Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          mCJwhedy8FfY9i6QmBplCQz4OY2wr6q8w/8HRcFG4M0=
Subject key identifier:   48:8B:8E:38:58:94:41:B8:EE:D0:9F:90:7D:FD:A6:5D:6C:47:11:16
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       01AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          01A5
Signing time:             Sat 07 Mar 2026 03:27:55 +0000
Manifest this update:     Sat 07 Mar 2026 03:27:54 +0000
Manifest next update:     Sat 14 Mar 2026 03:27:54 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: Cw+sclNtCzUl4FzxXW+8L2wW3kKy7Gj5FPI243LlTWU=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Mar  7 03:27:54 2026 GMT
            Not After : Mar 14 03:27:54 2026 GMT
        Subject: CN=69ab9b3b-7830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:ff:70:38:4d:90:f5:5b:d5:b3:ef:37:55:
                    e2:e2:63:41:13:66:85:b2:93:da:ed:47:4f:76:39:
                    fe:12:21:85:f7:42:12:85:c8:f6:f4:60:6b:fd:f4:
                    bc:7d:7c:dd:ec:48:d2:a2:0a:95:2a:a9:ea:5a:1a:
                    1d:9b:1c:ee:a5:ea:21:77:cc:1f:40:81:42:54:aa:
                    38:ee:1a:e1:47:d1:30:75:09:8e:35:7c:02:b9:db:
                    5b:99:1e:ba:4a:b1:e7:c9:d9:02:01:ed:59:b3:f2:
                    e8:c9:2f:85:3e:3b:34:e8:8f:58:c3:ed:6a:5a:38:
                    bc:d7:67:78:a4:c6:32:33:7f:11:63:05:98:0f:3f:
                    8e:f9:94:96:d8:5f:57:24:df:6f:27:bb:21:ca:40:
                    46:eb:12:93:44:16:b3:80:3a:ed:e7:b9:8c:c2:6a:
                    e5:51:6b:f8:c4:68:f1:cc:28:27:0d:8a:44:a9:80:
                    30:db:11:c4:04:60:f2:11:83:5f:19:ec:9d:29:64:
                    be:e8:a9:61:ed:c2:b1:a4:ab:17:b9:72:79:b9:02:
                    3c:65:11:c6:e1:33:05:30:b0:4d:a3:19:c2:8d:08:
                    24:9b:19:1f:60:b8:e9:3e:8f:47:76:c9:92:86:89:
                    e0:10:81:e3:a8:8c:bc:f2:23:5f:58:b8:63:5a:7d:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8B:8E:38:58:94:41:B8:EE:D0:9F:90:7D:FD:A6:5D:6C:47:11:16
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:29:3c:14:ba:f4:ed:49:01:1b:fb:2f:0b:bc:c3:8f:b3:96:
         a9:7d:28:1b:07:f0:5c:33:3e:f7:ae:ef:5a:ae:93:89:31:66:
         cb:bf:b9:77:a3:17:0c:ae:58:93:b0:9f:d4:ec:d6:f7:36:ab:
         51:82:c5:e6:ab:e3:d1:12:3b:52:48:bd:28:f6:10:f4:5a:53:
         58:e7:e7:9e:37:0c:bb:3a:47:cd:9d:c1:ad:34:d5:40:79:1f:
         3c:7f:a2:30:90:2b:8a:68:38:a1:b1:5f:c1:bf:de:ef:c3:b9:
         f0:f6:05:d3:fa:a4:32:22:8c:cb:7f:ea:d4:a4:c4:dd:77:6a:
         85:37:12:3b:0b:ee:aa:65:89:ff:4a:eb:49:a1:0f:9c:59:22:
         8b:d9:97:3f:10:30:95:ee:49:97:7e:d1:88:f1:c7:90:33:33:
         7a:04:16:b8:19:01:85:7b:43:d4:c6:3e:a5:d8:2a:66:df:4d:
         2b:5a:80:77:2b:8d:24:20:7c:87:f3:02:b4:c2:51:06:01:a5:
         9a:6f:e8:ce:06:ff:4c:3e:05:d0:18:0f:95:4c:e8:60:a4:b5:
         29:81:e3:d9:0c:45:87:f2:04:bd:33:87:99:91:e8:c7:0e:2a:
         76:2f:01:69:64:c4:54:7e:ff:34:65:9f:09:37:56:9a:c0:a3:
         00:ed:08:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUFDOUExMTAvBgNVBAUTKDg3MjhCODI4RjMxODYwM0U0NDcxMTA3MEMyNEVDQzA4
OEExOTAwNjAwHhcNMjYwMzA3MDMyNzU0WhcNMjYwMzE0MDMyNzU0WjAYMRYwFAYD
VQQDEw02OWFiOWIzYi03ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQH/cDhNkPVb1bPvN1Xi4mNBE2aFspPa7UdPdjn+EiGF90IShcj29GBr/fS8
fXzd7EjSogqVKqnqWhodmxzupeohd8wfQIFCVKo47hrhR9EwdQmONXwCudtbmR66
SrHnydkCAe1Zs/LoyS+FPjs06I9Yw+1qWji812d4pMYyM38RYwWYDz+O+ZSW2F9X
JN9vJ7shykBG6xKTRBazgDrt57mMwmrlUWv4xGjxzCgnDYpEqYAw2xHEBGDyEYNf
GeydKWS+6Klh7cKxpKsXuXJ5uQI8ZRHG4TMFMLBNoxnCjQgkmxkfYLjpPo9HdsmS
hongEIHjqIy88iNfWLhjWn2RGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEiLjjhY
lEG47tCfkH39pl1sRxEWMB8GA1UdIwQYMBaAFIcouCjzGGA+RHEQcMJOzAiKGQBg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QUM5QS9FMTlBMjU3ODk3
RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlENUVjUkJ3d2s3TUNJb1pB
R0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h5aTRLUE1ZWUQ1RWNSQnd3azdNQ0lvWkFHQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QUM5QS9FMTlBMjU3ODk3RjQxMUVFQkNFREMzNEZDNEY5QUUwMi9oeWk0S1BNWVlE
NUVjUkJ3d2s3TUNJb1pBR0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdSk8FLr07UkBG/svC7zDj7OWqX0oGwfwXDM+967vWq6TiTFmy7+5d6MXDK5Y
k7Cf1OzW9zarUYLF5qvj0RI7Uki9KPYQ9FpTWOfnnjcMuzpHzZ3BrTTVQHkfPH+i
MJArimg4obFfwb/e78O58PYF0/qkMiKMy3/q1KTE3XdqhTcSOwvuqmWJ/0rrSaEP
nFkii9mXPxAwle5Jl37RiPHHkDMzegQWuBkBhXtD1MY+pdgqZt9NK1qAdyuNJCB8
h/MCtMJRBgGlmm/ozgb/TD4F0BgPlUzoYKS1KYHj2QxFh/IEvTOHmZHoxw4qdi8B
aWTEVH7/NGWfCTdWmsCjAO0I0A==
-----END CERTIFICATE-----
Generated at Sun Mar 8 01:31:18 2026 by rpki-client