Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          XPluJhExw2FTF228b6RKquxydS/OsmDA5zI89nqxfOc=
Subject key identifier:   A4:91:A7:CD:7D:5B:3D:7A:4F:2D:50:82:B5:E8:E4:4C:5F:FA:12:8F
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          0201
Signing time:             Sat 05 Sep 2026 02:59:31 +0000
Manifest this update:     Sat 05 Sep 2026 02:59:30 +0000
Manifest next update:     Sat 12 Sep 2026 02:59:30 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: mTQjrrDcN1jhO7RztjLfTvdYZkW2zWOB98CzvwT0YvU=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 02:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Sep  5 02:59:30 2026 GMT
            Not After : Sep 12 02:59:30 2026 GMT
        Subject: CN=6a9b8593-8628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:12:86:33:6c:61:45:51:f3:45:6a:8c:a8:29:
                    55:e0:b1:7c:e7:db:3a:d6:4b:46:af:bd:7e:f3:1a:
                    5d:47:a8:df:5f:30:2b:19:dd:af:58:17:e4:50:0d:
                    72:e9:11:1f:06:c9:44:1a:57:58:83:7f:12:03:20:
                    00:02:ca:e9:e0:2e:a1:db:20:98:13:52:bc:ac:aa:
                    f1:c9:aa:83:46:17:66:68:95:c3:ee:5c:87:7e:51:
                    33:48:32:a1:0f:48:a1:ee:b0:45:59:78:79:84:3d:
                    a5:ac:73:d8:c4:a9:ac:ac:27:21:01:2d:4d:55:d8:
                    c7:36:49:f0:55:23:e8:be:b3:96:1f:84:55:d0:45:
                    59:b7:5a:2b:87:f9:0c:d5:f1:a3:6a:bf:f5:61:f0:
                    06:d1:22:fd:4d:04:55:50:f4:e1:68:8e:0a:12:7c:
                    4c:bd:7f:f7:fb:4b:e0:92:49:e1:cf:e3:64:69:57:
                    4a:57:0c:89:51:6d:16:68:f0:b4:90:b0:85:2d:70:
                    e4:8a:ee:33:ce:5a:36:d3:b8:a5:32:7e:59:31:0e:
                    b7:ea:3d:d4:92:f6:59:5a:79:55:1e:65:f5:1d:b8:
                    5e:3b:74:93:3e:7d:e8:4f:d6:a0:76:9c:72:a1:4a:
                    c4:f0:b8:61:61:ac:33:d4:67:83:19:53:4d:23:29:
                    56:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:91:A7:CD:7D:5B:3D:7A:4F:2D:50:82:B5:E8:E4:4C:5F:FA:12:8F
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:b2:b1:e7:1d:fd:a5:0c:86:97:c8:a0:26:f4:74:bb:2b:13:
         8c:cc:96:b5:29:5f:fe:b8:42:ab:58:0b:0a:aa:d6:29:23:ef:
         00:7a:b3:96:71:a7:cf:b1:8a:96:38:c7:2f:13:4b:e2:f2:38:
         08:a2:cf:76:88:86:93:42:e4:9b:2a:95:f5:eb:4d:77:51:ad:
         bf:af:6f:58:40:5a:35:b8:dc:03:ca:77:a7:42:f9:2f:ac:dc:
         bc:39:7f:70:66:34:06:fb:61:3d:78:44:41:46:6f:ee:cf:4f:
         b6:b0:75:9b:73:bc:7d:45:e3:dc:80:4b:cf:50:78:79:0a:2f:
         de:3c:a3:19:17:e3:5b:9f:9a:3a:a5:7a:8c:b4:70:dd:f8:2a:
         c9:ca:4d:43:c0:b4:e7:bc:a0:b7:9b:fe:41:aa:b1:a0:ea:03:
         98:71:17:38:79:cc:d8:2a:da:f9:09:20:42:0e:a9:9c:f8:b6:
         1e:4e:68:e1:3a:5c:89:0f:1b:07:81:d6:32:64:c6:5b:a7:ef:
         c9:32:a4:c7:2e:94:ce:8f:dc:36:99:aa:12:b0:52:31:ee:e8:
         71:54:9c:c5:d2:86:f7:32:32:05:14:3f:10:b7:fd:b7:fd:32:
         7b:ee:11:3b:60:de:8a:6c:e2:f2:91:04:38:8d:8a:6c:3f:31:
         9f:b1:5d:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4
OEExOTAwNjAwHhcNMjYwOTA1MDI1OTMwWhcNMjYwOTEyMDI1OTMwWjAYMRYwFAYD
VQQDEw02YTliODU5My04NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxKGM2xhRVHzRWqMqClV4LF859s61ktGr71+8xpdR6jfXzArGd2vWBfkUA1y
6REfBslEGldYg38SAyAAAsrp4C6h2yCYE1K8rKrxyaqDRhdmaJXD7lyHflEzSDKh
D0ih7rBFWXh5hD2lrHPYxKmsrCchAS1NVdjHNknwVSPovrOWH4RV0EVZt1orh/kM
1fGjar/1YfAG0SL9TQRVUPThaI4KEnxMvX/3+0vgkknhz+NkaVdKVwyJUW0WaPC0
kLCFLXDkiu4zzlo207ilMn5ZMQ636j3UkvZZWnlVHmX1HbheO3STPn3oT9agdpxy
oUrE8LhhYawz1GeDGVNNIylWjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSRp819
Wz16Ty1QgrXo5Exf+hKPMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3
RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE
NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg7Kx5x39pQyGl8igJvR0uysTjMyWtSlf/rhCq1gLCqrWKSPvAHqzlnGnz7GK
ljjHLxNL4vI4CKLPdoiGk0LkmyqV9etNd1Gtv69vWEBaNbjcA8p3p0L5L6zcvDl/
cGY0BvthPXhEQUZv7s9PtrB1m3O8fUXj3IBLz1B4eQov3jyjGRfjW5+aOqV6jLRw
3fgqycpNQ8C057ygt5v+QaqxoOoDmHEXOHnM2Cra+QkgQg6pnPi2Hk5o4TpciQ8b
B4HWMmTGW6fvyTKkxy6Uzo/cNpmqErBSMe7ocVScxdKG9zIyBRQ/ELf9t/0ye+4R
O2Deimzi8pEEOI2KbD8xn7FdbA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:44:29 2026 by rpki-client