Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
File:                     4mhztF-I0fXYg8F-TM9wokUWIUI.mft (raw, json)
Hash identifier:          2bvJtt/DXa/ZrkfXANsE1ZEWE3y1E2LbI6YZTzSBK1g=
Subject key identifier:   BE:44:CC:FE:54:D7:39:D0:1A:48:A9:E1:3A:E0:64:B0:70:EA:71:7B
Authority key identifier: E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42
Certificate issuer:       /CN=A91F4C6B/serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
Certificate serial:       09D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
Manifest number:          09C1
Signing time:             Mon 28 Sep 2026 20:03:59 +0000
Manifest this update:     Mon 28 Sep 2026 20:03:59 +0000
Manifest next update:     Mon 05 Oct 2026 20:03:59 +0000
Files and hashes:         1: 4mhztF-I0fXYg8F-TM9wokUWIUI.crl (hash: WVvdendLhh+suDGGhdyD7aloqqyp63lRzM8iI/xrHgw=)
                          2: E146B994B51F11EA9146DD58C4F9AE02.roa (hash: GufOAmUmbBgvjXc0J89UeBy8dF93N+oEnJbdHPQ6yc0=)
                          3: 7A54F40C4F8911F18D85090792833773.roa (hash: o6p3iw3rhONzEiNetLEQUPFvD7H7C0JPmrzCOJSNgfM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl
                          rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 20:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517 (0x9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4C6B, serialNumber=E26873B45F88D1F5D883C17E4CCF70A245162142
        Validity
            Not Before: Sep 28 20:03:59 2026 GMT
            Not After : Oct  5 20:03:59 2026 GMT
        Subject: CN=6abac82f-b4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bb:46:33:34:a2:38:9a:05:db:54:33:a0:32:
                    97:69:34:d1:a9:be:91:e9:6f:9a:2e:8f:f6:50:58:
                    4d:18:6e:24:5c:c7:3e:74:2e:99:25:f2:ed:78:4b:
                    ee:18:cd:7f:b5:a5:6d:dd:a2:b5:c1:73:c3:41:4a:
                    17:ca:95:5a:c6:27:50:77:2d:9e:4d:65:c4:28:4a:
                    b1:01:e8:f4:cf:93:5c:dd:fd:8f:53:75:bc:1a:07:
                    ec:9f:a1:95:85:8a:ed:e3:fd:ed:ca:5c:cf:03:f5:
                    d8:19:f8:2e:db:95:7c:5c:0b:c2:dd:eb:69:b9:ce:
                    ea:f6:b5:65:88:c6:84:d5:3a:10:9b:93:0a:f2:08:
                    b8:df:d1:59:e5:f3:60:90:66:dc:af:a7:14:6a:9f:
                    30:d0:50:29:bb:a7:a1:fc:d5:05:44:79:3e:28:b2:
                    61:f4:44:1e:45:1e:18:2c:40:91:bc:94:3b:cc:49:
                    89:6c:3b:74:15:56:79:f8:19:c0:2c:fb:f0:cf:95:
                    7f:b9:26:84:cc:04:fe:8f:01:84:e2:e9:fb:64:33:
                    94:5b:08:7e:5b:68:83:1a:ee:04:c8:2b:42:88:d1:
                    0b:0e:27:83:da:2d:d0:d7:e5:1d:98:e0:90:82:ef:
                    4f:18:9c:cc:19:e2:1f:d4:05:ba:36:26:b8:de:99:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:44:CC:FE:54:D7:39:D0:1A:48:A9:E1:3A:E0:64:B0:70:EA:71:7B
            X509v3 Authority Key Identifier:
                keyid:E2:68:73:B4:5F:88:D1:F5:D8:83:C1:7E:4C:CF:70:A2:45:16:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4mhztF-I0fXYg8F-TM9wokUWIUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4C6B/278AA3E4B51F11EA9FE8BD58C4F9AE02/4mhztF-I0fXYg8F-TM9wokUWIUI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c5:f4:c9:0a:37:7a:28:47:b9:b0:48:d3:e8:c4:c5:6a:07:
         2d:c3:29:83:8e:88:de:4e:7f:18:4e:f1:ed:14:71:4d:2d:df:
         2a:c8:fe:67:52:19:15:11:53:56:8d:6a:8b:08:f8:c7:e5:fd:
         e3:0c:fa:df:0a:d4:4d:af:73:db:3d:0a:18:4d:bc:46:5b:7f:
         03:60:6f:17:c9:96:89:1e:1c:fb:46:af:63:1f:08:c3:d9:d3:
         39:97:4e:cb:55:7a:f1:90:80:cd:08:79:d4:11:20:ee:05:11:
         e2:6c:3a:63:96:63:cd:7f:09:a4:6d:df:66:c1:05:c5:84:09:
         20:88:c1:4f:8a:fd:bc:da:97:af:b5:1a:c6:f8:16:d7:a0:94:
         77:f0:f3:43:07:a4:28:af:ac:23:f9:eb:18:94:69:c3:97:99:
         47:56:20:bc:76:3a:27:1f:ba:eb:c1:49:41:e8:37:75:de:ad:
         17:d0:6e:f5:91:55:c9:ae:81:0e:61:c1:36:34:0a:34:03:7b:
         e4:22:fe:d9:46:d4:1f:a7:ae:7a:62:69:e4:f3:e7:95:5b:3d:
         d7:9c:76:3e:5b:7f:14:a1:70:3f:ee:28:0b:29:e4:fa:eb:90:
         5e:b3:48:b1:94:f6:31:eb:4a:02:12:72:e0:31:a0:ba:56:3e:
         77:3f:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:24:47 2026 by rpki-client