Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
File:                     h6nyMStovlVf_ObiOfdiHcPnS8w.mft (raw, json)
Hash identifier:          aJdRLUnbdFmxcXSGWdukYAwY+QY7t+wbqfrZwMgYLTQ=
Subject key identifier:   38:EB:EF:E0:96:10:AB:F0:73:9A:D7:A0:52:44:2B:70:87:9E:2A:91
Authority key identifier: 87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
Certificate issuer:       /CN=A91263B8/serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
Manifest number:          4F
Signing time:             Mon 31 Aug 2026 08:45:04 +0000
Manifest this update:     Mon 31 Aug 2026 08:45:04 +0000
Manifest next update:     Mon 07 Sep 2026 08:45:04 +0000
Files and hashes:         1: h6nyMStovlVf_ObiOfdiHcPnS8w.crl (hash: g0LiZmAnJvZvl5snQIA1aUkoqQV/R6XtFbV8ekF51+A=)
                          2: C43A6D14325511F1978F2162B6833773.roa (hash: ZQcKHfvJORnZBPl0xwIufb0foIAzEfuBoRsonDeM53Y=)
                          3: EB551A522F0311F19C1B78ED96833773.roa (hash: wGOSXhgMacHwlXGnpL8wWQQ1qcnmdzrNpMqajib3dOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
                          rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 08:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263B8, serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
        Validity
            Not Before: Aug 31 08:45:04 2026 GMT
            Not After : Sep  7 08:45:04 2026 GMT
        Subject: CN=6a953f10-f3c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:b7:88:19:d6:64:31:37:9b:30:42:ef:7d:
                    59:41:77:2b:c5:92:d8:12:68:0e:79:b9:6a:a5:ff:
                    83:10:39:8d:6e:47:3a:49:da:7f:d8:1b:ca:84:e2:
                    df:cb:bf:87:ee:c6:b5:84:81:9f:49:30:e1:f5:4b:
                    c8:5e:3a:b0:5d:8c:17:0d:24:4d:47:c1:b5:21:e3:
                    86:a4:5f:3c:f3:93:df:58:e9:1d:34:08:6b:cb:ae:
                    60:2d:a7:ee:06:1a:91:2e:80:68:53:f0:a2:cf:65:
                    6d:12:17:8b:54:6f:0a:2a:48:ca:b9:9e:7d:a6:88:
                    81:99:a0:c9:67:4f:32:07:f2:f6:e3:71:0c:36:b6:
                    56:90:ba:96:b0:22:00:77:8b:cd:bd:0d:85:45:5f:
                    5c:b5:84:a2:09:15:71:79:87:3e:c4:34:50:d4:29:
                    c2:3a:1c:52:0a:a7:ac:91:15:28:27:d5:b9:06:0b:
                    f1:5c:47:23:52:a4:4e:03:75:ac:e7:7b:a3:29:94:
                    99:9c:a1:0b:1c:70:e3:5e:3c:f1:ec:60:83:f9:a2:
                    9a:b8:2a:df:82:05:a7:07:9e:c6:cf:f6:66:3a:25:
                    cb:a4:91:cb:88:29:0f:c5:c4:ea:9e:05:6a:a1:47:
                    b3:70:fd:cf:93:09:db:49:51:35:8a:92:69:8c:2d:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EB:EF:E0:96:10:AB:F0:73:9A:D7:A0:52:44:2B:70:87:9E:2A:91
            X509v3 Authority Key Identifier:
                keyid:87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fb:a9:a5:02:20:7d:a3:ff:2f:e1:d4:eb:9f:e7:75:4b:de:
         82:68:da:52:d4:75:a2:72:64:12:98:15:f1:59:9d:e6:f4:3d:
         36:6e:d8:ba:6b:5f:af:49:ad:63:4d:56:d1:a4:94:54:95:a7:
         09:eb:75:61:1c:ab:e1:b3:58:f3:70:9d:73:33:d7:35:46:50:
         6f:16:1e:b0:ed:71:c6:e0:9d:34:1f:96:83:8b:82:23:e4:eb:
         a5:b7:98:04:5f:28:91:98:cc:84:dc:b6:d5:fc:e5:56:42:26:
         6e:10:cc:00:29:fb:48:fd:3c:d4:4f:7e:30:45:e8:00:93:2d:
         01:56:a0:79:38:61:43:1d:62:a6:8a:ac:cb:c8:1a:65:be:bb:
         a1:99:1b:4e:ab:8a:79:40:c5:57:75:f3:73:b3:aa:20:11:8c:
         13:4f:bc:8e:3a:ff:cf:ad:0a:55:7b:76:74:4b:2c:06:35:98:
         56:c4:11:e5:09:cc:a9:e8:4d:f7:4a:9d:03:df:9c:93:2c:8e:
         77:0a:de:3c:66:a0:99:1f:9f:fc:e3:86:39:57:61:b2:7b:94:
         85:89:70:fe:07:ae:06:38:16:5f:63:de:8b:f0:8f:bd:1b:2a:
         56:15:92:cd:e4:90:4d:5b:15:b8:f9:8b:4f:53:63:8a:0d:b2:
         75:55:62:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:21:01 2026 by rpki-client