Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          07ZlI0341WXopw1CaTW1BD5MphUjm21SF6A3OUUPx7k=
Subject key identifier:   63:AB:7A:DE:FE:18:D8:02:E6:5A:B3:64:82:9B:32:AC:B2:C1:33:B2
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0B6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0B4F
Signing time:             Sun 04 Oct 2026 19:18:24 +0000
Manifest this update:     Sun 04 Oct 2026 19:18:23 +0000
Manifest next update:     Sun 11 Oct 2026 19:18:23 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: RLfo76S9BwIQZJE5v/99ir8Hd7XHCdXDDbyr34Rew3w=)
                          2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: sINMj23Mnz79lCdA9OJZlqI7V5V8Fa2R7qiAutiBw64=)
                          3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1r78Cw9IeJC6CpYd3j+dPo0qxllZkMG1MVsCtdbq0zU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 19:18:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2923 (0xb6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Oct  4 19:18:23 2026 GMT
            Not After : Oct 11 19:18:23 2026 GMT
        Subject: CN=6ac2a680-4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:4c:d8:73:24:71:78:70:d1:57:5e:10:11:
                    9f:7f:9d:ac:b7:cd:24:f3:9a:5e:69:cd:b9:95:33:
                    c0:1e:e5:8e:d9:9c:fc:8f:52:e2:fb:6a:3a:cc:2c:
                    12:3e:d2:f6:5a:bb:2d:bf:f7:d6:b8:c2:53:45:48:
                    a7:3c:be:30:60:09:c0:30:a2:8d:18:7d:f8:05:44:
                    37:87:15:8c:80:0e:cf:f7:92:07:81:59:32:92:9d:
                    93:d8:18:d7:00:06:06:d3:7c:32:77:93:d9:a2:e2:
                    02:a7:12:3f:a3:64:e8:69:e5:cb:3b:aa:51:32:43:
                    82:37:fe:cf:f3:89:b9:c9:c3:7d:16:0c:56:e4:c7:
                    6a:31:88:96:d1:be:b9:8a:4d:7d:39:2e:88:3c:ba:
                    3b:52:9b:55:88:fc:50:1d:84:86:ac:e5:1a:25:d9:
                    4f:0b:29:a2:62:1a:50:76:80:62:13:6b:67:37:d3:
                    90:13:9a:0c:a9:0d:1a:2a:0d:ad:b0:82:e0:fa:56:
                    e6:91:45:be:cc:40:c6:16:9c:3e:6f:da:8d:77:59:
                    41:f4:e5:0d:d6:51:83:f5:d8:6c:b0:11:0a:89:59:
                    c2:f2:11:16:19:a4:1f:6e:5c:37:d5:56:be:3c:ae:
                    26:c7:02:fd:39:94:ec:4e:bf:41:bd:90:6e:c3:6c:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:7A:DE:FE:18:D8:02:E6:5A:B3:64:82:9B:32:AC:B2:C1:33:B2
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:b6:1a:5c:41:0b:6b:ee:22:5e:8b:45:26:1b:99:2f:b0:
         bf:b7:94:8e:b0:8a:ba:92:37:d7:bf:6b:c3:9e:75:13:fe:8f:
         84:ab:9c:40:80:d3:d9:37:39:f2:d9:aa:8f:2c:df:af:0d:6e:
         98:eb:0b:fb:0e:d1:d2:d5:2d:53:f3:11:b4:ad:50:6d:53:1f:
         a8:5e:28:66:bc:a7:d0:a7:3b:a5:d2:be:70:3c:25:77:ce:78:
         90:24:df:ed:7b:cf:05:46:e0:76:28:5b:d3:11:85:4e:a7:13:
         8a:21:fa:2e:00:f9:c3:70:99:4b:9b:4c:23:67:e6:65:58:5f:
         33:51:46:3b:ba:91:82:ef:42:8c:fe:ad:df:fd:45:45:08:71:
         57:4a:b4:71:12:a3:02:03:f2:1a:0c:fc:08:65:11:aa:0b:68:
         bd:b3:09:35:2d:c3:e3:18:84:d9:9e:6e:d5:14:37:70:9e:0c:
         28:35:e4:30:be:33:35:1b:5e:03:8c:b3:61:48:4d:c6:46:b2:
         84:d4:e3:86:00:0a:0e:68:a3:a0:a0:56:4b:eb:70:23:d8:ca:
         58:b1:8a:90:ba:5b:ef:50:59:37:58:d7:8b:eb:18:b7:25:e1:
         10:35:84:d7:d3:ec:d4:5f:a6:29:05:b8:4d:80:60:a2:3b:3b:
         c8:05:ca:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:19:25 2026 by rpki-client