Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
File:                     mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft (raw, json)
Hash identifier:          fYlugcv0uVWh1wNdTyN6qmEV/+sXSW0LrwW6UyUScO8=
Subject key identifier:   D9:2B:9D:E6:CB:93:8A:53:2B:D0:73:F0:FB:11:98:60:61:91:67:11
Authority key identifier: 99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9
Certificate issuer:       /CN=A914B1DB/serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
Manifest number:          019E
Signing time:             Sat 03 Oct 2026 04:51:10 +0000
Manifest this update:     Sat 03 Oct 2026 04:51:09 +0000
Manifest next update:     Sat 10 Oct 2026 04:51:09 +0000
Files and hashes:         1: mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl (hash: y7HSn+gbD1sFfyCo++b/DeiJ55E9tQXpL90aJ14EYWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl
                          rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 04:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B1DB, serialNumber=99C106E87FE1D6411AEC71F80394622C881AAAD9
        Validity
            Not Before: Oct  3 04:51:09 2026 GMT
            Not After : Oct 10 04:51:09 2026 GMT
        Subject: CN=6ac089bd-a77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:70:c6:c5:6c:10:6f:c4:a9:0e:e0:a9:60:56:
                    de:72:09:9c:67:06:54:26:6e:92:4b:13:95:97:2c:
                    ea:df:8b:8e:c4:2f:8d:27:d9:33:61:d5:b5:6a:7f:
                    c8:a4:e3:23:c9:63:7e:27:74:60:59:b1:e7:bb:91:
                    37:53:d8:23:69:fd:2f:37:60:c5:9a:8b:5c:9c:f8:
                    d1:47:7e:8d:1e:08:f1:9e:47:84:a3:7b:d8:f1:f2:
                    ff:f3:6e:d1:36:c5:fe:eb:2b:90:cc:32:ac:41:50:
                    62:79:c3:80:22:00:6c:9b:ee:38:9c:36:9b:26:32:
                    56:dc:98:47:cc:92:2d:e5:c6:a1:de:aa:a1:47:fc:
                    0b:a2:d6:c6:9e:d1:26:c3:8a:0f:bd:cc:f3:33:e7:
                    7d:58:01:20:15:25:78:0e:62:d7:bc:c7:c6:05:93:
                    9d:a8:6d:da:b7:80:7f:ff:69:51:29:c5:20:22:6c:
                    64:51:9e:9c:c8:19:67:03:5d:a8:d0:09:9b:4e:28:
                    f1:c1:13:9e:04:de:dd:11:7f:a3:44:53:6b:b4:fb:
                    37:98:f8:bf:3f:b8:87:14:e4:cd:ed:97:e5:7f:86:
                    2e:d4:62:7e:4d:81:58:e6:ad:77:37:a2:0f:84:32:
                    5c:d3:45:1b:f3:38:a7:ec:49:72:8b:19:68:23:28:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2B:9D:E6:CB:93:8A:53:2B:D0:73:F0:FB:11:98:60:61:91:67:11
            X509v3 Authority Key Identifier:
                keyid:99:C1:06:E8:7F:E1:D6:41:1A:EC:71:F8:03:94:62:2C:88:1A:AA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mcEG6H_h1kEa7HH4A5RiLIgaqtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/365140EE431011EF868B2B81C4F9AE02/mcEG6H_h1kEa7HH4A5RiLIgaqtk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:79:bf:41:98:09:f9:0d:41:38:1c:da:2f:dd:e4:a6:f5:
         51:71:f2:81:e3:62:5a:7a:57:52:48:8e:4e:ad:d2:24:76:6d:
         0e:b5:97:21:0a:cb:81:05:d5:1a:a0:38:ae:15:d7:8f:19:f4:
         42:14:05:eb:35:42:87:31:fa:fc:50:64:a6:d7:fd:8a:1e:94:
         4c:01:76:26:dd:61:8a:48:3a:22:62:f0:f7:df:2c:e7:df:bb:
         21:e6:ae:cf:85:bd:05:42:44:ee:b7:13:c2:f7:70:8e:fb:be:
         2a:63:5e:cf:9c:92:e8:f9:0e:24:e5:be:7c:68:d1:8c:9f:c5:
         72:98:90:6a:9c:4c:52:bf:60:a1:83:f7:59:eb:c9:b3:8d:a7:
         a8:91:76:ef:f1:4c:0d:03:26:0e:d2:90:a1:39:a1:6f:ea:e6:
         48:97:c6:e8:29:35:af:25:63:ba:d0:4d:c3:ca:ce:f0:29:43:
         d8:49:f1:0c:d8:75:79:73:eb:a0:c2:a0:f7:cf:2a:4c:3c:e4:
         b7:53:29:26:76:ff:f6:e2:50:0e:6a:44:65:df:e6:7e:d5:3f:
         b8:54:6f:c6:27:c8:f5:8c:52:82:18:f4:07:79:fb:e8:bd:29:
         c4:d6:70:7b:9a:da:28:9c:29:25:bf:26:ed:92:db:a1:b3:5c:
         b5:e9:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:53 2026 by rpki-client