Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File:                     MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier:          /pyKjc+xxktrt8ZPrcnsUchL2g1EjvHpM/ogVmskkm4=
Subject key identifier:   8E:98:6D:B4:18:50:67:D0:BE:12:5F:BA:E0:9B:52:BD:98:58:AC:32
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer:       /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number:          21
Signing time:             Wed 19 Aug 2026 09:37:13 +0000
Manifest this update:     Wed 19 Aug 2026 09:37:13 +0000
Manifest next update:     Wed 26 Aug 2026 09:37:13 +0000
Files and hashes:         1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: Jwx1JD1S538+xdxvkgNAdoGcJXaUJBJQ5craY5rJyMI=)
                          2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: g04zLld4UYO3F+kCZ6KaWBxSqXKNmClRuSZYSKekq78=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
                          rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
        Validity
            Not Before: Aug 19 09:37:13 2026 GMT
            Not After : Aug 26 09:37:13 2026 GMT
        Subject: CN=6a857949-8d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:23:3f:3e:58:3e:59:ab:74:83:a8:b4:7c:
                    76:45:13:b6:c5:b6:35:0e:1d:3f:0f:ab:31:68:b3:
                    16:ea:e7:7e:80:55:8f:9d:9e:7e:58:3b:15:db:0e:
                    93:d6:20:f6:6c:13:2d:af:75:51:1b:4a:6e:7a:b5:
                    37:15:26:8a:f4:d2:b2:e6:d1:43:0b:46:5b:c6:90:
                    d3:da:25:0a:3f:8f:6c:a2:80:45:63:03:4f:31:af:
                    6a:9a:64:0e:60:df:fe:f2:4f:e9:a3:42:97:d3:9b:
                    c2:5b:4b:d7:69:47:24:6c:67:41:4e:3b:cc:88:7e:
                    58:6e:04:a1:df:08:75:eb:09:db:ff:c4:5c:07:cd:
                    e9:3f:db:32:8a:0e:b2:cb:63:30:9b:b3:60:a8:c8:
                    ee:43:ac:05:94:fb:48:6f:b4:95:88:3f:f0:41:d6:
                    34:ff:fa:5f:75:05:60:5d:ad:04:8c:1e:fb:2f:0f:
                    f6:d1:77:df:5e:d0:45:36:27:d3:92:6b:14:e3:7c:
                    ec:77:65:e6:10:e6:71:3d:c2:20:11:e5:cf:f3:74:
                    42:c0:51:40:cd:c6:f4:15:8a:2c:53:fc:cf:8d:5d:
                    b3:cf:de:cc:fb:58:bb:23:f3:bd:5c:76:23:42:f9:
                    ab:7b:89:e5:e3:49:46:e2:e0:74:45:20:4d:68:c1:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:98:6D:B4:18:50:67:D0:BE:12:5F:BA:E0:9B:52:BD:98:58:AC:32
            X509v3 Authority Key Identifier:
                keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d3:0f:24:0f:e0:3d:18:c9:60:d8:c5:bb:08:6d:8e:dc:54:
         13:be:da:76:1b:c3:25:3b:af:f2:45:9b:95:d6:4f:a8:09:7e:
         68:88:72:cc:b0:e6:4d:7a:0a:46:7c:8b:b9:52:42:4f:57:4b:
         3d:29:70:a9:2c:da:6a:72:57:b7:1f:7f:a0:a4:51:3c:c1:34:
         b3:a9:4b:81:42:07:01:76:3c:30:11:02:96:fd:6a:12:cd:49:
         88:13:69:f7:59:f4:33:35:8d:aa:9f:78:1c:9d:eb:b4:0e:dd:
         9c:ee:e1:bc:da:8f:81:28:98:be:d3:9b:52:6f:98:57:d1:d5:
         c8:80:1b:82:89:b7:29:ae:20:03:f4:40:c7:da:f8:be:f8:83:
         be:da:32:38:11:d7:61:57:a8:bd:d9:f2:bd:fb:a0:8e:d4:03:
         d1:8e:08:d1:2a:04:4f:2d:57:82:21:30:a2:4a:73:9f:3f:1b:
         91:3d:39:a7:66:0f:5a:47:5c:35:e9:d8:57:46:81:96:29:11:
         b2:58:86:e7:dc:7b:16:78:96:10:1d:13:29:19:fd:3b:48:d8:
         b6:23:21:85:55:e6:a2:83:27:b1:a6:10:9d:d0:2d:f5:af:d7:
         35:ab:33:99:f4:0c:79:92:b6:44:94:18:56:79:21:44:e1:7a:
         74:60:9e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:41 2026 by rpki-client