Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
File:                     hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json)
Hash identifier:          h69smjoJPKoLyhHkzPqyc+ZZuSrN4iowGfyPvbMGELg=
Subject key identifier:   1E:1D:72:75:8B:A2:FC:CA:49:A4:8A:94:75:F7:A6:61:5F:4F:21:90
Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24
Certificate issuer:       /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
Certificate serial:       159E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
Manifest number:          1583
Signing time:             Thu 08 Oct 2026 16:51:00 +0000
Manifest this update:     Thu 08 Oct 2026 16:51:00 +0000
Manifest next update:     Thu 15 Oct 2026 16:51:00 +0000
Files and hashes:         1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: Ky2yMhfsTdX4FggjhJoKrvlPW0dr/RNXasnOg1X19uQ=)
                          2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: N2GLw/jLpB8wgbjmUIKTSDkmTxJ/TeT4tcXsOMBvWsQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl
                          rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 16:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5534 (0x159e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24
        Validity
            Not Before: Oct  8 16:51:00 2026 GMT
            Not After : Oct 15 16:51:00 2026 GMT
        Subject: CN=6ac7c9f4-2d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:d8:86:98:0e:a5:88:4e:ee:0b:35:3c:b3:
                    e5:72:c5:ab:81:d0:df:3b:18:a5:6e:00:79:4f:22:
                    66:a0:42:66:a8:7a:00:e3:6c:c7:50:ce:4d:4a:d3:
                    75:b1:12:a5:f7:0f:24:f6:2e:25:30:f9:65:55:30:
                    d3:0c:36:02:31:60:59:ef:20:34:b8:a8:ca:43:21:
                    36:03:09:17:89:30:ea:d4:30:5c:fb:99:5e:79:8f:
                    fd:9d:be:fa:e3:d2:24:9c:2a:5b:65:15:23:46:b3:
                    4c:ca:43:41:95:76:d0:a2:06:eb:e1:68:0f:51:7c:
                    85:80:2f:ab:74:2b:86:4f:94:5e:66:27:f3:58:48:
                    b9:d8:d5:0a:a6:8f:3e:e7:ea:4c:9e:20:43:77:58:
                    e1:db:d6:04:ee:f0:d1:9c:6b:0a:8b:01:1d:63:4d:
                    9f:72:97:88:73:84:83:75:9a:9a:21:13:cb:75:62:
                    82:23:74:75:7c:af:1a:cc:b0:2b:55:68:3d:04:6b:
                    e1:a4:bc:a6:21:36:12:b5:f8:b7:69:a2:bd:9f:95:
                    e3:82:e3:c5:49:db:18:49:ef:ba:e0:40:ae:37:27:
                    15:38:c4:df:5c:25:ee:2f:fb:5b:09:ca:d2:b8:80:
                    9d:b8:af:5a:27:81:d2:f0:39:20:9d:54:46:a5:6f:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1D:72:75:8B:A2:FC:CA:49:A4:8A:94:75:F7:A6:61:5F:4F:21:90
            X509v3 Authority Key Identifier:
                keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:bd:67:87:d5:58:48:65:36:ab:23:bf:f8:88:ad:18:bf:86:
         f0:91:ec:9f:15:68:c8:05:6c:70:5e:e2:24:7f:8c:6a:3f:74:
         16:eb:f5:47:86:04:3a:f0:ac:a0:3c:10:ee:21:47:4f:6d:18:
         8a:20:bf:ce:05:96:c7:95:22:c5:c3:67:67:57:02:54:1b:76:
         b8:93:17:16:36:bd:af:f4:61:a0:c7:b6:a7:6f:04:b2:80:ff:
         fd:6b:54:eb:56:ec:db:ef:d1:23:3f:79:8a:60:47:61:99:0c:
         2d:1a:12:e6:ba:b0:35:b0:d0:51:e1:2e:a8:50:12:55:66:8a:
         a1:e5:7d:1c:fc:8c:de:d3:07:ba:27:d1:22:b4:59:d8:95:97:
         80:57:5f:ed:63:8a:20:db:40:e7:58:fa:1c:e4:4e:07:e2:d0:
         a8:43:46:20:a6:3a:05:d4:d9:86:5d:1b:54:4f:89:b0:59:1f:
         ad:5d:f4:0f:d8:08:4f:b7:47:36:93:01:87:4f:10:e1:f4:bc:
         98:36:b8:fb:27:3e:ce:99:73:05:77:14:18:75:7a:8d:c3:7e:
         f5:e7:32:d7:cc:61:00:06:0d:90:e0:6c:25:d5:75:e0:bd:a5:
         0f:4b:a6:02:65:67:43:02:06:f0:79:40:7e:80:40:72:0b:c8:
         8f:56:00:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:41:02 2026 by rpki-client