Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
File:                     I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft (raw, json)
Hash identifier:          +rEAN34wwjPpF5/cgGQg85xtKWX8S3uOQ+49EauTrkM=
Subject key identifier:   92:D1:AC:4E:73:81:16:06:82:E2:65:02:BD:B6:14:67:1C:92:EB:0B
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Certificate issuer:       /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
Manifest number:          96
Signing time:             Mon 21 Sep 2026 07:27:43 +0000
Manifest this update:     Mon 21 Sep 2026 07:27:43 +0000
Manifest next update:     Mon 28 Sep 2026 07:27:43 +0000
Files and hashes:         1: I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl (hash: HgdS5peFm2M+6CjGwz3vLQISQVPZKEpwf8HhMqBpbJg=)
                          2: C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (hash: FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
                          rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
        Validity
            Not Before: Sep 21 07:27:43 2026 GMT
            Not After : Sep 28 07:27:43 2026 GMT
        Subject: CN=6ab0dc6f-c921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:8c:4e:1c:81:fa:51:f9:62:18:b1:29:9a:
                    d6:ef:ba:f3:00:09:ad:b6:a6:d2:76:86:ea:25:17:
                    2a:1e:05:01:d8:56:0e:ad:ec:e9:0d:e6:80:34:24:
                    73:14:b1:91:46:2b:19:c2:d5:b7:0e:3e:29:7e:9b:
                    76:db:6c:72:29:09:4a:ed:b4:02:83:57:d9:c4:21:
                    1f:da:64:a2:7e:ac:17:80:39:da:3a:e1:8c:85:f9:
                    dc:ab:74:d6:9e:34:3c:6d:65:af:3d:56:21:91:c1:
                    77:d3:1e:9a:3a:0f:d1:d2:b0:80:fb:1f:80:11:cc:
                    52:63:29:54:fe:8d:de:c8:f4:23:71:fc:e6:c5:86:
                    20:44:0c:67:dd:15:49:1d:bf:93:68:74:a6:c5:e7:
                    9b:fe:fc:c1:98:58:d9:53:b1:1c:3f:9f:e5:0b:e9:
                    a5:03:e4:0a:b9:6b:a6:a6:e4:56:42:89:23:20:81:
                    95:1c:03:28:ea:6d:ef:72:3a:68:d4:95:7c:4d:ed:
                    8f:35:6d:51:d4:ca:ae:b2:6f:77:aa:27:f1:80:45:
                    73:82:af:e8:6f:08:05:87:60:1a:df:62:e0:35:e4:
                    fb:8c:ed:09:61:10:62:6c:7d:c1:23:f5:38:bc:93:
                    3e:34:36:4b:27:f4:26:aa:52:76:df:75:a5:e0:a2:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D1:AC:4E:73:81:16:06:82:E2:65:02:BD:B6:14:67:1C:92:EB:0B
            X509v3 Authority Key Identifier:
                keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:83:5c:7b:f5:f1:9d:d7:42:87:88:26:e3:15:d5:93:71:
         c4:67:d6:cf:bd:ec:8b:28:c1:ba:68:a6:0c:34:97:80:5e:0b:
         50:33:78:e8:13:1f:f2:3e:aa:f9:9c:e5:a1:99:31:e2:02:38:
         67:30:82:4b:af:db:b6:56:68:87:bb:e4:b4:d1:c9:b1:df:d5:
         1b:0e:46:4c:dd:68:39:e8:4f:92:31:e5:79:87:a4:39:b1:83:
         e6:ff:ff:8d:84:92:d0:d6:23:6f:98:26:32:cb:6a:0e:4d:71:
         c8:a5:f7:cc:57:5e:bb:65:66:73:d0:46:98:58:7b:ac:d4:48:
         82:97:d8:e1:56:83:0f:c5:0e:4c:53:54:57:dc:12:db:25:be:
         3e:d6:7e:63:9f:5a:1b:2a:e4:c9:b4:d7:31:e4:ca:66:e2:16:
         3d:b1:b4:22:a7:50:4b:92:b7:ff:da:93:b1:af:e9:2a:bf:d4:
         6a:66:ef:be:c1:72:f6:8a:c3:f0:78:7f:db:dc:6a:be:b1:62:
         19:28:ec:95:ac:46:ef:28:dc:42:c4:52:15:02:c5:c7:5f:0e:
         eb:c1:b5:47:73:a1:c0:0f:31:e7:4c:bb:80:49:6b:81:98:78:
         78:0c:25:cc:31:cc:5b:5a:06:23:8f:2d:29:2a:f2:df:23:58:
         09:34:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:21:33 2026 by rpki-client