Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File:                     hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier:          Y9BXiH4mP+vKjlk9NOD4PDekC+4RGAmVNh3cLDQ/TJM=
Subject key identifier:   D0:62:B9:64:48:DF:61:39:4F:FE:AD:6E:2D:74:8D:14:90:0A:5F:B9
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer:       /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial:       1537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number:          151E
Signing time:             Sat 04 Apr 2026 16:44:13 +0000
Manifest this update:     Sat 04 Apr 2026 16:44:13 +0000
Manifest next update:     Sat 11 Apr 2026 16:44:13 +0000
Files and hashes:         1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: wmDEk9HKY28NiOQ9wJh8U0zkKGZTT0Yrs/426YZnTnc=)
                          2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: RnKanm5hHk3mFwa7+wHjDrcythGv+bDKBJwJ7N6lnUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5431 (0x1537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
        Validity
            Not Before: Apr  4 16:44:13 2026 GMT
            Not After : Apr 11 16:44:13 2026 GMT
        Subject: CN=69d13fdd-e6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:0d:45:9f:42:dc:da:b1:b7:7f:ae:44:8c:
                    b2:b3:4a:c6:71:14:af:1f:a4:f5:23:a7:62:31:94:
                    d6:47:fe:4d:f9:a8:5a:ed:13:05:ca:45:a7:eb:09:
                    e8:70:d6:12:02:3f:23:5b:44:2f:a9:cd:ce:8a:9e:
                    de:7f:d8:98:08:4d:6e:60:70:c3:26:85:aa:cb:62:
                    5f:8e:fa:99:64:6e:6a:18:a4:23:1f:f4:d4:6f:06:
                    45:5d:2b:2b:65:0f:a7:d9:0a:82:ca:3d:c1:a7:07:
                    50:9a:60:6e:dd:1f:4f:42:c1:3e:f0:a1:df:74:36:
                    65:86:d7:fd:d7:73:b5:0a:86:2f:0b:17:e4:9c:77:
                    d7:5b:45:a0:72:84:34:98:7e:56:25:f3:52:6f:77:
                    6b:57:fa:00:ac:f2:6a:b6:d1:5b:fa:3a:66:1f:b7:
                    3e:0c:e8:30:4e:97:77:d3:9b:80:8b:2e:ce:c1:2b:
                    29:9f:5e:78:3e:73:5d:8c:2b:23:f3:19:ab:13:fa:
                    9c:ae:71:fd:f7:2f:d9:11:f7:12:dd:b5:5d:b7:90:
                    79:ac:31:ac:08:fc:51:00:21:1c:20:30:01:1c:2c:
                    aa:dc:03:0d:74:f8:18:d8:af:54:a0:44:e7:78:96:
                    d0:be:b1:96:b7:ea:15:76:14:b3:2d:b4:2e:36:75:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:62:B9:64:48:DF:61:39:4F:FE:AD:6E:2D:74:8D:14:90:0A:5F:B9
            X509v3 Authority Key Identifier:
                keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:80:f6:97:2b:74:45:61:14:e8:e9:f3:c1:31:7b:09:09:
         c7:f9:0b:ed:73:89:df:da:4f:ae:44:98:39:a4:7e:b7:17:76:
         71:16:a6:c4:15:28:d7:44:71:ed:62:ae:21:1d:0b:c2:b1:76:
         44:16:1f:13:65:8e:26:cd:81:79:da:48:c7:1f:48:fc:7d:f4:
         ba:92:27:a4:8a:f5:c5:d3:df:23:c5:83:1c:20:6c:37:76:c3:
         63:01:3b:43:95:32:31:94:5d:61:e5:03:1f:99:f9:c8:9d:da:
         ff:c6:35:51:c0:8f:56:01:cb:27:69:34:64:6d:c0:6a:f3:ca:
         65:d0:50:eb:33:cf:5a:ad:ef:5c:ac:e5:41:67:53:df:ca:2f:
         51:80:37:7b:79:d9:01:ba:07:e1:6d:69:50:5c:ad:3a:14:73:
         fa:bc:29:63:b5:07:00:06:29:fe:fc:5a:ab:52:99:ab:cb:e3:
         10:c7:78:7d:c0:1d:d3:4c:20:72:6c:41:a4:50:c5:50:3c:dd:
         53:00:8b:e8:c0:ab:80:f9:1a:20:5a:23:98:31:8a:26:87:15:
         2d:d8:ef:82:30:63:24:2f:31:b4:8b:54:a8:44:03:d0:05:a4:
         83:8b:1f:ea:19:40:6a:0c:85:a5:ec:f5:9d:c0:9a:ac:d3:32:
         31:08:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:41 2026 by rpki-client