Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
File:                     h1thdAzTcL1LSk9q6gqGCDiNuoo.mft (raw, json)
Hash identifier:          FW6TxGAVo/6Gkb3mjLRwlixsbd9W9brHwl6UrovdQ8I=
Subject key identifier:   87:21:62:69:83:B4:49:DA:72:89:46:9C:9D:14:4D:33:36:69:AA:10
Authority key identifier: 87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A
Certificate issuer:       /CN=A9125852/serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
Manifest number:          0126
Signing time:             Mon 09 Nov 2026 05:53:35 +0000
Manifest this update:     Mon 09 Nov 2026 05:53:34 +0000
Manifest next update:     Mon 16 Nov 2026 05:53:34 +0000
Files and hashes:         1: h1thdAzTcL1LSk9q6gqGCDiNuoo.crl (hash: lprHs9T5TsgaOH5A9TtrZmP14l5BZeyZ2fPxnRhVqe0=)
                          2: 36E3783A1BA311F0985A7C2DC4F9AE02.roa (hash: XUeovlZ/4oeHJvRX/WJ4baIyTmKgtfV6QNue3wAaFAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl
                          rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125852, serialNumber=875B61740CD370BD4B4A4F6AEA0A8608388DBA8A
        Validity
            Not Before: Nov  9 05:53:34 2026 GMT
            Not After : Nov 16 05:53:34 2026 GMT
        Subject: CN=6af15fdf-6541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:26:12:1d:b4:f9:8a:c6:75:6f:49:ec:70:e0:
                    29:c4:3e:c9:1b:00:3d:f4:d0:f9:3a:e5:04:25:e9:
                    39:5d:aa:14:9a:95:83:1f:a7:ac:35:c1:84:af:40:
                    54:0c:54:1f:44:e4:9b:e9:a8:6e:cf:b1:85:c9:9c:
                    c8:ce:a8:99:48:a0:b0:00:7f:3c:e9:fd:4e:1a:cf:
                    26:0d:23:a0:76:1e:c1:f0:43:72:b2:c1:95:03:c5:
                    7e:b7:13:0b:b8:3c:19:23:87:a6:a6:b4:2c:91:1d:
                    50:53:67:b1:e0:69:4f:78:39:f5:00:1b:5f:a3:4e:
                    ab:1f:e1:98:96:fe:50:a8:1b:4e:00:80:dc:76:c0:
                    5d:2c:8b:60:b3:bc:de:91:bc:32:21:99:37:e9:36:
                    31:27:4d:eb:ca:54:c4:5f:27:14:62:8f:1c:9d:94:
                    32:75:58:fb:f9:c6:0f:a1:ee:87:e8:94:b4:ee:70:
                    49:f9:57:d0:56:15:5f:22:3b:63:7d:a8:d5:2c:d7:
                    0f:f0:5d:95:3d:0f:fa:ae:0d:33:b4:31:1d:6d:b2:
                    70:3c:ad:c5:3a:e9:1b:65:10:b2:79:fd:b8:0f:d6:
                    b8:83:0d:83:41:b0:24:18:4e:69:ad:a3:92:69:23:
                    59:c3:ec:07:92:0a:9c:8d:b2:f5:b7:a5:50:9f:45:
                    1c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:21:62:69:83:B4:49:DA:72:89:46:9C:9D:14:4D:33:36:69:AA:10
            X509v3 Authority Key Identifier:
                keyid:87:5B:61:74:0C:D3:70:BD:4B:4A:4F:6A:EA:0A:86:08:38:8D:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1thdAzTcL1LSk9q6gqGCDiNuoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125852/E954FD781BA211F08B29E92CC4F9AE02/h1thdAzTcL1LSk9q6gqGCDiNuoo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:d8:b0:eb:9d:4f:68:cf:1a:f1:c1:a7:1d:e3:c0:21:0f:18:
         fd:ab:01:d0:6f:a7:86:87:df:48:05:56:65:62:7f:ec:37:01:
         e9:32:4d:14:11:a8:1f:92:2a:29:28:1a:5d:46:7a:5e:f2:50:
         35:32:65:6c:64:14:00:cc:54:b0:d8:77:0b:b5:b1:54:ae:e3:
         c7:af:8b:74:38:77:f9:b5:ef:60:44:04:58:de:63:f8:35:55:
         06:bb:e2:0f:02:b9:3a:d0:0d:fd:10:37:b8:ad:ac:f3:93:79:
         12:87:7c:f2:24:7b:1e:03:a2:23:4c:64:e9:a1:3f:0b:fa:2f:
         19:e3:41:31:2f:3a:c7:d9:98:8c:d5:18:0e:a1:93:d1:9e:b1:
         43:7d:ee:d3:b2:8e:40:fd:cc:27:7d:0a:59:6f:f2:c2:a6:cd:
         1e:dd:58:18:23:55:07:b8:15:06:50:08:23:50:39:60:b1:a8:
         0f:c2:a3:34:b6:62:18:ab:9c:97:87:61:57:0e:2e:fc:a4:c9:
         3d:8e:b2:9d:10:1b:fd:89:07:d3:5d:61:f1:b1:14:a0:0b:58:
         88:d9:fb:33:54:fa:c2:f8:9c:ae:9e:cf:7d:97:a4:a2:fa:bb:
         72:fd:94:2d:d2:7e:b5:b5:f4:72:64:5e:d6:8e:b1:44:80:c8:
         84:86:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:36:29 2026 by rpki-client