Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
File:                     MHhieRqQd5CGxXf5OTGDidaLcag.mft (raw, json)
Hash identifier:          hriUPI8Sgo2OMOaSmgQcwT5Re+lR4+RsEXkzM4pHfWY=
Subject key identifier:   44:6A:1E:BF:0A:8F:FD:19:26:6F:A1:A1:ED:B3:E7:A4:77:D6:02:18
Authority key identifier: 30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8
Certificate issuer:       /CN=A912DC94/serialNumber=307862791A90779086C577F939318389D68B71A8
Certificate serial:       3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
Manifest number:          3B
Signing time:             Mon 05 Oct 2026 09:03:08 +0000
Manifest this update:     Mon 05 Oct 2026 09:03:07 +0000
Manifest next update:     Mon 12 Oct 2026 09:03:07 +0000
Files and hashes:         1: MHhieRqQd5CGxXf5OTGDidaLcag.crl (hash: +bqj0/LQLpYRgXCNjJUCkwhTGfQbseiNx0xD3QOUZSs=)
                          2: 4F16B51A6AB811F18EBFB70E6347A888.roa (hash: LiHm9eQxrU9GoUOxKX4spMHoNTas521hkzSooCizj3Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl
                          rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DC94, serialNumber=307862791A90779086C577F939318389D68B71A8
        Validity
            Not Before: Oct  5 09:03:07 2026 GMT
            Not After : Oct 12 09:03:07 2026 GMT
        Subject: CN=6ac367cc-fe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:9d:97:d2:96:3f:9a:74:ee:a9:93:a4:65:
                    ce:da:f5:6a:33:07:26:e1:41:34:b7:cd:a0:b6:5c:
                    e9:9a:b9:bc:66:49:5e:1e:4a:bc:26:aa:8c:54:a2:
                    bd:7c:34:91:dd:15:ec:f9:5e:8a:68:55:25:fd:05:
                    58:b7:93:86:6f:2c:2f:11:a1:99:86:b2:93:3b:02:
                    aa:3a:d6:e1:f2:c5:30:23:7b:2f:29:72:74:d3:f3:
                    d2:ec:70:59:29:80:18:d8:2b:10:16:43:6f:25:42:
                    04:fd:c4:59:ef:20:00:54:a9:9d:26:c4:cd:34:31:
                    00:08:9e:7f:90:88:c2:74:20:41:76:55:cb:e5:fa:
                    8a:bc:19:00:64:1e:b8:58:55:e9:71:72:ce:e9:39:
                    25:e7:ce:c7:95:c3:08:fb:60:49:e5:a3:96:ee:b6:
                    8f:a5:ec:74:3f:67:0d:29:fe:a7:30:4c:ca:40:50:
                    f2:be:b6:c1:eb:2d:3d:66:7f:05:76:9e:ba:af:f0:
                    72:52:3e:ed:cd:93:94:0c:ff:96:c9:1b:36:f5:a8:
                    67:ec:29:a2:79:14:b9:53:5f:d4:95:fa:de:0f:3c:
                    7b:06:48:2a:d1:a7:ec:70:cd:88:3c:8e:dd:82:ad:
                    22:a0:9a:3a:b5:2f:f1:a9:b4:1f:cc:7a:a2:c5:f0:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6A:1E:BF:0A:8F:FD:19:26:6F:A1:A1:ED:B3:E7:A4:77:D6:02:18
            X509v3 Authority Key Identifier:
