Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
File:                     hqZPKtLd4rfZYk5pInrQmxd4xsE.mft (raw, json)
Hash identifier:          CzMVw7CKkPvLOHHywCT7tvL+9yzluhzkwGCwKQWgwo4=
Subject key identifier:   74:E9:61:34:0E:FA:5F:C7:50:91:10:B3:5F:FA:70:FC:1F:95:68:35
Authority key identifier: 86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1
Certificate issuer:       /CN=A9169A3F/serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
Manifest number:          015E
Signing time:             Sun 27 Sep 2026 05:30:49 +0000
Manifest this update:     Sun 27 Sep 2026 05:30:48 +0000
Manifest next update:     Sun 04 Oct 2026 05:30:48 +0000
Files and hashes:         1: hqZPKtLd4rfZYk5pInrQmxd4xsE.crl (hash: NEKxwkC8PzXEEa+oI+9kn+jPtIxfub+HtMtZdGnw5qA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 05:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=86A64F2AD2DDE2B7D9624E69227AD09B1778C6C1
        Validity
            Not Before: Sep 27 05:30:48 2026 GMT
            Not After : Oct  4 05:30:48 2026 GMT
        Subject: CN=6ab8aa08-98e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:dc:62:92:60:2b:a2:87:21:2b:88:ce:23:
                    49:d0:1a:8a:b8:6c:68:c7:48:9d:06:87:60:b3:4d:
                    0a:9c:6e:83:9c:e5:3a:f0:48:3f:4a:5f:9d:1c:92:
                    a3:b4:34:d5:c6:ac:6d:b0:e6:ac:d9:f9:7f:70:36:
                    98:07:f7:43:2e:4b:6e:d4:0d:72:f9:67:ff:80:b1:
                    4e:a3:06:c4:6a:18:6a:57:82:01:ba:95:16:80:2f:
                    76:90:9d:55:95:61:55:09:00:be:11:07:42:01:6b:
                    ef:86:f7:99:98:c9:48:15:7c:28:40:cb:85:25:5c:
                    84:f3:48:f2:e2:bf:dc:05:6f:03:56:32:fc:4d:7d:
                    fe:89:41:ac:30:a5:70:97:c3:68:6a:91:3a:c5:45:
                    0e:db:af:1d:4a:9d:79:88:55:13:76:51:32:eb:e5:
                    98:fb:ed:26:6d:85:38:a4:70:6b:e8:dd:87:26:b2:
                    de:45:96:8c:0e:90:67:c2:fa:e6:4c:52:8e:c8:bf:
                    0e:d8:c1:1f:f7:89:66:0f:cd:b8:df:a0:ae:0d:7d:
                    87:58:2d:60:ca:25:ff:30:70:10:5e:d9:d4:fa:d7:
                    c1:2e:ed:fa:12:6a:39:28:08:b0:c9:24:54:47:1f:
                    38:ec:d8:1c:8a:f0:1f:ee:d9:3e:b7:91:7f:19:7b:
                    b1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E9:61:34:0E:FA:5F:C7:50:91:10:B3:5F:FA:70:FC:1F:95:68:35
            X509v3 Authority Key Identifier:
                keyid:86:A6:4F:2A:D2:DD:E2:B7:D9:62:4E:69:22:7A:D0:9B:17:78:C6:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hqZPKtLd4rfZYk5pInrQmxd4xsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/9B2754F6A24F11EFB6B0FF49C4F9AE02/hqZPKtLd4rfZYk5pInrQmxd4xsE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:14:d0:93:0f:bc:f6:76:c4:d2:2e:28:54:bd:ca:57:8d:98:
         19:c2:7a:34:67:83:38:5b:c5:1a:47:69:16:59:4c:99:d2:a9:
         b3:71:8a:fe:9f:74:7b:18:da:4d:e1:d8:52:f6:57:74:27:25:
         a4:7b:e1:5a:2d:43:0d:48:63:ca:38:29:6f:e6:d8:27:a8:a9:
         1a:69:51:99:7d:7d:7c:be:82:85:57:bc:74:e4:10:a1:52:7b:
         60:eb:cc:f6:29:54:ab:07:3b:23:16:b6:f6:44:b0:15:7d:ef:
         1b:9f:80:5f:60:e0:01:12:2c:52:cf:a3:7f:65:5e:9a:fe:35:
         ec:1b:ea:d8:e7:d0:58:97:1c:2a:0c:b1:9b:77:05:77:c5:6d:
         b0:3f:30:83:b7:99:3a:92:56:fe:72:e8:45:56:1e:07:a9:9f:
         8a:39:04:7b:28:fa:05:37:f9:b5:08:72:89:18:eb:e4:f0:12:
         dd:fb:23:e3:99:16:cb:3e:b4:97:e9:bd:3c:14:59:c8:43:a1:
         e5:39:2f:fc:b2:4e:83:ec:2f:46:14:07:02:48:a7:6d:c4:07:
         92:ba:b7:70:66:f1:76:ff:b2:86:14:fa:b4:13:0b:92:69:f2:
         51:27:be:25:c4:c1:3d:a5:5a:75:8a:b1:3d:1a:a9:ab:0a:6d:
         f2:6a:d6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:11:49 2026 by rpki-client