Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
File:                     Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json)
Hash identifier:          Cn5toMlf7Iq5Ll6ZthhIRNo+fEdR6etiaH3eeKpx9hs=
Subject key identifier:   CD:45:B4:E5:76:32:2B:2E:07:78:CC:C6:16:07:77:48:96:1F:6D:1D
Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD
Certificate issuer:       /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
Manifest number:          01CF
Signing time:             Sun 27 Sep 2026 04:05:08 +0000
Manifest this update:     Sun 27 Sep 2026 04:05:07 +0000
Manifest next update:     Sun 04 Oct 2026 04:05:07 +0000
Files and hashes:         1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: jjfDcZ5zIhOwFQCtERQjwXU0dwn2lfAB6jC6lUot3fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl
                          rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
        Validity
            Not Before: Sep 27 04:05:07 2026 GMT
            Not After : Oct  4 04:05:07 2026 GMT
        Subject: CN=6ab895f4-527d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:3d:b7:03:c5:24:1b:81:c2:24:6c:6a:87:
                    47:95:05:6a:4e:fe:8c:e5:94:72:83:88:b2:f6:c1:
                    1f:21:9e:d2:d7:0e:66:84:a8:01:b9:0a:ba:3f:e9:
                    f8:6b:d3:10:76:77:29:0e:3c:f3:20:cb:c1:dd:07:
                    c5:72:d4:2c:84:07:c0:c9:d4:cd:e4:09:3d:ce:9b:
                    4a:6b:cd:9b:17:61:6b:d0:b6:f6:12:4f:3e:4b:a9:
                    33:05:28:7d:69:8c:6c:74:f3:1b:ca:e7:9e:58:73:
                    41:45:20:3a:eb:0b:07:eb:e3:09:48:41:dc:76:e1:
                    1b:d9:ec:66:30:34:fb:66:4e:d3:e2:65:16:c6:6e:
                    f3:12:88:fa:53:be:61:fb:bd:b0:27:58:09:cd:2c:
                    1a:6d:9f:22:c8:9a:d8:2c:9c:95:90:fb:f1:ff:2c:
                    23:d3:cf:00:be:a9:78:d6:29:22:a8:aa:c7:9e:ec:
                    6a:97:39:6b:86:4c:f8:d5:32:12:ee:16:fd:e5:ef:
                    74:97:55:a3:e8:db:e7:ed:b7:e8:93:74:d4:28:54:
                    39:15:a4:77:67:e6:41:ec:65:fb:fc:4d:d2:72:3a:
                    3f:a4:6f:1c:9e:6a:12:94:81:e9:38:5a:ae:f3:a7:
                    b8:da:a2:ac:15:ce:a4:41:86:03:94:81:b9:95:55:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:45:B4:E5:76:32:2B:2E:07:78:CC:C6:16:07:77:48:96:1F:6D:1D
            X509v3 Authority Key Identifier:
                keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:ae:6c:fe:2e:72:df:70:77:ae:31:ca:c2:3a:ad:81:8d:
         d5:50:bf:09:ac:e4:c7:8d:3f:9c:76:9d:3d:5d:d6:78:79:65:
         6b:ae:4b:c2:9e:e5:91:1c:93:7c:f6:49:d2:db:4e:5a:a7:d1:
         5a:91:f2:c4:5f:06:06:11:d7:3e:c7:e5:9a:e3:41:34:c6:c6:
         dd:9f:e2:79:e3:f9:fe:a7:80:e8:46:38:4a:b8:96:c3:a1:07:
         14:26:ec:05:d1:7e:b3:35:ca:d3:35:33:ba:6e:d3:be:25:6d:
         e1:6f:bd:d7:c5:3c:f0:6e:aa:e9:81:fd:c8:8f:8e:76:cf:9b:
         5e:d8:51:b4:16:43:d8:7f:8e:f2:59:09:fc:a6:9f:3f:ab:97:
         f4:f7:a7:63:05:84:eb:83:f1:c8:a2:f2:ce:1c:93:85:fe:bd:
         0e:dd:78:7e:61:f1:93:ac:35:24:1f:04:02:07:8b:b3:b8:51:
         48:c8:ce:25:c7:2c:b7:c6:c6:98:95:4b:8e:71:11:52:42:67:
         2f:d6:ca:85:66:d2:ea:54:c8:8e:17:04:46:f4:8d:97:cc:88:
         3d:a5:9c:01:3a:4e:76:09:22:1b:11:78:a0:28:3a:7d:69:bf:
         cd:12:c9:b2:33:44:ea:6c:c0:6b:e3:60:5c:d7:7f:51:2c:5f:
         7b:37:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:49:22 2026 by rpki-client