Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
File:                     cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json)
Hash identifier:          NDqskTFsvVjOJ/JFybEImflWY+KcIyTOz200BOUyHYo=
Subject key identifier:   6E:16:5D:AF:24:32:97:11:DA:DC:78:2B:1E:31:0C:B6:25:36:02:24
Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF
Certificate issuer:       /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
Certificate serial:       0419
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
Manifest number:          0410
Signing time:             Mon 05 Oct 2026 00:23:41 +0000
Manifest this update:     Mon 05 Oct 2026 00:23:41 +0000
Manifest next update:     Mon 12 Oct 2026 00:23:41 +0000
Files and hashes:         1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: hxsH54DhIfildBld+XiOeLVjFJCYh9jZoNvF4NW9+Sc=)
                          2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl
                          rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 00:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF
        Validity
            Not Before: Oct  5 00:23:41 2026 GMT
            Not After : Oct 12 00:23:41 2026 GMT
        Subject: CN=6ac2ee0d-8a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:0e:d1:d0:39:b9:e5:05:b3:f8:d7:56:1e:
                    1b:df:f5:b7:c8:f6:da:77:70:21:18:61:0a:28:9a:
                    eb:1a:a1:d6:54:c9:c4:cb:89:75:63:81:c9:0b:09:
                    41:56:92:24:19:ae:af:cc:27:4d:d9:6c:3b:5d:7c:
                    1c:68:33:21:32:7c:d0:13:b8:71:c3:2d:1e:2b:78:
                    39:9d:93:95:13:90:85:f1:8a:3d:22:f6:cd:34:3c:
                    be:d6:f3:d4:4f:d0:4c:de:94:ed:e7:53:71:e5:c8:
                    41:78:bc:f5:47:9e:25:a7:0f:9d:ad:08:d6:39:35:
                    f8:50:d4:80:4a:d6:34:2e:ad:ba:d4:21:ad:b3:a6:
                    ad:11:fd:32:dc:0d:aa:e7:dd:cc:75:8a:3b:07:47:
                    42:15:03:76:18:e0:14:8a:93:d9:5e:13:7e:32:70:
                    0c:c1:97:8a:0f:a1:75:37:8e:5c:35:82:ed:f8:8a:
                    80:80:f7:61:2c:8d:94:fe:d8:92:e0:6b:8d:20:6f:
                    e7:39:dd:c9:88:d8:9b:10:49:3d:76:5b:45:64:42:
                    3c:84:c9:0e:ea:59:9a:ed:6b:cc:64:a5:b8:3c:49:
                    29:02:09:3d:c6:6d:2a:97:ab:08:03:5c:79:52:c1:
                    4f:88:45:80:7f:01:4e:9a:14:a8:6f:c2:e1:03:63:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:16:5D:AF:24:32:97:11:DA:DC:78:2B:1E:31:0C:B6:25:36:02:24
            X509v3 Authority Key Identifier:
                keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:45:ac:13:50:f0:0f:bb:a5:c9:f3:79:2c:c0:fa:cc:9d:a4:
         ff:df:08:f0:03:c5:f3:91:9c:c5:92:a1:81:3f:0d:5f:33:c8:
         f3:70:af:f2:73:cd:df:0a:7d:60:3e:56:18:bd:d6:00:22:0b:
         1d:e9:71:83:d1:d6:8b:26:ce:aa:c6:01:44:30:50:cb:23:82:
         8a:2f:77:f6:3c:e4:02:21:8f:37:9b:96:82:74:c2:92:08:45:
         df:6e:19:82:b8:36:3d:9b:dd:cc:45:6b:12:05:36:78:a5:02:
         06:56:2d:5b:7b:95:f2:01:e8:5e:88:bd:21:46:0b:a9:9e:6d:
         37:39:86:da:58:b0:2c:c3:dd:c5:5a:4a:89:1f:0b:e9:69:41:
         e2:b5:40:41:62:a2:99:d9:a3:3b:34:fe:7a:4e:80:a3:25:8d:
         0a:1f:13:3f:d6:2c:27:ea:22:d8:7d:15:80:7a:2f:0b:1c:5b:
         40:03:ee:f1:6a:7f:67:b4:86:69:32:bc:91:d6:26:06:71:0f:
         95:fc:1c:c4:fc:e0:61:6a:51:49:9b:7e:02:d8:64:ed:a6:f9:
         d7:8f:43:0e:e5:3c:b6:8b:82:7e:2a:03:0d:d3:fd:8e:e1:fa:
         3d:da:21:79:ff:4c:9f:1a:c3:d5:b4:22:2e:96:60:2e:96:5c:
         ca:ce:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:32:53 2026 by rpki-client