Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
File:                     3zHPGFCQ4VSWXv_7xmS91yHYB18.mft (raw, json)
Hash identifier:          MeIQuXSHlnzPfGYoZuFYhOeF6MOzEGbDBDNV2ys7wjI=
Subject key identifier:   FF:58:E9:D3:D9:A1:58:FE:11:6A:6C:5B:31:28:09:13:41:15:4B:C6
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
Manifest number:          0118
Signing time:             Sat 19 Sep 2026 06:12:38 +0000
Manifest this update:     Sat 19 Sep 2026 06:12:37 +0000
Manifest next update:     Sat 26 Sep 2026 06:12:37 +0000
Files and hashes:         1: 3zHPGFCQ4VSWXv_7xmS91yHYB18.crl (hash: 9Q3vgiEO/+6AmuJe88kIPXvFEVgQRX/sSJOJ7t9EyVw=)
                          2: B28E01329B0711F199CD6D115E11F970.roa (hash: u/s9p3ptKydcBVwdA+lqK9E1OMc1aWdkwOrHDlz9hYI=)
                          3: 7434E1F4967011F0A5651266C4F9AE02.roa (hash: gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Sep 19 06:12:37 2026 GMT
            Not After : Sep 26 06:12:37 2026 GMT
        Subject: CN=6aae27d6-ca0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:34:88:b1:e1:72:56:2d:55:70:a4:32:c9:
                    21:a0:37:15:3b:d2:54:54:93:e5:0f:6d:18:be:43:
                    9d:3a:fa:1d:fb:13:56:86:38:b3:41:96:93:88:7f:
                    0a:12:e0:b5:e7:ac:25:19:7d:77:d7:72:89:da:b1:
                    89:5f:b6:ff:04:1e:d0:e7:a3:99:f4:45:14:62:4b:
                    ee:ec:41:11:50:3e:23:1c:af:92:22:f4:51:1c:32:
                    7b:da:7c:f7:2b:95:a2:d0:39:de:9c:25:36:10:30:
                    2c:8a:a1:2f:7e:69:6d:02:b6:a7:59:ca:17:5d:b1:
                    71:67:71:76:74:c0:6a:01:3b:52:84:a3:d1:f1:a4:
                    81:87:7d:c7:75:de:59:40:62:f1:d6:9b:4d:6a:56:
                    80:c1:b0:72:3d:49:dc:11:27:b3:8b:7c:2f:49:86:
                    69:2c:d2:cd:b1:ef:d1:d0:59:ff:80:29:2c:ce:79:
                    b5:97:6f:68:f4:3f:3c:be:0b:1e:eb:89:06:1e:f9:
                    bf:08:86:41:5f:99:ea:f6:88:57:66:74:33:b6:c2:
                    d2:ae:0e:88:f2:cf:5d:30:c2:7d:c9:03:f8:b3:2f:
                    a8:73:fb:5c:b9:8c:0c:4f:c8:bc:ba:5e:35:1c:4e:
                    3e:32:64:bb:49:d8:9e:b9:44:b0:22:13:e9:6b:67:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:58:E9:D3:D9:A1:58:FE:11:6A:6C:5B:31:28:09:13:41:15:4B:C6
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:b7:56:36:4c:e8:a1:e8:09:91:dd:7a:bd:70:fd:a6:5e:
         78:cb:0b:af:f6:8c:92:f5:27:23:da:13:7c:f7:1c:47:23:30:
         57:c9:6f:16:17:85:a2:56:be:7d:b2:35:20:20:87:d6:85:df:
         15:5a:16:c2:13:af:93:71:b8:2b:59:11:3f:1c:0d:7b:78:1d:
         42:59:4f:83:d8:b7:43:3d:a3:26:fc:f8:be:50:ca:3e:08:42:
         95:94:46:18:04:c6:2b:3d:ad:73:8a:97:0e:9e:a7:72:22:41:
         72:b6:9d:fc:47:09:55:2e:38:43:4b:79:23:7b:0c:0b:6c:b2:
         22:6b:9e:31:66:7c:17:15:e9:35:61:69:ef:04:04:d9:76:0f:
         5d:c1:ba:0a:4c:c3:64:64:21:c2:cf:40:a4:91:d3:2f:2e:39:
         4b:bb:59:f8:96:bc:90:9f:27:f3:12:34:6c:78:4a:30:ad:47:
         c7:2f:e9:5d:d4:52:1e:63:b0:8d:93:de:9d:fd:3a:07:ac:5b:
         5a:12:ca:ff:22:4b:c9:2f:d8:a1:cc:9c:94:c9:ed:1a:e7:64:
         68:0a:0c:d2:06:dd:0b:07:8d:a0:29:85:82:4d:71:90:7c:6f:
         75:b7:b7:cb:ff:cb:dc:8f:83:b9:c1:90:e1:e6:c0:a7:0c:14:
         d1:78:5a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:49:40 2026 by rpki-client