Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
File:                     h2JAwXQl4PPi4Vds30t527-rVe4.mft (raw, json)
Hash identifier:          /8JCwrbjCxwkq9YGIr/0ufcQYulga3iLENe5y2dd/PA=
Subject key identifier:   02:B8:D3:EF:1C:51:CC:37:9A:D9:80:4F:8E:B6:88:A6:17:6E:D4:FF
Authority key identifier: 87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE
Certificate issuer:       /CN=A918FE4B/serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
Certificate serial:       02BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
Manifest number:          03B7
Signing time:             Wed 23 Sep 2026 01:15:58 +0000
Manifest this update:     Wed 23 Sep 2026 01:15:58 +0000
Manifest next update:     Wed 30 Sep 2026 01:15:58 +0000
Files and hashes:         1: h2JAwXQl4PPi4Vds30t527-rVe4.crl (hash: iigI7YDE5zrnxoOfmINVPmpPLnAQ7ozzlaT8/IKPMZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=876240C17425E0F3E2E1576CDF4B79DBBFAB55EE
        Validity
            Not Before: Sep 23 01:15:58 2026 GMT
            Not After : Sep 30 01:15:58 2026 GMT
        Subject: CN=6ab3284e-cb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bf:ef:39:67:a3:69:7a:82:b0:d9:5d:0a:47:
                    c7:4f:d9:d6:01:68:0a:2d:8d:cf:5b:86:fd:0b:22:
                    97:3a:98:8e:6e:40:91:a7:67:02:85:82:bc:80:fd:
                    de:d0:6a:f7:3c:3f:34:65:99:40:3c:0a:87:36:d6:
                    ec:9b:3e:ab:47:68:a4:94:f0:a6:58:19:4d:35:e2:
                    ae:44:20:58:24:cb:9d:01:6a:ba:da:f0:7b:05:09:
                    7f:d7:fd:b0:da:a4:de:c6:0c:cd:71:32:ae:b3:04:
                    fe:50:8d:f9:b1:50:56:df:61:4c:1f:61:4d:64:bf:
                    90:31:67:a5:bf:cc:32:36:da:25:87:ee:8f:7f:c0:
                    f2:71:be:b2:a5:d1:a9:77:1d:c2:84:cf:88:da:1f:
                    84:ee:e1:89:2b:93:a3:80:09:f7:4b:e4:a1:01:18:
                    9e:3b:5e:e9:08:ed:72:14:73:cb:33:c4:1f:bc:98:
                    2e:92:93:0f:ac:e7:07:8a:93:10:d1:c6:0f:3d:5d:
                    d6:34:58:f3:bb:e7:ad:81:d0:1b:50:85:1a:2b:b5:
                    91:04:dc:46:04:de:e9:30:46:af:ed:4b:b5:a4:2c:
                    f1:ba:c6:48:cc:08:93:0e:29:8e:8f:9b:2f:9e:c5:
                    3b:ca:56:42:2b:f7:2d:73:2b:89:af:e0:87:90:34:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B8:D3:EF:1C:51:CC:37:9A:D9:80:4F:8E:B6:88:A6:17:6E:D4:FF
            X509v3 Authority Key Identifier:
                keyid:87:62:40:C1:74:25:E0:F3:E2:E1:57:6C:DF:4B:79:DB:BF:AB:55:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2JAwXQl4PPi4Vds30t527-rVe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/h2JAwXQl4PPi4Vds30t527-rVe4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:59:d2:cb:69:b0:5d:d5:4d:43:1d:4a:83:ed:45:c5:49:1b:
         c6:24:03:bf:c7:b5:ce:53:7a:3b:20:ab:07:d4:94:6a:89:e1:
         58:58:19:67:21:f3:b9:eb:6e:45:5c:9f:dd:da:b4:b8:c6:c8:
         43:30:22:54:26:8e:ff:48:f8:56:da:f2:69:84:60:69:0d:52:
         92:e5:50:03:65:cb:bc:5c:2b:e6:56:be:3e:a1:50:10:df:ab:
         12:5f:c9:6c:f1:b7:52:4b:37:29:61:91:84:d9:52:9e:81:c0:
         c9:3c:bb:cd:d2:c8:a2:79:1d:87:99:db:22:2d:ba:11:c1:b7:
         3c:b1:30:18:2e:b0:21:cc:b7:13:d1:ac:0c:73:33:7a:a6:a6:
         61:11:7c:c5:73:d8:9d:bf:86:5b:0a:b7:ca:27:22:4e:dd:4f:
         b8:ba:7b:80:e5:9c:08:ff:7d:e8:63:1d:6c:4e:30:9e:aa:07:
         07:43:15:32:fb:bc:30:3b:ba:8f:03:77:51:50:0a:b1:e7:d8:
         ee:de:b9:c7:65:f8:4b:ae:18:05:7d:b0:58:5b:1e:b7:73:c9:
         69:57:9c:b6:4a:1a:c4:ba:3b:79:2d:38:d1:f8:10:ac:48:df:
         e6:1e:5d:0d:e4:a2:59:8e:15:a0:85:ac:a1:7c:2e:af:00:34:
         75:1a:f1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:51:34 2026 by rpki-client