Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
File:                     hy5atTm-Q4V0A9T11FpUcrsgem0.mft (raw, json)
Hash identifier:          +XeIT8C80VQ+cpEK4LWgDibUJNJMdipBN1Dept9hM78=
Subject key identifier:   12:45:8B:49:91:D6:0A:73:21:F1:E4:3C:1A:C6:8B:B4:91:36:4E:7F
Authority key identifier: 87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D
Certificate issuer:       /CN=A9193339/serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
Manifest number:          045B
Signing time:             Tue 22 Sep 2026 23:47:31 +0000
Manifest this update:     Tue 22 Sep 2026 23:47:31 +0000
Manifest next update:     Tue 29 Sep 2026 23:47:31 +0000
Files and hashes:         1: hy5atTm-Q4V0A9T11FpUcrsgem0.crl (hash: aBcxfKv6WiMAzIMXQ2YbEwI8wSNujX2g/YmqaOMM8xM=)
                          2: 2FCAC3ACC48311ECAAAACC0CC4F9AE02.roa (hash: oMimkeYYl7dxiacxecAGj8I+bq56ZODIoHCIkyIFzMU=)
                          3: 1D171A58C76211EC95B63648C4F9AE02.roa (hash: 4RqePFXcxznoJVl6w8IMckwXSaVn5QEpwopGGGBw+nA=)
                          4: A445EAA0B5B911EC8AADD413C4F9AE02.roa (hash: H8iyGcp2slRPrtqT5icu1v/N051MgbZlmONF3nH7f+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl
                          rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193339, serialNumber=872E5AB539BE43857403D4F5D45A5472BB207A6D
        Validity
            Not Before: Sep 22 23:47:31 2026 GMT
            Not After : Sep 29 23:47:31 2026 GMT
        Subject: CN=6ab31393-dbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:07:96:83:46:48:6a:46:48:97:59:34:7f:
                    a7:ea:22:d7:5f:d3:c7:a9:dd:af:0d:b3:1a:b8:37:
                    c0:7f:72:f3:2b:39:46:ad:9f:85:1b:ad:2f:8e:2b:
                    30:94:33:7e:7c:65:93:0e:d8:48:f1:e8:b0:a6:61:
                    15:cf:2e:d7:04:22:98:2d:76:4b:31:ef:61:87:1a:
                    5c:91:4c:32:b5:ad:2a:af:ca:f8:07:b8:c0:4c:43:
                    62:25:e3:0f:47:ce:b9:27:bd:0f:37:be:1d:3a:32:
                    d9:75:fb:fe:6b:13:7a:48:db:b6:7d:6c:93:b5:8c:
                    2d:50:c3:19:49:4b:28:3a:1c:c7:88:fd:14:ed:41:
                    1b:1a:17:1b:4f:33:23:ac:6a:c1:c2:f2:c4:05:13:
                    df:65:12:59:6c:ba:df:21:cf:ee:2b:03:3b:a3:a9:
                    27:86:4b:5e:3a:4a:6e:31:81:3f:e2:e4:22:a4:a0:
                    fb:39:0a:05:b3:9b:bc:49:18:f6:21:04:08:68:1f:
                    03:1b:97:19:4f:54:96:b5:af:a2:52:eb:d2:07:88:
                    14:25:ef:b7:43:42:a1:c0:88:60:e3:b1:f4:ef:34:
                    be:e3:6c:83:15:23:62:16:71:2c:d5:91:31:3f:e5:
                    2f:f5:fb:96:91:c0:da:2d:63:47:1c:8c:56:bd:43:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:45:8B:49:91:D6:0A:73:21:F1:E4:3C:1A:C6:8B:B4:91:36:4E:7F
            X509v3 Authority Key Identifier:
                keyid:87:2E:5A:B5:39:BE:43:85:74:03:D4:F5:D4:5A:54:72:BB:20:7A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hy5atTm-Q4V0A9T11FpUcrsgem0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193339/45267970B2FA11ECB574CE7FC4F9AE02/hy5atTm-Q4V0A9T11FpUcrsgem0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7c:be:94:6c:8e:5b:d9:47:95:99:d2:5b:d1:ad:37:fd:e5:
         84:4d:04:d8:d8:0d:fc:92:87:e2:c2:2c:ae:63:1f:39:e5:8f:
         15:96:e2:26:f7:90:c0:61:e6:cf:d2:34:7e:40:6c:d6:9b:e3:
         05:41:75:57:50:19:4a:3c:08:b6:c3:0a:56:40:81:25:76:98:
         9e:ed:28:d4:d4:64:22:36:be:b4:d6:51:34:fb:f4:60:ae:3e:
         39:cc:8e:e2:48:90:fc:05:ba:de:f2:eb:3b:73:f3:cb:95:44:
         7d:f6:20:c4:12:50:20:51:af:54:a3:af:2b:db:59:f1:27:1d:
         28:74:c9:07:c2:5d:86:30:00:26:d0:6f:35:6c:fc:99:51:47:
         b4:e2:b4:cc:9d:bd:ff:f6:d1:f4:48:a6:ad:63:6a:bf:4f:e0:
         63:bf:13:f1:5a:11:31:08:0e:9d:f7:ad:68:e8:8a:5b:6c:f3:
         e7:30:2a:e1:23:49:1d:f1:d3:9c:82:54:2e:0e:a2:14:e4:a3:
         39:c8:3c:51:fd:2f:41:4f:11:3e:ea:08:13:56:93:5d:49:7b:
         11:6b:d8:87:1e:c4:45:2d:2a:94:a5:fa:24:77:77:4f:90:ee:
         35:8b:fc:fd:fb:c7:10:08:44:79:5e:37:62:e0:5a:31:05:f0:
         23:27:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:31:16 2026 by rpki-client