:       /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial:       0420
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number:          0414
Signing time:             Sun 27 Sep 2026 00:25:51 +0000
Manifest this update:     Sun 27 Sep 2026 00:25:50 +0000
Manifest next update:     Sun 04 Oct 2026 00:25:50 +0000
Files and hashes:         1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: KMrSDA06cpSyHq2NCfOGy0ZX2nEmJ4OUdeUyLcVJEYg=)
                          2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: bEkAf8RbC70HpP82l6520PaTKeuoOgUw/cUr1803UXE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 00:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1056 (0x420)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
        Validity
            Not Before: Sep 27 00:25:50 2026 GMT
            Not After : Oct  4 00:25:50 2026 GMT
        Subject: CN=6ab8628e-2cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:be:97:1b:5a:68:14:4f:68:91:0f:35:34:d2:
                    7c:1c:1b:5f:99:d5:8b:73:80:c7:6f:68:11:b8:00:
                    ab:d3:3e:1d:a1:61:c6:4e:2b:80:23:d9:af:af:59:
                    8f:8c:25:23:b9:9f:27:55:7c:81:52:c6:05:72:a4:
                    9b:a6:a7:05:10:3a:0f:e3:73:f1:84:5e:a7:71:a5:
                    d6:24:30:50:6d:4c:1e:51:ce:f8:95:c7:c6:32:ea:
                    dc:d1:34:b6:7d:a1:eb:63:f0:17:59:df:6a:ba:1d:
                    ea:27:1f:65:57:d9:df:65:44:bb:41:5d:b4:ed:e2:
                    61:6b:b7:c2:71:8e:3e:35:6f:f2:17:ef:b1:bc:05:
                    1c:a0:6d:1e:7d:92:26:b1:96:6e:b2:99:35:80:5d:
                    62:1a:74:4f:85:51:55:b7:bb:89:14:23:e4:ae:0c:
                    20:a4:60:35:d5:a1:6a:ba:46:b6:64:56:65:fe:2e:
                    42:4c:f0:3c:fb:f6:a1:17:91:34:cd:57:c6:34:cd:
                    46:45:a8:14:af:0a:e8:93:24:9f:6e:71:e8:9a:97:
                    b5:e2:ab:f9:af:e0:57:3b:e7:c9:b3:02:91:0e:0f:
                    6f:5c:4f:01:9c:34:e6:43:e5:23:0f:93:5d:63:39:
                    82:5d:a6:02:c5:d3:e8:93:7e:23:ce:1c:08:fa:7d:
                    e1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:93:8C:E2:7F:B4:D8:4F:F8:55:84:D6:DF:72:1B:13:3D:DC:43:2C
            X509v3 Authority Key Identifier:
                keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:12:ef:d0:4f:e4:c8:bd:3f:78:c0:fd:03:cb:9c:2e:5b:09:
         73:f1:41:bd:a5:52:43:57:00:b2:49:ca:7a:92:33:5e:75:a6:
         e2:b9:b9:ec:6f:d4:6c:ae:9c:23:e8:94:66:03:2d:51:9d:f3:
         92:7e:ef:6b:50:b4:ae:25:a4:b7:ef:c0:bf:f7:b1:59:43:1b:
         da:9d:79:10:4d:90:56:11:87:5f:bf:fc:3a:a4:be:03:c4:21:
         17:b3:03:fd:c2:f1:30:3d:de:ef:44:41:84:aa:e8:00:92:81:
         5b:85:72:4c:a5:f0:6b:46:1a:2f:dd:af:1b:88:dc:f3:6f:49:
         ba:7b:c2:dc:52:91:54:9f:a6:88:aa:c1:ea:b2:30:53:25:3a:
         6a:83:b1:25:c0:3c:0b:47:7e:94:31:d1:2a:02:73:08:0e:bd:
         ed:b2:9b:c9:9e:c1:bc:67:10:90:ca:a1:d0:af:d8:a6:91:7a:
         bb:71:71:17:68:82:31:47:89:cd:fe:cb:d5:e8:95:b1:32:86:
         4a:b4:b6:cd:40:77:5c:8c:ba:1d:da:95:a4:b9:86:75:4d:99:
         01:69:27:12:30:d7:1e:72:05:10:49:5e:7e:94:6a:87:f2:71:
         b7:21:28:25:34:2e:1a:eb:90:dc:80:42:2e:07:23:2b:cb:21:
         55:9e:96:92
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0JFMkUxMTAvBgNVBAUTKDg1OEEyN0NCNUMwNENBREZBRUZEQjg5M0JGMDZFMUE3
QjdEOUYxQzEwHhcNMjYwOTI3MDAyNTUwWhcNMjYxMDA0MDAyNTUwWjAYMRYwFAYD
VQQDEw02YWI4NjI4ZS0yY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx76XG1poFE9okQ81NNJ8HBtfmdWLc4DHb2gRuACr0z4doWHGTiuAI9mvr1mP
jCUjuZ8nVXyBUsYFcqSbpqcFEDoP43PxhF6ncaXWJDBQbUweUc74lcfGMurc0TS2
faHrY/AXWd9quh3qJx9lV9nfZUS7QV207eJha7fCcY4+NW/yF++xvAUcoG0efZIm
sZZuspk1gF1iGnRPhVFVt7uJFCPkrgwgpGA11aFquka2ZFZl/i5CTPA8+/ahF5E0
zVfGNM1GRagUrwrokySfbnHompe14qv5r+BXO+fJswKRDg9vXE8BnDTmQ+UjD5Nd
YzmCXaYCxdPok34jzhwI+n3hmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImTjOJ/
tNhP+FWE1t9yGxM93EMsMB8GA1UdIwQYMBaAFIWKJ8tcBMrfrv24k78G4ae32fHB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkUyRS9EOEFCQUZFOEQw
RkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0LXVfYmlUdndiaHA3Zlo4
Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hZb255MXdFeXQtdV9iaVR2d2JocDdmWjhjRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QkUyRS9EOEFCQUZFOEQwRkIxMUVDQTI3QUYyMkZDNEY5QUUwMi9oWW9ueTF3RXl0
LXVfYmlUdndiaHA3Zlo4Y0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXRLv0E/kyL0/eMD9A8ucLlsJc/FBvaVSQ1cAsknKepIzXnWm4rm57G/UbK6c
I+iUZgMtUZ3zkn7va1C0riWkt+/Av/exWUMb2p15EE2QVhGHX7/8OqS+A8QhF7MD
/cLxMD3e70RBhKroAJKBW4VyTKXwa0YaL92vG4jc829JunvC3FKRVJ+miKrB6rIw
UyU6aoOxJcA8C0d+lDHRKgJzCA697bKbyZ7BvGcQkMqh0K/YppF6u3FxF2iCMUeJ
zf7L1eiVsTKGSrS2zUB3XIy6HdqVpLmGdU2ZAWknEjDXHnIFEElefpRqh/JxtyEo
JTQuGuuQ3IBCLgcjK8shVZ6Wkg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:04:28 2026 by rpki-client