Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
File:                     hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft (raw, json)
Hash identifier:          DElf9reCWAf04/u94YkSOsUbFPRzllBAez8odEvjqUg=
Subject key identifier:   3A:35:93:B3:74:10:E7:EC:DE:3E:24:1B:48:FF:CA:C5:BC:8C:5A:7C
Authority key identifier: 84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B
Certificate issuer:       /CN=A916CDAC/serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
Manifest number:          C3
Signing time:             Mon 21 Sep 2026 06:50:13 +0000
Manifest this update:     Mon 21 Sep 2026 06:50:12 +0000
Manifest next update:     Mon 28 Sep 2026 06:50:12 +0000
Files and hashes:         1: hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl (hash: BzoX9naUSyXIcgdqJRc78cz5jxug74W9V2gzXOvmRDk=)
                          2: 33C3BDD69AA111F0944EF628C4F9AE02.roa (hash: pV6RrpL0HFiSkSQ3Egen1lL8OO4gLgRAAJv9sHZbodQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl
                          rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDAC, serialNumber=847F2E12EAB506A50109944207B1D7026677F09B
        Validity
            Not Before: Sep 21 06:50:12 2026 GMT
            Not After : Sep 28 06:50:12 2026 GMT
        Subject: CN=6ab0d3a5-9e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:56:93:c9:92:b4:36:87:80:07:58:16:11:
                    a7:ed:e9:c3:bb:a6:f3:3f:7b:23:fa:a1:28:50:ee:
                    b8:71:20:66:d4:a9:98:45:ca:47:ff:83:b2:1c:21:
                    91:de:a4:f6:32:b6:5a:b8:d7:e4:eb:08:37:fb:a9:
                    f0:4c:ac:91:8b:0c:97:2d:ff:fd:8b:b6:1e:db:d7:
                    b8:03:fe:c9:47:f6:20:f9:24:4a:c4:aa:0c:a6:9b:
                    38:e3:20:c1:df:cb:09:44:59:5e:7b:82:35:9c:9d:
                    ac:bf:e3:f6:be:94:d6:80:3a:07:c2:8d:90:45:ab:
                    ed:99:68:52:cd:1f:9a:08:15:57:19:ee:83:19:79:
                    b0:5c:8a:5c:39:98:79:11:0f:b3:e3:21:6f:6c:07:
                    75:e3:9d:98:f4:bd:7b:9c:61:bf:23:ef:69:17:37:
                    55:7b:26:32:13:59:76:c9:a3:65:47:e9:d5:70:c5:
                    79:f3:b3:ca:c2:f8:6b:12:90:c7:a6:6f:09:76:80:
                    8c:87:10:96:15:23:e7:c7:1d:19:86:bf:b3:d1:e5:
                    90:4b:4a:15:73:f3:7f:0d:78:69:ee:54:e5:ac:1a:
                    ba:a5:a9:e9:1a:fd:c2:3e:62:6b:ee:61:1b:83:e1:
                    0c:9b:8a:02:1c:d3:c2:2e:07:48:78:a8:01:b9:91:
                    72:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:35:93:B3:74:10:E7:EC:DE:3E:24:1B:48:FF:CA:C5:BC:8C:5A:7C
            X509v3 Authority Key Identifier:
                keyid:84:7F:2E:12:EA:B5:06:A5:01:09:94:42:07:B1:D7:02:66:77:F0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/hH8uEuq1BqUBCZRCB7HXAmZ38Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDAC/7260FC0C8F3911F08632A039C4F9AE02/hH8uEuq1BqUBCZRCB7HXAmZ38Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:99:42:67:43:01:3a:7a:b6:c4:84:7d:af:e8:2a:50:52:b8:
         6c:d7:43:45:27:62:f1:9b:9d:41:b0:7e:f4:f9:96:34:bc:28:
         4d:f4:96:20:b8:87:b0:94:79:d2:e0:70:8d:cd:65:0d:99:b1:
         e8:ab:5b:ac:7c:fd:ac:6a:f1:7c:f4:30:75:ac:90:89:6e:5b:
         fb:f9:b4:92:fc:8b:9c:fe:70:12:28:8f:b6:58:10:65:60:07:
         ea:e7:a9:e5:29:67:02:4c:47:26:2e:e5:9c:29:c0:77:95:61:
         57:72:b3:73:65:31:bb:fa:73:7f:99:fb:ec:d4:cc:d8:48:ca:
         78:6a:03:e5:15:5c:04:22:0e:90:28:74:81:d7:98:80:3f:77:
         0d:cf:fd:ab:de:99:38:a7:67:8f:61:fb:c9:e5:a7:d3:54:e2:
         f4:5a:79:9c:14:d0:bc:d8:30:3a:df:2a:52:17:79:c9:34:b4:
         d7:37:eb:93:a7:a2:f1:0c:fa:ad:49:32:b1:49:bd:f1:1e:c6:
         79:ae:ad:ea:8b:2f:5d:63:df:d4:0f:17:51:f0:32:30:64:72:
         3c:e1:91:e3:13:51:65:5d:45:fc:76:cd:9a:6f:21:91:dc:27:
         80:78:a8:30:fc:70:56:21:f2:79:ca:c5:e7:71:70:a5:c4:e8:
         7b:e8:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:30:53 2026 by rpki-client