Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
File:                     p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json)
Hash identifier:          m/F9AUtFmjSEUTiD//sGzjiEBvLRm89kDVXg8pqCjnA=
Subject key identifier:   4F:B6:F8:66:82:D2:2C:E9:CC:0A:0A:51:D5:10:C8:06:43:F3:95:E7
Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3
Certificate issuer:       /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
Manifest number:          01BE
Signing time:             Sun 27 Sep 2026 04:24:11 +0000
Manifest this update:     Sun 27 Sep 2026 04:24:11 +0000
Manifest next update:     Sun 04 Oct 2026 04:24:11 +0000
Files and hashes:         1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: YbVSQ15oWCrufakIB/NreLLYbFt+jEEEuI3sFl9k2tY=)
                          2: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=)
                          3: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=)
                          4: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl
                          rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3
        Validity
            Not Before: Sep 27 04:24:11 2026 GMT
            Not After : Oct  4 04:24:11 2026 GMT
        Subject: CN=6ab89a6b-1246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:8a:28:cf:52:c3:77:63:55:4f:13:67:d3:
                    14:5b:52:b1:65:e2:b2:66:75:f6:52:e3:4c:66:1b:
                    96:96:52:b4:f0:c3:3e:95:d9:49:17:6b:8b:68:45:
                    d2:ec:43:42:3f:c8:16:9a:61:de:be:8a:df:ea:0b:
                    8f:8a:59:9e:52:70:2a:33:aa:43:66:8d:b4:2f:67:
                    47:a3:d3:8b:38:60:53:a1:6f:59:2f:25:57:4b:87:
                    2d:ae:aa:ff:05:b3:19:c1:5b:fa:34:40:81:71:16:
                    61:5a:66:2c:a0:29:c3:5c:82:a7:23:29:61:5c:4f:
                    b9:cf:e1:4b:b0:79:24:47:59:a9:8a:52:4a:80:61:
                    8e:5f:c4:13:94:03:28:dd:52:5d:3a:c8:dd:ab:c1:
                    0a:97:7a:58:84:01:1d:ff:dd:6b:97:83:ca:1f:c8:
                    47:0b:dd:b3:68:41:e0:99:fb:b6:79:af:33:b5:ee:
                    a6:33:b2:87:6e:af:31:06:80:c8:42:ad:b1:fd:29:
                    37:37:9b:df:63:73:e8:60:b9:93:b7:a8:e4:23:26:
                    c4:be:ba:12:99:ab:c9:b8:b2:a7:6b:a7:73:ce:2a:
                    70:3f:db:6c:78:06:ec:11:09:c7:30:39:c9:ca:58:
                    43:9c:3d:5f:a8:c7:3b:2b:48:5b:42:a2:b5:7a:6b:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:F8:66:82:D2:2C:E9:CC:0A:0A:51:D5:10:C8:06:43:F3:95:E7
            X509v3 Authority Key Identifier:
                keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:0b:1a:5a:89:56:56:2e:bc:75:a4:67:f1:db:61:c5:ec:
         35:ae:9f:52:21:c1:d9:76:34:b4:a1:23:d3:c0:b3:93:cd:34:
         3a:99:8a:49:b5:0c:3c:a3:4b:12:26:a2:44:5b:58:96:df:b2:
         0e:13:ef:66:c9:1e:a4:5f:b8:a2:26:45:26:e5:e9:9e:4f:9a:
         67:27:7a:32:dd:1c:10:d3:fa:cd:1d:e9:7f:68:e3:a4:a0:90:
         da:64:c0:de:9d:58:0c:3d:38:d4:c4:54:d3:5b:90:16:d8:74:
         4a:a0:45:b8:66:09:4c:5c:2f:e4:9a:50:3d:50:c0:47:bc:c6:
         1b:fa:51:81:ec:a4:70:9d:54:c4:3c:13:ad:4b:c9:f8:33:94:
         3d:e5:51:b5:33:e1:66:7f:ec:fd:bb:4f:c8:1e:84:8a:bc:6f:
         b0:76:f1:c2:5f:a1:79:d7:88:ac:f5:69:24:50:9b:c5:80:88:
         12:5f:2f:0b:64:45:bd:d3:7e:c2:6a:fd:8a:19:29:a6:fc:be:
         e2:21:fb:74:fa:fc:e0:51:47:61:b8:ed:bc:f0:37:86:a0:b2:
         44:e5:fe:51:99:50:03:be:5b:3b:e4:e6:fb:3e:59:71:8b:15:
         d7:99:5d:45:64:0a:59:e1:07:d4:f3:81:df:40:14:33:ad:1c:
         a8:6a:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:23:12 2026 by rpki-client