Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
File:                     119NVHZK705TBIfeterZIyLy4As.mft (raw, json)
Hash identifier:          BcT7SxaaL8H6gzVzzzMEJy+YNitbxwgvTGTAik8Izj8=
Subject key identifier:   F4:D5:FA:B9:17:E5:73:A7:71:BF:F9:CE:AD:3F:77:87:76:31:07:DE
Authority key identifier: D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B
Certificate issuer:       /CN=A9162B98/serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
Certificate serial:       A1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
Manifest number:          9F
Signing time:             Mon 19 Oct 2026 08:03:05 +0000
Manifest this update:     Mon 19 Oct 2026 08:03:04 +0000
Manifest next update:     Mon 26 Oct 2026 08:03:04 +0000
Files and hashes:         1: 119NVHZK705TBIfeterZIyLy4As.crl (hash: wsCXvbnBOQEpNOSMpCXqGZ4w6OT4DWgHh/AWaiFCfpE=)
                          2: 6641AB54DEE111F0BF0237E8526F56BC.roa (hash: 3c720aJ/J3RclkYPzI9bzs0SKJeg4GvB6leOfaOooVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl
                          rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 08:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162B98, serialNumber=D75F4D54764AEF4E530487DEB5EAD92322F2E00B
        Validity
            Not Before: Oct 19 08:03:04 2026 GMT
            Not After : Oct 26 08:03:04 2026 GMT
        Subject: CN=6ad5ceb9-7bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:58:dc:f0:5f:10:43:9d:6f:17:53:46:1c:
                    d8:fa:87:8f:3a:ac:0d:99:af:e0:85:6c:95:d1:b6:
                    06:9a:4d:34:af:da:5a:f2:20:a2:08:47:cc:7d:79:
                    11:8b:28:fd:74:88:d0:e8:43:8b:0e:1c:87:bc:e7:
                    e8:a0:b6:52:ba:29:60:c0:2b:85:60:43:87:b7:4d:
                    6f:4c:61:52:22:a1:f3:cf:17:ca:6b:31:b0:a7:c4:
                    e9:5a:2d:12:a5:4f:57:c7:a9:02:a6:13:0a:d0:c7:
                    ce:91:ff:37:0e:59:7c:80:8a:3b:1a:99:8e:cf:8d:
                    21:d2:a8:7d:70:00:3d:8b:49:2c:11:b5:48:70:09:
                    33:02:60:94:28:10:19:6d:2c:c5:66:db:b4:ba:e5:
                    53:21:50:eb:0d:ea:2f:4e:f5:d9:d2:e1:47:78:66:
                    b1:cf:54:e9:1f:38:30:74:b4:f4:40:86:b1:10:c5:
                    2f:2e:60:8a:e4:f5:1c:a1:8e:4f:3e:c7:c2:2c:35:
                    f5:8f:4d:61:18:53:84:50:bd:a1:53:62:0f:91:d8:
                    16:a4:68:a2:ae:5a:5f:4e:6a:7d:a3:3a:dd:18:2f:
                    98:9d:8e:16:72:57:10:0e:ff:fe:70:00:fd:3f:cc:
                    99:ae:23:eb:20:49:dc:f8:16:9c:e6:3d:2d:bc:9f:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D5:FA:B9:17:E5:73:A7:71:BF:F9:CE:AD:3F:77:87:76:31:07:DE
            X509v3 Authority Key Identifier:
                keyid:D7:5F:4D:54:76:4A:EF:4E:53:04:87:DE:B5:EA:D9:23:22:F2:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/119NVHZK705TBIfeterZIyLy4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162B98/1A7984D0DC9311F0995D84D93F6F56BC/119NVHZK705TBIfeterZIyLy4As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:27:61:3c:0d:62:d5:37:82:70:dd:01:