Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier:          r/kYsFbUDGQ2xVVXfhtqz2xs7JPOXIXBZtlS/Vk246A=
Subject key identifier:   A5:E9:18:72:9E:07:BE:09:CB:64:17:AA:5C:7D:5E:C6:A1:55:0F:09
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer:       /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial:       18E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number:          18CE
Signing time:             Sat 10 Oct 2026 16:29:19 +0000
Manifest this update:     Sat 10 Oct 2026 16:29:18 +0000
Manifest next update:     Sat 17 Oct 2026 16:29:18 +0000
Files and hashes:         1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: LiOP8coGBt/Sizs7GHWWPRkyVyglXUOXNQctQ005gfw=)
                          2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: rehHNVoMzYrcbyHR3xn9AScPl8hoBFDtA7CJ2MlnTrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
                          rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 16:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6377 (0x18e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Validity
            Not Before: Oct 10 16:29:18 2026 GMT
            Not After : Oct 17 16:29:18 2026 GMT
        Subject: CN=6aca67df-4830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b3:a9:3c:27:54:7e:ed:c1:8a:ae:bd:91:d6:
                    33:f8:64:f2:9c:09:33:76:ed:9d:5f:04:78:13:c8:
                    46:7b:ef:e4:a9:78:35:7c:b2:0f:9d:76:dd:90:c3:
                    86:85:4b:aa:41:3f:a8:4b:95:6b:98:29:13:91:16:
                    b0:12:ef:dc:00:a8:86:b8:fd:27:25:e9:30:03:72:
                    69:69:c8:3b:1d:ea:f6:19:aa:d2:ca:2a:61:b9:70:
                    41:d5:a6:30:cd:3d:59:97:f5:b7:8d:a5:a9:13:7e:
                    b3:12:60:11:7f:c2:59:44:16:77:6e:7a:14:c5:66:
                    49:82:04:c0:37:22:44:09:b7:70:c9:c2:0b:3d:b9:
                    fd:c3:8d:b5:08:d5:3c:3a:23:23:3d:92:68:c0:4a:
                    88:ec:8c:90:d9:a5:01:e2:20:75:d5:2f:a5:1e:70:
                    1f:6b:d2:38:b1:39:f2:c9:fe:c2:03:61:06:ec:ad:
                    6b:54:22:51:0b:3f:73:56:d2:82:3b:fc:01:07:4c:
                    01:05:63:12:f6:5a:16:9a:f2:2b:a0:81:4e:c8:50:
                    87:ac:70:2b:d9:ad:c0:2c:4e:db:87:26:bf:04:1b:
                    4c:83:49:6b:79:59:3e:d4:d4:ae:cd:ea:92:53:2a:
                    41:c6:c9:4c:9e:d0:53:82:28:dc:53:f4:cf:fd:9e:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E9:18:72:9E:07:BE:09:CB:64:17:AA:5C:7D:5E:C6:A1:55:0F:09
            X509v3 Authority Key Identifier:
                keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:27:28:88:40:c1:cc:df:16:61:b3:d5:c5:de:c3:8d:d1:
         99:ea:14:5d:3e:93:4f:5a:dd:29:b3:da:bd:fd:0e:bc:21:d8:
         aa:03:a6:88:54:3e:4c:53:4f:ed:56:34:6c:2e:64:02:de:a8:
         3b:6f:a0:d9:e8:c8:62:ae:56:c2:03:23:17:cb:85:c6:a1:48:
         85:8e:33:55:e7:d2:21:3c:8e:e5:73:5c:c8:a3:c0:1b:29:13:
         b0:b9:3a:04:d5:03:c8:6c:3b:68:f9:73:61:d8:5f:61:e1:94:
         c7:1b:35:f0:49:60:2f:71:b9:df:4c:70:77:25:76:0f:b5:4b:
         c0:0c:21:4e:c2:91:87:2c:2a:80:a3:3c:68:00:dc:75:55:13:
         0b:3b:a4:26:24:7b:54:06:b2:37:ce:5a:e0:2d:6e:26:bb:ee:
         53:2e:c7:c6:f5:d9:b1:97:7a:43:1e:59:d4:e8:4a:1d:08:9d:
         63:76:b5:ac:68:ba:82:ca:a5:f3:20:1c:84:0a:b0:7e:30:78:
         d5:b2:9a:5b:7a:52:f4:68:54:38:72:26:ef:03:74:c7:ae:99:
         81:4b:2d:86:22:04:fc:54:78:00:66:0c:34:9c:78:43:64:8a:
         3b:5c:a9:0f:b7:21:7b:d9:a7:33:ec:2f:20:73:60:7d:5b:bf:
         2a:21:ac:6c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTUxQzkxMTAvBgNVBAUTKDg3NUY0MDAyMUM2RDQzQjA0RUZFODk0QTdGQzE1Q0M0
RjZFRDg5QkEwHhcNMjYxMDEwMTYyOTE4WhcNMjYxMDE3MTYyOTE4WjAYMRYwFAYD
VQQDEw02YWNhNjdkZi00ODMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5LOpPCdUfu3Biq69kdYz+GTynAkzdu2dXwR4E8hGe+/kqXg1fLIPnXbdkMOG
hUuqQT+oS5VrmCkTkRawEu/cAKiGuP0nJekwA3Jpacg7Her2GarSyiphuXBB1aYw
zT1Zl/W3jaWpE36zEmARf8JZRBZ3bnoUxWZJggTANyJECbdwycILPbn9w421CNU8
OiMjPZJowEqI7IyQ2aUB4iB11S+lHnAfa9I4sTnyyf7CA2EG7K1rVCJRCz9zVtKC
O/wBB0wBBWMS9loWmvIroIFOyFCHrHAr2a3ALE7bhya/BBtMg0lreVk+1NSuzeqS
UypBxslMntBTgijcU/TP/Z4TxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXpGHKe
B74Jy2QXqlx9XsahVQ8JMB8GA1UdIwQYMBaAFIdfQAIcbUOwTv6JSn/BXMT27Ym6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTFDOS9DMzAwQzJDRUM2
RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3Qk9fb2xLZjhGY3hQYnRp
Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gxOUFBaHh0UTdCT19vbEtmOEZjeFBidGliby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NTFDOS9DMzAwQzJDRUM2RkExMUU3QUFBQkNDMEJDNEY5QUUwMi9oMTlBQWh4dFE3
Qk9fb2xLZjhGY3hQYnRpYm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAatUnKIhAwczfFmGz1cXew43RmeoUXT6TT1rdKbPavf0OvCHYqgOmiFQ+TFNP
7VY0bC5kAt6oO2+g2ejIYq5WwgMjF8uFxqFIhY4zVefSITyO5XNcyKPAGykTsLk6
BNUDyGw7aPlzYdhfYeGUxxs18ElgL3G530xwdyV2D7VLwAwhTsKRhywqgKM8aADc
dVUTCzukJiR7VAayN85a4C1uJrvuUy7HxvXZsZd6Qx5Z1OhKHQidY3a1rGi6gsql
8yAchAqwfjB41bKaW3pS9GhUOHIm7wN0x66ZgUsthiIE/FR4AGYMNJx4Q2SKO1yp
D7che9mnM+wvIHNgfVu/KiGsbA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:01:46 2026 by rpki-client