Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
File:                     fHyggZUNrvx8VLjERpi0jo18abg.mft (raw, json)
Hash identifier:          a8ntUL5NjlJpaP9QjrGuOjTuR1Xkuwc128+tJxFZ4hU=
Subject key identifier:   48:90:AD:8E:BC:33:E3:A9:B3:0A:73:81:16:6E:88:70:70:8B:A7:4D
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Certificate issuer:       /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial:       11A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
Manifest number:          117A
Signing time:             Sat 24 Oct 2026 17:12:41 +0000
Manifest this update:     Sat 24 Oct 2026 17:12:40 +0000
Manifest next update:     Sat 31 Oct 2026 17:12:40 +0000
Files and hashes:         1: fHyggZUNrvx8VLjERpi0jo18abg.crl (hash: cWyIjC4AiouEwZ3PHA2fjGS60ClvSv5AjnkLkcPeb64=)
                          2: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (hash: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=)
                          3: 658A332E5C0311E999AF9478C4F9AE02.roa (hash: BZB39lC5xOkcP/b7gbdWDXa93HHDVKpHwXaLJhvFunQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 17:12:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4520 (0x11a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
        Validity
            Not Before: Oct 24 17:12:40 2026 GMT
            Not After : Oct 31 17:12:40 2026 GMT
        Subject: CN=6adce708-921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:3c:3d:95:a5:c9:20:78:dc:63:13:fc:6a:
                    f2:0b:41:40:6c:28:0f:52:9e:77:d9:44:cf:14:c0:
                    13:05:44:dd:40:04:83:9d:19:aa:c4:96:ca:70:55:
                    ec:c9:63:5c:fc:a8:bb:a6:e7:bc:5d:3e:3e:ba:0c:
                    3f:14:38:5a:03:2f:2f:99:f4:5b:31:3d:fe:1a:d7:
                    0f:ae:3b:9a:12:09:9c:ac:45:dc:14:d9:af:48:5f:
                    f5:14:2e:5d:93:b3:26:1c:73:1c:2d:a0:cb:76:44:
                    12:35:29:61:5b:87:8d:dd:f5:26:d4:80:f8:c7:de:
                    cd:4b:2e:23:bd:50:89:3c:4f:07:f2:34:1d:0c:f7:
                    ce:17:45:9a:3e:0f:c5:1c:a4:89:81:f8:de:d2:17:
                    71:d0:6d:5f:5b:7b:60:1e:49:ab:25:4e:4c:45:88:
                    ea:cf:18:92:96:47:12:44:96:bc:a9:9a:a7:3e:3f:
                    51:18:ce:82:51:6f:b0:01:7c:00:11:98:68:c6:ab:
                    fc:7f:b3:14:d9:4e:fe:37:48:d8:15:9c:7b:9c:ec:
                    43:4f:74:bf:4d:09:25:29:14:0e:85:7e:a3:d8:6a:
                    ed:93:40:fb:fc:f9:0c:e7:1b:00:01:48:b5:37:13:
                    24:3f:86:4e:d8:91:0e:ca:ee:58:99:64:69:8b:db:
                    35:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:90:AD:8E:BC:33:E3:A9:B3:0A:73:81:16:6E:88:70:70:8B:A7:4D
            X509v3 Authority Key Identifier:
                keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:06:9f:9f:f9:23:ad:bf:31:68:33:c8:8e:d2:bb:5c:9e:0e:
         a3:67:12:47:75:a9:0b:79:53:4d:51:f2:f8:f9:42:6f:2a:f7:
         dc:1c:20:ef:24:0f:be:ef:77:43:6a:56:40:a7:06:7b:f7:84:
         9c:65:b0:a7:0e:1e:b5:af:60:37:bb:61:b5:3f:05:c1:1f:cb:
         35:c4:e8:86:d9:fb:4c:b9:5e:d2:23:11:a2:d3:38:ac:67:a3:
         f7:3c:2d:bc:e1:2f:06:d6:96:5e:52:27:c8:68:96:54:e3:f0:
         70:70:68:25:7d:9c:eb:2f:c6:b6:2c:2b:b2:df:c7:89:c3:4f:
         6a:de:ef:bc:d6:80:c0:93:2e:fc:fc:a3:1e:bb:93:12:b7:5a:
         8b:b2:1b:d7:0b:33:85:d9:3c:76:15:51:f4:9e:2b:26:d8:db:
         58:aa:4f:cd:bc:fd:fe:a9:d7:c5:63:53:fc:74:d2:a2:70:e4:
         99:65:c9:ec:a9:da:6d:03:51:96:21:9c:7a:31:b6:11:ef:b0:
         60:06:ef:91:94:2f:38:4f:0a:22:9a:fc:3c:10:94:b8:3d:07:
         1b:12:ea:68:95:85:dd:85:55:86:58:36:38:09:36:6e:38:87:
         b9:d5:15:ec:4e:66:56:bf:77:22:d7:82:2a:cd:ea:ae:6d:b2:
         be:ed:86:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:22:12 2026 by rpki-client