                keyid:30:78:62:79:1A:90:77:90:86:C5:77:F9:39:31:83:89:D6:8B:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MHhieRqQd5CGxXf5OTGDidaLcag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC94/9C5C8E2C6AB711F188E872EF6247A888/MHhieRqQd5CGxXf5OTGDidaLcag.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:b1:38:85:d9:92:87:e5:b8:ff:e0:c6:15:0a:1b:56:47:
         66:22:4b:37:38:06:36:23:e1:eb:89:dd:b6:49:bd:5a:d8:c8:
         c0:c9:fd:ed:33:11:95:fe:95:66:cd:c3:f0:8a:5e:e2:f5:44:
         2a:f5:f5:bc:2e:f5:67:ef:d0:e5:8a:4e:65:4f:49:89:4f:43:
         93:3e:ba:34:31:0e:c3:29:2d:9a:48:35:17:de:0f:a4:4b:ab:
         4d:d7:18:c7:cd:92:6b:9e:d6:38:1d:3d:9e:6b:d4:95:fe:c7:
         2f:03:67:fd:35:74:d3:91:a2:41:55:c9:51:12:25:cc:13:cf:
         e2:cf:d2:10:07:55:c7:d7:45:c0:56:dd:96:41:7b:8c:9e:99:
         c5:78:73:4a:25:ba:19:a3:e1:fa:7c:87:72:bd:03:fb:a7:6b:
         5e:43:5c:9f:85:16:a7:bc:23:03:32:d4:39:2e:39:76:b7:f7:
         a1:59:2e:35:2d:21:50:c6:1e:38:dc:0c:f0:26:4d:ca:8f:6a:
         52:c8:c8:9c:54:e4:cf:7f:53:a8:0f:4a:16:72:7a:52:c3:0c:
         4f:09:74:b5:a0:58:4e:67:1f:81:0e:ea:25:d5:79:fc:aa:cf:
         f5:e8:a9:f5:c2:5f:db:71:76:54:c8:b1:5e:85:a9:dc:8e:99:
         38:6b:0d:dd
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
REM5NDExMC8GA1UEBRMoMzA3ODYyNzkxQTkwNzc5MDg2QzU3N0Y5MzkzMTgzODlE
NjhCNzFBODAeFw0yNjEwMDUwOTAzMDdaFw0yNjEwMTIwOTAzMDdaMBgxFjAUBgNV
BAMTDTZhYzM2N2NjLWZlOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCb3p2X0pY/mnTuqZOkZc7a9WozBybhQTS3zaC2XOmaubxmSV4eSrwmqoxUor18
NJHdFez5XopoVSX9BVi3k4ZvLC8RoZmGspM7Aqo61uHyxTAjey8pcnTT89LscFkp
gBjYKxAWQ28lQgT9xFnvIABUqZ0mxM00MQAInn+QiMJ0IEF2Vcvl+oq8GQBkHrhY
Velxcs7pOSXnzseVwwj7YEnlo5buto+l7HQ/Zw0p/qcwTMpAUPK+tsHrLT1mfwV2
nrqv8HJSPu3Nk5QM/5bJGzb1qGfsKaJ5FLlTX9SV+t4PPHsGSCrRp+xwzYg8jt2C
rSKgmjq1L/GptB/MeqLF8Dd9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURGoevwqP
/Rkmb6Gh7bPnpHfWAhgwHwYDVR0jBBgwFoAUMHhieRqQd5CGxXf5OTGDidaLcagw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJEQzk0LzlDNUM4RTJDNkFC
NzExRjE4OEU4NzJFRjYyNDdBODg4L01IaGllUnFRZDVDR3hYZjVPVEdEaWRhTGNh
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTUhoaWVScVFkNUNHeFhmNU9UR0RpZGFMY2FnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJE
Qzk0LzlDNUM4RTJDNkFCNzExRjE4OEU4NzJFRjYyNDdBODg4L01IaGllUnFRZDVD
R3hYZjVPVEdEaWRhTGNhZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA97bE4hdmSh+W4/+DGFQobVkdmIks3OAY2I+Hrid22Sb1a2MjAyf3tMxGV/pVm
zcPwil7i9UQq9fW8LvVn79Dlik5lT0mJT0OTPro0MQ7DKS2aSDUX3g+kS6tN1xjH
zZJrntY4HT2ea9SV/scvA2f9NXTTkaJBVclREiXME8/iz9IQB1XH10XAVt2WQXuM
npnFeHNKJboZo+H6fIdyvQP7p2teQ1yfhRanvCMDMtQ5Ljl2t/ehWS41LSFQxh44
3AzwJk3Kj2pSyMicVOTPf1OoD0oWcnpSwwxPCXS1oFhOZx+BDuol1Xn8qs/16Kn1
wl/bcXZUyLFehancjpk4aw3d
-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:45 2026 by rpki-client