Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File:                     rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier:          1gVZxKj7iHPmhdSzWlhcnldHdlqO0I335sBnVOUZcJ4=
Subject key identifier:   E1:CB:3B:E5:4D:79:F2:75:CC:E7:0B:7A:1A:18:A1:97:D9:0E:8E:51
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer:       /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial:       35F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number:          35C1
Signing time:             Sun 20 Sep 2026 14:26:09 +0000
Manifest this update:     Sun 20 Sep 2026 14:26:09 +0000
Manifest next update:     Sun 27 Sep 2026 14:26:09 +0000
Files and hashes:         1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: R7k2We5fBxBQzWjbtEq/el5V2Kb1FQkhiAu/DLp4rBo=)
                          2: 44D3107874E311F1BDAFA91462A30FBC.roa (hash: nO0sPh4JGWaNR5PMX5uQrEkWh5OVkXvuUScoPnxVXDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13812 (0x35f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
        Validity
            Not Before: Sep 20 14:26:09 2026 GMT
            Not After : Sep 27 14:26:09 2026 GMT
        Subject: CN=6aafed01-2b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d1:9e:8d:0e:90:a7:39:8b:d8:eb:4c:8f:8d:
                    a6:e5:c4:72:87:33:f9:88:e9:bc:95:e4:01:a3:73:
                    58:17:74:f4:e0:8f:86:34:c2:26:b1:86:10:4b:ef:
                    88:22:29:21:da:2f:5b:56:95:5f:8f:7b:b9:c5:5f:
                    3c:39:b7:3f:ac:38:d7:c8:28:45:e9:4b:41:5a:d3:
                    73:5b:56:b7:a6:b4:2c:ce:66:77:57:78:0d:3a:c3:
                    b0:43:7b:4c:14:32:cc:91:03:3e:c9:de:78:e9:f3:
                    18:b2:60:76:3c:86:db:1d:f3:c4:7d:56:61:82:7b:
                    34:93:20:03:bd:1e:a8:07:c2:a6:ad:2a:6f:50:37:
                    65:c9:9f:27:8c:c6:50:b0:13:6b:fc:96:13:fd:5c:
                    be:41:af:18:9c:51:dc:d4:e6:dc:bf:db:81:d3:4b:
                    e3:15:39:80:bc:25:84:3b:cb:85:3e:0b:35:1f:45:
                    44:72:4f:31:f3:b8:e4:66:11:c5:33:33:33:87:ec:
                    c1:18:ee:ef:8a:52:64:2c:97:93:3e:91:ee:8a:f7:
                    1b:c8:97:02:e4:89:f7:58:7c:39:c2:0c:2a:f6:c2:
                    6a:37:a2:4c:60:57:68:0d:99:3e:3d:07:81:0e:d9:
                    62:15:66:6e:47:63:13:e8:70:9c:90:db:bf:71:73:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:3B:E5:4D:79:F2:75:CC:E7:0B:7A:1A:18:A1:97:D9:0E:8E:51
            X509v3 Authority Key Identifier:
                keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:ff:51:14:16:38:82:2c:bd:a5:44:a5:a3:36:62:71:e5:
         b0:8a:e5:01:33:5f:34:d2:87:aa:24:92:0c:99:3b:13:dd:2e:
         d9:dd:00:8f:29:6e:87:60:a1:99:bd:e8:6e:1d:5f:a3:c9:d0:
         87:ee:86:b1:ef:07:95:46:c8:e0:38:ea:1b:0e:3e:72:28:c5:
         70:27:25:80:80:da:af:1b:7a:ed:34:b5:5a:d2:58:c5:27:53:
         d6:3b:eb:0f:50:2a:ca:db:5c:81:88:a8:8b:20:21:ae:3d:c8:
         2b:b8:d8:55:2a:49:31:a5:28:99:75:6f:09:ce:f1:66:d2:c5:
         fa:af:dd:57:c8:f2:d8:f0:00:a6:f8:8d:5a:2b:07:5c:b0:57:
         bd:57:46:71:14:04:39:69:0f:0d:e4:c9:60:29:c2:65:71:44:
         0d:01:dc:2b:b7:8e:33:ab:9e:82:5c:a2:7a:fa:0c:15:65:d9:
         02:dd:57:4f:96:c5:54:8c:ca:35:40:76:e5:37:04:76:91:a5:
         ce:c4:cd:60:d2:96:e7:97:06:c1:08:62:83:1b:94:1b:db:c8:
         1e:a9:10:90:ff:f9:d9:b3:6c:8a:df:43:f8:9c:26:e8:c2:39:
         48:2b:a4:0a:34:b0:25:df:44:ca:59:b9:ca:85:8e:e1:37:72:
         80:1f:bd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:37:29 2026 by rpki-client