Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
File:                     hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft (raw, json)
Hash identifier:          CtS3WctPse+46SpeJyDiZ3+yyatlC56RYEZuChgCUgs=
Subject key identifier:   48:84:AD:21:BD:0C:9E:FD:A4:37:67:A0:37:E9:21:96:C2:99:C4:0B
Authority key identifier: 87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60
Certificate issuer:       /CN=A919AC9A/serialNumber=8728B828F318603E44711070C24ECC088A190060
Certificate serial:       01D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
Manifest number:          01D2
Signing time:             Fri 05 Jun 2026 03:53:03 +0000
Manifest this update:     Fri 05 Jun 2026 03:53:02 +0000
Manifest next update:     Fri 12 Jun 2026 03:53:02 +0000
Files and hashes:         1: hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl (hash: otAAby79fw8SszdRukbM+K7YfJ4YjhILIpq3xPpgQ/I=)
                          2: F0D7EB5097FA11EE90066875C4F9AE02.roa (hash: 6vqRkfNyBAwDiXHf3koAV6uBX2r6Cd6TaI9BMlOpzvA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl
                          rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC9A, serialNumber=8728B828F318603E44711070C24ECC088A190060
        Validity
            Not Before: Jun  5 03:53:02 2026 GMT
            Not After : Jun 12 03:53:02 2026 GMT
        Subject: CN=6a22481f-8f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:23:d8:0b:a0:7f:6a:34:95:0e:fd:4e:84:
                    e6:63:d3:ac:99:38:e8:be:6b:d7:d2:82:61:13:a7:
                    37:32:a6:68:fa:b3:9d:68:69:bd:e6:e2:a1:f0:96:
                    0c:3b:22:b7:75:43:ee:35:ca:b2:85:d2:c0:56:a5:
                    22:da:64:bf:44:a8:5c:79:9b:03:04:55:cd:75:6d:
                    5b:83:45:2c:0f:1b:0c:5b:f7:33:c8:75:04:24:72:
                    9c:6e:ba:d6:02:b5:a2:e1:dc:5e:66:47:3d:34:77:
                    60:40:55:ce:16:5c:8c:7f:cf:83:77:5b:fe:0f:4b:
                    93:86:5d:e2:c3:be:76:2b:36:8d:a9:a2:0a:d7:e6:
                    c6:9c:f8:07:08:60:f4:98:18:b6:80:e5:21:43:8f:
                    02:53:7d:f4:8c:0b:90:8d:83:da:30:0c:96:fc:10:
                    c6:43:30:68:91:82:df:90:cb:9a:eb:15:cd:4e:d8:
                    21:9f:5d:00:58:e9:01:78:df:69:cb:e9:78:d0:22:
                    3d:f7:15:e7:91:ca:ff:ca:14:aa:5a:88:51:27:39:
                    39:0b:e0:9a:a1:81:12:f0:f3:69:a9:e8:6e:57:80:
                    0d:25:4f:da:53:18:88:7c:45:fd:26:16:a2:a6:f1:
                    6e:5b:77:7b:17:ac:3e:60:0d:9a:c6:76:08:60:e3:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:AD:21:BD:0C:9E:FD:A4:37:67:A0:37:E9:21:96:C2:99:C4:0B
            X509v3 Authority Key Identifier:
                keyid:87:28:B8:28:F3:18:60:3E:44:71:10:70:C2:4E:CC:08:8A:19:00:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hyi4KPMYYD5EcRBwwk7MCIoZAGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC9A/E19A257897F411EEBCEDC34FC4F9AE02/hyi4KPMYYD5EcRBwwk7MCIoZAGA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:89:c8:49:7e:b7:bf:9d:86:be:8d:f4:d0:77:ac:73:23:9b:
         1a:d9:eb:6a:e7:51:c0:89:4a:d4:da:d1:f4:4f:2c:93:9c:e2:
         3c:0d:e3:30:84:38:df:41:3d:b9:4f:02:d1:80:94:9e:99:fa:
         ba:64:cb:a8:af:74:f8:95:94:6b:68:4f:88:f0:03:3b:f6:76:
         a8:a2:0f:46:98:53:14:57:1f:6c:6e:ec:bc:21:18:c9:e9:29:
         c0:84:96:8a:bf:3c:79:01:cf:4f:5e:c2:95:47:44:60:3e:e0:
         7a:62:90:2c:0f:0e:83:b8:cf:43:ec:8a:cd:94:ed:56:fe:81:
         de:85:63:e1:a8:92:b3:89:61:8c:af:a1:54:57:02:06:9c:bc:
         88:c0:94:7c:b4:a8:d1:12:81:87:66:21:d8:ba:db:9c:b7:48:
         94:41:26:5c:d3:4a:72:d5:af:44:5b:96:09:dd:9a:ca:07:e3:
         ee:d5:76:88:50:d6:55:d5:96:47:10:16:4c:7c:e2:2d:27:e8:
         f2:81:b5:cd:82:76:2c:ec:a1:a4:f7:1c:3c:76:7b:90:bc:0e:
         8b:bc:2a:13:08:3e:54:37:f9:2e:18:d4:68:d1:34:5b:50:b4:
         0a:8a:b7:15:f8:f0:7d:42:0b:03:e6:d6:1a:35:f2:6b:20:8b:
         4c:60:99:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:14 2026 by rpki-client