Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
File:                     rHE1BMtD6841eUt90irqe7WCPEk.mft (raw, json)
Hash identifier:          PtGNf/L52gNTLUyrcWXhS8Z2RCwz3JKn1NAdHlOevWE=
Subject key identifier:   E7:C0:BD:70:BE:54:38:91:45:7D:CB:19:00:6E:48:43:0C:C0:61:96
Authority key identifier: AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49
Certificate issuer:       /CN=A9186777/serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
Certificate serial:       0CCA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
Manifest number:          0CBD
Signing time:             Sat 28 Feb 2026 18:35:00 +0000
Manifest this update:     Sat 28 Feb 2026 18:35:00 +0000
Manifest next update:     Sat 07 Mar 2026 18:35:00 +0000
Files and hashes:         1: rHE1BMtD6841eUt90irqe7WCPEk.crl (hash: XyXeVqHMooicMjzr/haDu8dyB0m4g8/0ecQXrvxwiFU=)
                          2: 54E193E20AD511EA8397192EC4F9AE02.roa (hash: OzJN0re3xgLzOjNQ/4EO/Q5rjMxHo1x+d+hZ2rjf3vw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl
                          rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 18:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3274 (0xcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186777, serialNumber=AC713504CB43EBCE35794B7DD22AEA7BB5823C49
        Validity
            Not Before: Feb 28 18:35:00 2026 GMT
            Not After : Mar  7 18:35:00 2026 GMT
        Subject: CN=69a33554-b158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:85:24:de:c2:b6:e2:7b:03:c6:c0:21:6e:
                    08:44:ea:7c:c2:6a:c4:74:9d:ba:4b:4f:c6:0a:ab:
                    d5:f5:26:e5:76:54:46:d2:42:ec:da:5c:91:a6:b1:
                    e0:5a:63:05:06:e6:67:8f:41:b6:0d:87:e4:38:2b:
                    f6:c8:ce:16:0b:76:59:2a:d4:72:21:45:8f:c0:2e:
                    ec:06:33:03:cb:da:72:c2:46:87:61:3b:e3:d7:6f:
                    fd:07:0b:b0:e5:31:0a:6e:a1:8b:9b:7c:02:99:08:
                    a0:98:2b:a9:c3:04:9a:a7:09:60:ee:f1:83:3d:67:
                    9f:da:11:55:5c:5e:9c:07:df:00:74:52:97:3e:dc:
                    52:eb:29:84:1f:c0:f1:da:51:06:76:d2:8d:0a:31:
                    88:42:f3:75:ed:dd:f3:bf:1d:06:b3:88:ff:40:3d:
                    70:5e:ce:35:5d:c4:69:30:3f:9a:41:19:ca:09:30:
                    fd:9c:50:76:e2:e4:fa:5a:eb:db:50:3f:58:b4:b8:
                    df:b3:b1:82:c0:06:aa:38:a3:a5:27:88:fb:4c:7e:
                    bb:ab:0e:98:eb:ea:d4:17:54:92:9a:20:be:ac:c5:
                    f2:1d:8b:16:9e:c2:46:89:98:e1:12:d6:ae:b8:dc:
                    7d:17:a1:9f:eb:e3:70:9d:f0:c4:92:72:c4:58:70:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C0:BD:70:BE:54:38:91:45:7D:CB:19:00:6E:48:43:0C:C0:61:96
            X509v3 Authority Key Identifier:
                keyid:AC:71:35:04:CB:43:EB:CE:35:79:4B:7D:D2:2A:EA:7B:B5:82:3C:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rHE1BMtD6841eUt90irqe7WCPEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186777/FDAA77200AD311EA9ADF772CC4F9AE02/rHE1BMtD6841eUt90irqe7WCPEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:37:0e:b4:b7:a6:6c:1e:f8:f5:ec:2d:6a:06:94:8d:f6:8c:
         ad:ea:f3:1f:c4:07:5a:c0:f4:83:1f:13:24:8f:b9:ea:00:7c:
         eb:7e:11:5b:61:48:ea:1c:32:af:01:57:49:d6:79:3c:cd:48:
         f0:59:ae:96:c2:d5:a9:64:68:49:15:c7:a1:b3:62:90:3a:44:
         42:a5:58:e4:f3:99:6c:4a:35:60:de:fc:65:4a:7a:8d:e4:de:
         76:95:9d:7d:4c:d8:12:d3:8c:67:0d:54:4b:c7:f1:44:4e:bf:
         ac:09:5e:e3:6b:c7:bb:8a:23:de:a0:be:e7:13:ae:4c:24:71:
         51:fb:99:a1:ee:fe:27:3b:f8:71:27:ec:bc:c2:54:45:a4:bc:
         d2:d9:bc:34:76:3f:34:bd:ac:46:1d:f9:78:1f:91:07:0d:7d:
         fc:c1:b3:cf:47:d6:2e:e3:b7:f5:bb:d5:ed:0a:41:87:4c:b8:
         0d:54:03:44:b3:0a:0a:9c:e7:73:28:b1:6c:24:c3:28:bf:fe:
         d0:9e:0f:bb:cc:d4:f7:71:7f:ea:5a:04:fe:43:32:9b:29:44:
         c2:25:93:fd:06:7b:73:51:68:c4:7c:d6:ac:4e:e6:d6:cf:2f:
         ab:0b:90:8c:00:b5:62:c1:77:e9:00:fa:6f:c0:4d:61:bb:2a:
         57:b4:35:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:37 2026 by rpki-client