Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
File:                     HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json)
Hash identifier:          X0EMgTIGw3kJwD3AIwemkrGZxbcybJz+wWp8CZyAd4o=
Subject key identifier:   5C:8B:E4:9F:0F:D1:06:F2:DD:5E:FD:8B:3A:5F:98:58:84:5D:CF:44
Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9
Certificate issuer:       /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
Certificate serial:       178F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
Manifest number:          1781
Signing time:             Tue 22 Sep 2026 16:31:43 +0000
Manifest this update:     Tue 22 Sep 2026 16:31:42 +0000
Manifest next update:     Tue 29 Sep 2026 16:31:42 +0000
Files and hashes:         1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: PyAelobItEklSE3wvC9Uho+r0DavumUNWgx+5uBnmFc=)
                          2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: +mlsrBxdIyOlCH9NElXmLFuWulBGulTkwg1yRe34F2o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl
                          rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 15:21:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6031 (0x178f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9
        Validity
            Not Before: Sep 22 16:31:42 2026 GMT
            Not After : Sep 29 16:31:42 2026 GMT
        Subject: CN=6ab2ad6f-1879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2c:38:d7:5c:25:43:3c:b0:76:fd:33:6d:f7:
                    72:30:33:77:8a:4f:b6:65:81:9b:3d:2b:aa:d2:14:
                    dc:b7:f1:09:05:87:88:be:19:cc:b6:43:9a:88:29:
                    08:4f:d8:04:a8:92:9e:79:7b:5f:0a:4a:72:91:f6:
                    eb:f0:23:c2:19:39:6b:04:65:65:97:ba:b7:b4:bf:
                    9a:8a:11:e4:50:a8:aa:19:78:aa:33:d3:78:f3:c8:
                    92:2c:3e:6d:ff:fa:ef:51:ee:4f:c8:59:61:0e:6c:
                    9f:71:da:a7:d1:62:56:26:9e:dd:94:25:b4:8f:6c:
                    82:be:0f:b2:65:73:3a:fb:21:f8:4c:61:2d:52:66:
                    c7:9a:bd:4b:16:b7:aa:d8:5c:21:72:f8:c0:ce:52:
                    9e:ea:66:a4:62:03:63:14:08:48:55:73:cb:db:47:
                    94:6b:10:0f:2c:4f:0d:71:95:86:7d:f7:89:ed:0d:
                    00:a1:c7:d3:af:e0:ea:02:32:80:97:85:cc:84:d7:
                    95:74:cb:88:01:36:71:d1:65:c4:76:2c:ee:d5:2f:
                    0e:bc:8d:84:63:ca:59:f6:b0:82:dd:83:7d:0c:b9:
                    e7:f6:1f:40:ca:6d:bc:96:37:26:8b:1a:15:74:3a:
                    ae:b1:12:ff:79:2f:a9:98:9a:98:d1:bc:17:10:cc:
                    58:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:E4:9F:0F:D1:06:F2:DD:5E:FD:8B:3A:5F:98:58:84:5D:CF:44
            X509v3 Authority Key Identifier:
                keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:72:e0:d8:be:b3:4a:bc:d0:05:32:59:b9:26:21:2b:bc:65:
         34:6d:87:ed:19:a4:a6:0a:1a:fc:0c:42:65:06:f8:38:e0:e2:
         0e:33:4d:b1:b0:08:cf:c6:3b:40:ba:66:c3:0b:62:95:1f:55:
         e1:2d:fa:53:a1:02:81:aa:8f:81:c3:24:d8:79:a3:db:f9:7b:
         64:d0:95:6c:8d:60:00:ab:e4:03:c5:0c:8a:ed:4a:14:56:08:
         37:82:e6:dc:f1:1a:53:4d:63:95:78:c2:92:cf:a7:ff:62:1a:
         e1:1d:3b:c4:62:ed:14:f0:9b:5e:27:20:1e:65:69:1d:cf:d8:
         02:a9:7f:13:d8:fe:4a:da:1f:27:48:a9:5a:fa:0e:32:ee:11:
         71:9d:97:31:51:df:0b:7e:dd:5f:55:6d:30:12:54:2d:8f:61:
         60:99:2f:a5:52:f1:de:ca:ee:7d:ea:8a:49:b7:14:9e:80:c0:
         b2:76:1b:48:6a:c5:42:1e:08:20:a9:8e:74:a9:08:1d:32:c3:
         78:e1:97:cf:52:f8:4d:e5:3b:c1:24:b2:66:87:9f:d4:9e:6d:
         04:22:0b:56:66:4f:4a:7d:6c:3d:d2:ac:a3:6e:0a:5c:d1:f8:
         98:6d:4d:22:72:dc:49:e3:c5:56:d0:08:e0:3b:e5:77:1e:1c:
         cf:18:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:14:37 2026 by rpki-client