Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
File:                     hYony1wEyt-u_biTvwbhp7fZ8cE.mft (raw, json)
Hash identifier:          qwjIjg3TtULy6hcQgyhVRBYvRu6o7HRaCuUiTBhMcjk=
Subject key identifier:   DE:B8:C8:98:88:3C:CC:04:FF:C0:B7:C1:8F:82:CE:D8:C6:EB:95:70
Authority key identifier: 85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1
Certificate issuer:       /CN=A91CBE2E/serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
Certificate serial:       03B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
Manifest number:          03A7
Signing time:             Sun 01 Mar 2026 22:36:20 +0000
Manifest this update:     Sun 01 Mar 2026 22:36:19 +0000
Manifest next update:     Sun 08 Mar 2026 22:36:19 +0000
Files and hashes:         1: hYony1wEyt-u_biTvwbhp7fZ8cE.crl (hash: M2gu3dJR9uWQQE76hSWvwzLNEh3NaBQ+zfXjd87a67Y=)
                          2: A0879902F15711EC846A5F29C4F9AE02.roa (hash: DSIfNa17RdU77qIRp8z8Kzsgm5ZeTJKHenlHD4Tp8Bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 946 (0x3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE2E, serialNumber=858A27CB5C04CADFAEFDB893BF06E1A7B7D9F1C1
        Validity
            Not Before: Mar  1 22:36:19 2026 GMT
            Not After : Mar  8 22:36:19 2026 GMT
        Subject: CN=69a4bf64-171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:18:b9:81:e9:f2:a6:ac:cb:60:5c:9c:e5:c4:
                    79:2c:a5:58:11:d0:5a:fa:52:17:a1:7a:2f:7f:bd:
                    00:51:19:96:e4:28:40:59:71:6d:07:d6:49:e6:d6:
                    20:e1:cd:00:50:58:1b:55:37:18:50:49:5f:c6:a2:
                    f6:27:50:f1:e5:c8:c2:a5:97:96:f3:f1:74:d3:04:
                    ec:c7:eb:44:d1:62:90:c4:59:85:b4:93:7b:c8:9a:
                    49:ad:93:75:7f:1b:a0:7f:f3:ca:ca:80:bb:3c:0d:
                    90:86:2c:a2:50:5c:70:24:bf:2a:74:4f:d1:87:61:
                    44:87:78:80:3e:29:e1:b4:66:71:18:e7:1c:10:46:
                    55:a5:97:ff:0d:43:2a:76:18:48:62:a4:88:2e:77:
                    f0:ae:1d:ef:16:38:4d:e4:d6:26:b2:b7:97:64:86:
                    07:dd:13:69:3b:0f:48:40:12:db:cd:39:f4:d6:b8:
                    b4:3f:d7:9b:0a:fd:56:22:80:73:06:d7:a7:9c:f4:
                    0b:b1:bf:d5:19:f3:28:22:85:f9:6a:a4:b3:78:9c:
                    48:0b:ac:5e:1e:a9:7a:3f:5a:4c:e1:8e:ea:54:f9:
                    6d:f0:d3:13:c4:a1:63:39:df:08:f8:3d:52:ee:ad:
                    b8:20:b3:4a:3c:c6:f7:b8:a5:54:a9:15:43:05:36:
                    07:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:C8:98:88:3C:CC:04:FF:C0:B7:C1:8F:82:CE:D8:C6:EB:95:70
            X509v3 Authority Key Identifier:
                keyid:85:8A:27:CB:5C:04:CA:DF:AE:FD:B8:93:BF:06:E1:A7:B7:D9:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYony1wEyt-u_biTvwbhp7fZ8cE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE2E/D8ABAFE8D0FB11ECA27AF22FC4F9AE02/hYony1wEyt-u_biTvwbhp7fZ8cE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a1:9f:56:0a:35:de:ad:89:66:55:fd:15:8d:35:b1:33:03:
         55:18:63:4f:a5:6f:85:ca:3b:09:16:ef:7d:a8:84:09:de:d6:
         32:38:23:f3:40:6b:a5:cd:09:4d:26:de:96:1a:3a:d1:68:89:
         3c:c2:f6:71:a1:94:00:45:a5:c2:93:b5:c3:04:82:b9:6d:8e:
         9d:e5:ff:38:35:58:78:1e:25:ba:af:e2:e7:5c:86:54:f6:b4:
         1e:e7:1e:a5:f6:6f:b1:b4:e9:b2:fc:6e:d3:ba:34:8f:a0:ee:
         b7:d7:b7:3c:38:46:6f:4b:f9:7d:6a:00:56:49:9a:92:61:61:
         3d:f7:c5:54:06:02:a2:e1:13:c8:48:6d:a2:79:d0:e4:6a:f5:
         8e:c2:7d:c1:e1:b1:31:9e:8a:f6:d6:2d:ea:0f:1a:4b:38:89:
         51:07:86:7f:d4:5f:54:c7:23:09:c7:34:d4:0b:fc:f0:50:68:
         94:1d:7d:00:67:b6:41:9c:f9:2a:28:9b:ca:1e:54:da:0a:7b:
         ae:6c:91:ab:16:a4:1e:4c:6a:48:1d:04:c6:8e:c9:92:6f:92:
         57:00:5a:1b:99:9c:bb:0d:0c:65:b0:dc:80:5e:da:3e:c1:6c:
         8c:fe:cb:fa:1b:15:74:d4:b5:90:f3:37:91:17:9d:1b:25:d7:
         ce:1a:7f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:17 2026 by rpki-client