Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
File:                     Syx3vC30PHKE0B5FsS2zvfAJFtE.mft (raw, json)
Hash identifier:          qImUqPJf01asor+pIuE+C7ZSvXp6Fmy/QMrCXQDFZ60=
Subject key identifier:   64:B5:8E:0A:44:7B:4D:F9:82:82:56:2C:0F:D1:47:92:4C:84:54:86
Authority key identifier: 4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1
Certificate issuer:       /CN=A912A3BE/serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
Manifest number:          018C
Signing time:             Sat 10 Oct 2026 23:07:38 +0000
Manifest this update:     Sat 10 Oct 2026 23:07:37 +0000
Manifest next update:     Sat 17 Oct 2026 23:07:37 +0000
Files and hashes:         1: Syx3vC30PHKE0B5FsS2zvfAJFtE.crl (hash: sHr1TV71Vjshh/2R7CyE6FxZyevgB5PrpeKnc935sT8=)
                          2: 10DAF9348C2D11EFB9CC3812C4F9AE02.roa (hash: aeq83y3UDmIZ+hHdv0UR/7vvLe8gLWVcHYM4gtGf+AA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl
                          rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 23:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A3BE, serialNumber=4B2C77BC2DF43C7284D01E45B12DB3BDF00916D1
        Validity
            Not Before: Oct 10 23:07:37 2026 GMT
            Not After : Oct 17 23:07:37 2026 GMT
        Subject: CN=6acac539-c6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:bf:a3:95:41:65:41:ad:21:97:c7:94:46:
                    f5:72:50:6f:3c:af:b6:16:92:34:2a:4c:ab:b3:33:
                    6c:4f:21:56:7c:3b:a5:54:f9:ef:a6:7e:20:a8:b2:
                    9b:e6:a4:42:9e:19:2b:12:44:22:04:25:d4:ca:e8:
                    6d:c3:af:db:3a:2e:67:f4:13:38:4e:21:ee:92:c4:
                    77:da:f0:77:b6:2d:cb:96:56:d4:eb:f6:9b:21:5f:
                    2d:10:09:d9:59:c9:8f:15:a8:38:8a:8e:44:a3:05:
                    d6:38:8a:ae:57:d1:bf:4d:cb:45:4a:fe:13:00:79:
                    94:3d:29:40:ed:32:37:0d:69:ae:67:ca:de:e2:3a:
                    e1:13:bc:45:72:6c:e8:e7:fa:76:1e:82:47:f2:24:
                    e6:c8:72:cf:80:f2:5b:09:83:5a:f8:65:33:e7:a8:
                    fb:1b:87:c3:53:c7:3a:89:c3:c1:c6:4a:8f:d6:57:
                    3e:7d:74:ec:d9:62:6f:a1:d4:23:a3:ce:39:41:63:
                    bc:52:f5:7c:b7:f5:54:2b:c0:93:72:63:4c:75:2c:
                    38:39:d6:8b:cc:e1:99:dc:69:1e:2f:f2:f5:dd:6e:
                    e0:58:ba:33:b1:e1:c7:58:51:b8:28:eb:0f:a2:67:
                    5c:fe:3b:6e:83:b2:f8:d5:2a:98:47:28:a0:5e:56:
                    b8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:8E:0A:44:7B:4D:F9:82:82:56:2C:0F:D1:47:92:4C:84:54:86
            X509v3 Authority Key Identifier:
                keyid:4B:2C:77:BC:2D:F4:3C:72:84:D0:1E:45:B1:2D:B3:BD:F0:09:16:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Syx3vC30PHKE0B5FsS2zvfAJFtE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A3BE/678E16B06FCE11EF89BB4C5EC4F9AE02/Syx3vC30PHKE0B5FsS2zvfAJFtE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:e5:d9:2c:ce:cc:38:15:b0:b1:6e:c0:03:f3:83:82:b3:ba:
         4c:85:13:73:23:74:63:c4:5f:cd:10:5b:a9:09:51:a8:be:2d:
         42:15:59:58:1d:e6:54:d5:49:5b:a4:e3:55:73:e2:09:c5:54:
         9e:f6:86:63:be:2b:a2:f8:41:e6:2e:3d:cc:fe:70:28:11:d5:
         78:bc:ba:c3:92:b3:cb:e5:a1:cb:bf:1c:79:90:ce:43:85:58:
         92:d5:17:d2:7f:ed:4c:ec:9e:b5:5b:ae:ab:5b:0f:6b:4e:3b:
         cc:62:38:e0:d5:0b:49:cf:a4:ad:99:41:1c:7d:28:c3:dc:01:
         56:9f:dc:37:68:d5:cc:3d:bb:6a:b9:7d:d7:fb:43:3a:58:54:
         62:af:ab:3a:58:09:b8:72:15:e8:45:8e:d8:6e:ce:58:dd:aa:
         38:4f:58:17:ae:78:8a:48:e9:91:2c:c4:3c:ee:5c:17:5f:7e:
         8f:e2:e4:21:55:8e:8e:3d:80:90:01:b3:9a:d3:89:c3:8a:5b:
         dd:a0:37:d4:30:66:67:85:62:18:e9:72:c6:cb:11:1c:d4:7c:
         61:87:c0:a9:6d:d0:bc:b0:a5:29:1e:3e:de:40:89:ca:f6:42:
         42:bd:a8:24:05:ad:ec:b2:4c:e8:b7:fc:81:9d:eb:7d:3c:8e:
         7d:41:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:38:17 2026 by rpki-client