Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
File:                     8HDB502tEidOj1dd_gu3wU69yZA.mft (raw, json)
Hash identifier:          wXNFo0I3cSDqB5qJiRqk98/F888JbQjteePzaVTBDlI=
Subject key identifier:   18:2C:ED:8C:91:3E:4D:24:B4:0E:A2:CD:BD:5E:5D:C0:8F:06:E9:B9
Authority key identifier: F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90
Certificate issuer:       /CN=A91348DF/serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
Certificate serial:       0438
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
Manifest number:          0431
Signing time:             Mon 21 Sep 2026 00:04:12 +0000
Manifest this update:     Mon 21 Sep 2026 00:04:12 +0000
Manifest next update:     Mon 28 Sep 2026 00:04:12 +0000
Files and hashes:         1: 8HDB502tEidOj1dd_gu3wU69yZA.crl (hash: 99+nQ2dqdb8I7VZHfkvSepIjzxtq8RWhBs2DmxcbDKU=)
                          2: 06A2C3E2C1E211EC86C79687C4F9AE02.roa (hash: XV4+6RexVCN6qV3gQG680PT5iGhrAgYP0jd0N7lfisU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl
                          rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:04:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348DF, serialNumber=F070C1E74DAD12274E8F575DFE0BB7C14EBDC990
        Validity
            Not Before: Sep 21 00:04:12 2026 GMT
            Not After : Sep 28 00:04:12 2026 GMT
        Subject: CN=6ab0747c-8ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c4:be:ac:5e:8d:e8:d1:2e:38:60:e2:27:d8:
                    2b:0d:d6:43:35:11:e4:80:97:52:d4:81:34:85:6b:
                    ef:64:00:c3:e1:0a:6f:e7:6b:88:c1:59:d2:22:4c:
                    f1:5d:0a:6f:01:4b:ab:68:ff:5f:7e:e7:00:6c:cd:
                    8e:15:f9:df:d1:98:d8:8e:d7:ed:d7:e5:43:d2:2b:
                    70:04:a6:4b:bb:d2:73:4f:69:7f:8e:7d:53:05:e6:
                    f1:20:21:4f:a7:e7:e7:a2:a8:48:f2:9d:6d:c8:51:
                    a1:3c:e6:fd:59:b9:89:01:8e:cf:5e:38:7d:c4:a9:
                    fe:92:16:45:2b:c0:05:7f:d1:13:4f:dd:f0:06:a3:
                    a1:3b:2b:24:6b:21:c6:e4:31:6a:f4:78:60:d8:87:
                    a7:43:93:d3:ca:0e:06:0c:97:d3:5d:c5:da:bf:38:
                    97:cc:8d:0e:66:17:19:b4:12:a9:eb:85:fc:c0:ca:
                    e2:3d:af:9b:93:2d:5c:10:89:d6:5f:ea:c0:62:4b:
                    96:7d:c8:2d:32:ea:9d:65:c7:90:41:ca:32:b7:5e:
                    86:3d:d9:10:b3:e6:73:d8:79:70:da:89:1b:6e:9f:
                    1f:73:9f:52:e0:99:f2:16:b8:d6:ac:ba:a2:ca:47:
                    9f:79:98:e8:a9:da:c1:4a:10:bf:93:34:a1:87:f7:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2C:ED:8C:91:3E:4D:24:B4:0E:A2:CD:BD:5E:5D:C0:8F:06:E9:B9
            X509v3 Authority Key Identifier:
                keyid:F0:70:C1:E7:4D:AD:12:27:4E:8F:57:5D:FE:0B:B7:C1:4E:BD:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HDB502tEidOj1dd_gu3wU69yZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348DF/F02B5DBCC1DD11ECB97B9C7FC4F9AE02/8HDB502tEidOj1dd_gu3wU69yZA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:64:c8:dc:a8:ad:da:ba:cd:2f:a6:06:1e:47:32:f1:12:b4:
         27:d1:7d:04:05:46:43:1f:df:da:68:44:9f:9d:d4:61:c7:27:
         be:b6:c0:9d:9e:2d:ee:44:05:1c:9a:41:87:28:64:cb:2d:8f:
         aa:e6:5a:dc:5e:11:0d:ef:b3:be:80:14:cd:95:c3:2c:03:1e:
         2a:35:0c:d3:d6:2e:39:57:a0:a3:22:5f:87:6e:2e:f2:2f:dc:
         55:33:b5:52:21:1a:9a:83:c7:df:41:f1:71:53:e6:54:69:44:
         e2:2f:96:77:60:79:ba:5e:ba:96:19:9c:2d:69:c1:26:8a:00:
         96:28:f9:d2:d3:4f:d1:8a:f4:b4:63:ba:8a:97:32:84:c0:18:
         7d:8d:9c:dd:27:fe:e9:ae:23:85:a2:a7:5c:5e:53:2a:97:4a:
         44:f8:88:f1:89:72:ba:8d:76:9a:38:f9:13:e7:99:df:9f:26:
         9e:86:05:c4:ce:32:c2:95:a5:77:64:1e:f7:b8:0f:c9:5e:de:
         7a:75:d1:32:6b:41:8a:1b:66:f0:96:2a:db:4b:ee:e5:b0:6b:
         87:c9:f6:31:ab:e3:62:4b:b4:55:d9:30:0f:ef:98:9e:73:23:
         52:a1:c2:89:c6:ec:df:a9:b7:d8:05:5f:1d:08:ac:37:62:66:
         78:85:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:35:22 2026 by rpki-client