Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
File:                     h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json)
Hash identifier:          MuZLNdYaz2r1eg8nN7+0D/OWAiOYVtZMt6UWZmusIZ8=
Subject key identifier:   2A:D1:19:0B:C7:D8:EC:90:4C:FF:6F:BA:54:B7:49:BC:6B:BE:3E:62
Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9
Certificate issuer:       /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
Certificate serial:       0223
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
Manifest number:          021C
Signing time:             Mon 21 Sep 2026 02:54:50 +0000
Manifest this update:     Mon 21 Sep 2026 02:54:49 +0000
Manifest next update:     Mon 28 Sep 2026 02:54:49 +0000
Files and hashes:         1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: w598zvd9bfuQt+6rEFFp6RPDuhlG3FIo8BGEXeoNPlY=)
                          2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: GZUw3zYmkPD1oIQsIFHheUysQrlXgVMcApDvpUWdnAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl
                          rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:54:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9
        Validity
            Not Before: Sep 21 02:54:49 2026 GMT
            Not After : Sep 28 02:54:49 2026 GMT
        Subject: CN=6ab09c7a-b386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:2d:d5:6e:4b:14:82:eb:84:38:8e:e6:1c:
                    c5:a1:90:13:9f:e6:2a:38:c2:c0:b0:58:b0:ca:6c:
                    b4:b6:70:cf:49:6b:92:91:34:0a:c2:e2:da:e0:ee:
                    ee:21:ef:a2:ec:c9:9a:9f:99:c8:1a:8b:9a:32:bd:
                    74:b5:0f:0d:86:50:11:0e:7f:90:20:4d:79:20:a5:
                    b4:7d:d9:c1:3f:6a:40:25:a6:a6:de:82:1e:5e:af:
                    fb:bd:1d:84:8c:6a:5e:db:6c:4c:ac:7e:04:59:ad:
                    a4:18:53:80:b4:c1:79:43:b9:62:fa:6a:d0:a6:fc:
                    05:e4:2d:f8:48:60:2b:79:51:e5:8a:cb:1d:73:fc:
                    5f:3c:4b:02:ac:1e:75:f0:6b:64:65:ec:45:22:8d:
                    b4:2d:3e:9e:28:06:a9:8c:e6:55:df:bc:33:b5:2e:
                    83:ec:d8:69:c0:12:7e:7a:3f:b4:fa:5c:aa:85:be:
                    42:29:ad:cc:4a:70:03:10:7d:46:de:cd:04:79:5d:
                    11:a8:bf:6a:e0:2b:67:41:49:49:5d:24:af:ff:f0:
                    4f:c7:fc:28:cf:7f:39:b0:59:7a:5b:87:36:62:2e:
                    52:f5:6a:2a:dc:f3:67:a9:65:90:cf:28:9a:68:9c:
                    87:2b:78:06:18:c2:ac:d2:59:26:d5:b8:48:96:cf:
                    a1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D1:19:0B:C7:D8:EC:90:4C:FF:6F:BA:54:B7:49:BC:6B:BE:3E:62
            X509v3 Authority Key Identifier:
                keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a0:11:18:ab:62:0e:67:31:aa:73:5a:f8:b3:db:c2:3f:ba:
         e0:16:1a:ea:5c:0c:10:a6:18:76:c2:79:3c:97:f6:d4:96:52:
         af:cf:3d:cd:21:85:d8:f7:e5:47:11:5f:a7:fe:26:9c:78:5c:
         ba:bb:81:e7:a2:2e:ef:42:f0:4d:ed:fc:1a:23:71:28:15:be:
         d5:9d:4b:1e:f1:19:93:65:73:cc:98:d4:0b:e4:95:dc:ae:38:
         83:67:36:73:da:00:f6:ef:02:00:2c:da:16:72:79:96:3f:77:
         4d:1c:fc:44:f9:a2:96:6e:e5:3c:36:a7:8f:34:60:9b:21:6d:
         3a:34:88:66:e2:86:63:08:02:99:4a:e7:7d:45:61:8e:43:94:
         59:8a:1b:e9:1c:3c:63:35:06:19:c0:2d:b3:11:34:d1:c7:73:
         6c:73:68:e6:69:7c:30:ee:f3:c9:0e:2c:26:0f:c3:5b:e6:61:
         89:b4:13:17:6a:a3:9e:21:c2:ec:24:ad:4e:2a:f8:6d:fa:83:
         03:20:16:2a:71:45:68:32:df:5c:57:a0:71:37:bf:db:1b:7a:
         36:af:df:7c:5b:4f:d1:a9:45:b6:d4:ea:5e:d1:a3:d6:ea:aa:
         cb:69:18:2b:dc:f1:95:9f:83:d4:82:f5:52:36:36:4e:ac:1d:
         61:62:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:22:57 2026 by rpki-client