Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
File:                     rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft (raw, json)
Hash identifier:          SUThyYwzA/vNuClbJdLZ/gY6HO04WCdBT0D/2sFKDNI=
Subject key identifier:   F6:DB:24:96:AF:2C:A3:EF:62:08:E6:40:1B:B0:E8:01:6B:BF:B0:EB
Authority key identifier: AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F
Certificate issuer:       /CN=A9117E4D/serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
Certificate serial:       3604
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
Manifest number:          35CC
Signing time:             Fri 02 Oct 2026 14:27:29 +0000
Manifest this update:     Fri 02 Oct 2026 14:27:29 +0000
Manifest next update:     Fri 09 Oct 2026 14:27:29 +0000
Files and hashes:         1: rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl (hash: iac7cKqVVlLtDME/dhaD0O4lpjbYGhYXlyGBKQnNyI0=)
                          2: 44D3107874E311F1BDAFA91462A30FBC.roa (hash: VfyhBUgrPxEZ3Pk507z9TQFQixjh7TGc37ukGF2VrsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl
                          rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 14:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13828 (0x3604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E4D, serialNumber=AE107F3C2977717A1CD3571D183748FD07D9FC5F
        Validity
            Not Before: Oct  2 14:27:29 2026 GMT
            Not After : Oct  9 14:27:29 2026 GMT
        Subject: CN=6abfbf51-7399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3f:26:db:98:4a:ac:1d:15:9b:55:ba:68:2d:
                    9d:c2:d9:88:0d:64:c1:46:28:95:06:6a:ba:8f:93:
                    8a:68:5c:4f:be:8c:99:ee:73:78:5f:d8:10:60:9c:
                    b8:6a:87:66:d9:a2:7a:cc:df:7d:44:48:cc:f5:53:
                    73:6c:e9:84:62:7e:a4:12:b6:80:fd:70:8e:00:9b:
                    5b:2f:86:de:e6:a8:a8:2a:8e:e3:c7:cf:38:f2:fd:
                    32:58:fd:c5:a8:33:0a:96:07:50:89:4b:ae:30:f8:
                    ce:6c:71:48:36:53:64:21:b4:6f:40:07:c7:f6:c2:
                    cc:2b:2f:40:e7:2e:ce:48:82:0d:22:b2:f1:ca:ff:
                    0d:62:90:fe:77:f1:6a:7b:56:82:61:4d:8f:ec:ad:
                    d6:bd:55:4b:fa:ef:31:fd:98:5c:40:e4:84:b6:e1:
                    62:f7:71:ed:d5:64:5b:04:2f:86:f2:6b:eb:07:90:
                    ea:29:6d:a9:ba:be:d6:1b:01:03:28:8a:50:93:46:
                    ae:24:6b:9b:b2:fa:82:11:4f:07:df:78:12:03:15:
                    88:99:1b:d8:a2:d9:25:d4:bb:26:fe:26:62:3a:26:
                    f5:26:74:a2:71:54:2d:a1:85:72:65:ba:22:d8:b6:
                    d1:32:4f:36:90:d6:60:d1:ce:45:00:83:c2:27:81:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DB:24:96:AF:2C:A3:EF:62:08:E6:40:1B:B0:E8:01:6B:BF:B0:EB
            X509v3 Authority Key Identifier:
                keyid:AE:10:7F:3C:29:77:71:7A:1C:D3:57:1D:18:37:48:FD:07:D9:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/EA1B1D6A1D8511E2979FE7DC08B02CD2/rhB_PCl3cXoc01cdGDdI_QfZ_F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:12:03:59:50:20:00:d6:a9:98:88:c8:8e:b5:27:67:92:a0:
         8b:0d:8d:64:00:ad:e5:db:5c:c5:9c:15:f7:cd:be:39:c1:40:
         20:20:8c:5b:c0:2e:c2:da:f8:3f:6a:50:42:a9:d1:08:43:0e:
         56:d4:6f:48:5e:7f:10:74:3d:d4:a1:09:44:33:2e:ae:80:f7:
         bb:e0:b6:d8:1c:c8:9c:d4:91:a6:08:eb:a9:98:77:2f:cd:26:
         d9:ef:a7:04:42:18:90:6e:07:f7:5a:06:2a:d0:44:2e:ab:ba:
         25:cb:91:e5:fd:53:27:21:d6:fd:e4:6f:4f:5a:25:d3:0e:ca:
         2d:37:49:39:90:11:5d:e6:16:fc:ab:b7:e9:c6:e6:c8:fb:bc:
         b5:3f:98:2d:6a:7d:c7:91:97:a4:fc:27:36:00:db:2d:c6:35:
         f3:92:82:cf:e6:4f:94:7e:97:63:ec:fc:43:9e:94:2c:71:44:
         18:2c:b4:13:c3:34:1b:b7:f5:73:96:c4:c6:03:06:5b:ab:cd:
         5c:14:c6:ae:3a:44:d5:fb:3c:10:67:15:48:87:0c:73:79:8b:
         f3:b9:ab:79:8c:d9:06:6a:d8:4f:6a:28:ad:52:8c:d0:fb:3e:
         99:62:4d:6e:10:5e:b4:95:26:55:c7:37:13:f8:ce:30:fb:e8:
         01:5d:cd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 09:11:16 2026 by rpki-client