Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File:                     hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier:          Euusy8rTrUgFv+gIpoZidl0O/isvSLwpPn8u31Zdg3E=
Subject key identifier:   73:51:68:0D:F5:7B:14:16:7B:A6:A3:65:EE:15:D0:85:DE:58:E0:EA
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer:       /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number:          E8
Signing time:             Sat 03 Oct 2026 07:10:07 +0000
Manifest this update:     Sat 03 Oct 2026 07:10:06 +0000
Manifest next update:     Sat 10 Oct 2026 07:10:06 +0000
Files and hashes:         1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: BXqVRME34rCrFrGTp0GL3wvPIOs7AewZnCWz3HkuydI=)
                          2: 1I1iZ7300v4FFVzAh-ou0-ms4eE.asa (hash: muyZtlJj85zLNiHXbuE74a51IFC0CAYzbkhCq8U8ciI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
        Validity
            Not Before: Oct  3 07:10:06 2026 GMT
            Not After : Oct 10 07:10:06 2026 GMT
        Subject: CN=6ac0aa4f-bb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:93:b7:c3:8b:fc:41:97:09:0e:36:50:74:
                    7f:6f:96:50:2a:ad:a6:76:7f:d7:ef:7d:66:3b:04:
                    68:10:4d:39:cf:17:2a:e6:15:3b:b1:6d:d3:a5:99:
                    5b:7d:ca:48:bc:7c:36:14:6a:e8:40:c4:15:81:a8:
                    89:1d:cb:95:38:8a:fd:ff:44:d0:02:ea:fb:24:ae:
                    b3:6a:91:a1:e0:c9:d3:84:16:38:9a:71:1b:28:cf:
                    22:d5:b3:d0:16:27:f8:b8:1a:5b:c3:0b:30:1a:60:
                    3c:54:93:30:95:d7:04:12:e9:7c:c3:25:78:f6:e5:
                    f2:0d:bd:94:4e:5c:1b:72:44:9c:9d:95:97:4c:6c:
                    06:f9:4b:49:c0:86:2b:62:88:94:a4:bc:b5:59:af:
                    5c:38:16:fc:ac:b5:c3:3f:df:5e:86:16:97:63:b1:
                    3c:df:d1:76:9f:b2:ef:3b:5d:ee:b6:17:4b:00:01:
                    67:9c:bc:f4:5b:b1:1f:a3:82:87:a3:1c:48:95:2f:
                    33:c4:c9:55:8e:d3:a7:e8:5d:bb:aa:b6:a5:f0:eb:
                    17:50:48:1e:c7:51:bd:62:a4:17:62:bb:6f:90:44:
                    47:c7:09:d5:e4:5c:1e:ff:4e:bb:20:15:76:07:96:
                    86:10:85:67:e9:eb:e4:8e:e8:c5:55:94:fd:f7:17:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:51:68:0D:F5:7B:14:16:7B:A6:A3:65:EE:15:D0:85:DE:58:E0:EA
            X509v3 Authority Key Identifier:
                keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:d8:9c:02:62:de:f8:1d:f9:f3:d2:a8:de:cc:dd:cf:6a:
         81:2f:c9:ac:59:c6:31:55:d2:24:48:b2:8e:9c:37:c4:bf:44:
         1d:6d:85:b2:72:1c:17:ac:e6:c3:4a:61:87:86:f2:3a:0f:c6:
         d5:f8:e7:07:a3:19:46:7c:fe:34:31:70:c5:86:e7:17:98:22:
         59:1f:89:f5:90:71:75:e2:f3:1a:34:ac:96:4b:51:ee:60:bb:
         fb:fd:55:74:c2:ed:b3:99:be:8f:79:39:fe:04:0e:1d:45:c3:
         c0:ae:c1:ad:58:82:91:07:58:d0:6e:e1:06:5d:06:ee:c2:2a:
         bb:ae:43:bb:62:c8:b1:37:c8:95:6e:ee:e3:5f:39:6c:b7:e4:
         14:d5:88:56:f1:a8:e3:b2:a9:0b:10:17:ed:00:75:ad:77:24:
         28:f7:7c:85:b6:74:1c:9f:83:2e:e9:11:a9:32:78:5c:81:13:
         d7:ad:5a:62:45:db:7c:ba:2f:d5:9c:95:06:be:ee:46:d0:ac:
         34:d6:ff:0c:7d:e8:c0:fe:70:42:e0:91:3e:dc:db:07:48:5c:
         5c:39:f4:6f:be:bb:de:80:76:36:df:02:86:cd:d8:c0:a5:1e:
         06:d3:af:68:83:58:ce:3b:c7:93:cb:c0:ff:bf:9b:81:0d:fe:
         d4:72:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:18:24 2026 by rpki-client