Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
File:                     hypmcnatRHCKRH_b6IHxYueQ3WM.mft (raw, json)
Hash identifier:          LmK1PkpgMWfXDCphQqN5HLvujHaeANsRP87rIjllXb8=
Subject key identifier:   85:29:75:21:3D:12:78:A5:BE:F4:F5:EC:2E:04:34:C9:8C:AF:A2:64
Authority key identifier: 87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63
Certificate issuer:       /CN=A91C5153/serialNumber=872A667276AD44708A447FDBE881F162E790DD63
Certificate serial:       0759
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
Manifest number:          074F
Signing time:             Wed 28 Oct 2026 22:04:57 +0000
Manifest this update:     Wed 28 Oct 2026 22:04:56 +0000
Manifest next update:     Wed 04 Nov 2026 22:04:56 +0000
Files and hashes:         1: hypmcnatRHCKRH_b6IHxYueQ3WM.crl (hash: HU/5TgGMFe12UNKGrHh/AmMUw5rkxienaOtN/RG24Po=)
                          2: 5B194E5EDFF311EBBC814169C4F9AE02.roa (hash: lxGB+kQPl99LoovTIjfu6TOzCg3+LkNfQtQnhwV1Azc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl
                          rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 22:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5153, serialNumber=872A667276AD44708A447FDBE881F162E790DD63
        Validity
            Not Before: Oct 28 22:04:56 2026 GMT
            Not After : Nov  4 22:04:56 2026 GMT
        Subject: CN=6ae27188-1654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:b6:84:ef:41:60:0b:9e:02:09:d4:8c:fc:
                    a3:46:46:5b:61:05:9e:42:5e:5f:51:ef:32:4f:af:
                    52:04:e9:67:9f:7b:05:21:ff:69:5d:c5:6d:53:ad:
                    42:08:8c:9a:02:ea:01:9d:42:97:9d:1a:4d:6d:4e:
                    5e:97:98:18:04:01:3a:e0:d0:21:21:c1:cb:10:94:
                    77:7c:99:fb:41:6a:51:66:61:c2:b9:d4:73:d6:64:
                    5c:1f:01:40:eb:58:c2:78:24:59:89:64:f2:51:8c:
                    19:a3:10:40:c6:f6:56:bf:00:1a:63:51:75:84:14:
                    3a:82:fe:10:aa:ea:8d:32:88:31:06:92:3d:df:fe:
                    d8:bd:57:f4:1f:1e:1c:6b:8a:7c:9a:d3:30:46:14:
                    c2:d2:52:b0:3a:b5:7b:b7:32:b3:85:56:c0:ac:fc:
                    f7:f3:00:26:9a:3a:b9:aa:c2:69:4f:97:42:fe:b7:
                    cf:6b:62:64:6a:cd:26:5b:f9:e0:20:60:eb:ce:f9:
                    26:7b:31:91:22:60:e3:2a:40:2a:f2:85:24:5e:06:
                    0a:46:e6:aa:5d:0f:c7:8e:41:18:ca:2c:ca:b4:a6:
                    c4:73:bc:08:90:2a:9f:95:d6:a8:dd:22:95:12:e3:
                    65:da:e9:9b:b2:03:f6:db:22:46:76:9d:2d:95:d6:
                    3d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:29:75:21:3D:12:78:A5:BE:F4:F5:EC:2E:04:34:C9:8C:AF:A2:64
            X509v3 Authority Key Identifier:
                keyid:87:2A:66:72:76:AD:44:70:8A:44:7F:DB:E8:81:F1:62:E7:90:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hypmcnatRHCKRH_b6IHxYueQ3WM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5153/954281C2904811EBA48E9630C4F9AE02/hypmcnatRHCKRH_b6IHxYueQ3WM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9f:af:c5:d1:86:03:e1:69:b4:3a:8c:7a:5b:0e:55:9c:06:
         79:32:7c:ce:a4:71:9b:56:1a:93:b4:8c:54:f7:ad:69:8f:d4:
         fe:c5:53:d2:a4:ed:98:0d:8c:ec:85:88:16:0f:88:44:56:2c:
         4b:29:89:ea:fc:06:4f:e3:fa:12:b3:32:db:d1:11:8b:d0:4b:
         d2:e7:a8:5d:8a:55:ed:da:b1:3c:36:ec:9f:58:29:ca:0f:fe:
         93:18:a6:46:d2:23:72:aa:2d:41:45:03:3b:15:9e:e2:4d:63:
         51:f1:3f:89:15:28:ce:a5:c7:82:d8:c6:7c:e0:b1:04:b5:85:
         40:74:ea:b0:bf:e7:a6:4c:8d:e7:01:5a:a2:50:f3:16:33:de:
         d6:9a:bf:44:d3:c0:ec:38:6a:36:1e:53:2b:bf:84:7a:0e:7c:
         15:e4:8c:e0:46:14:b8:07:93:0d:f3:bc:66:2e:4f:21:b8:f6:
         3d:3c:bb:75:51:55:f1:69:39:c7:71:7d:5e:3f:ff:e1:dc:06:
         41:56:27:2d:0d:cc:b6:45:14:27:16:5d:e5:0a:a6:58:10:51:
         33:e0:e8:ba:a3:6f:be:4c:3d:0d:42:90:c2:7c:f9:de:b8:58:
         98:c6:4d:33:90:ec:b9:be:4d:4e:44:6c:c0:50:07:4b:3b:8e:
         26:bd:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:53:55 2026 by rpki-client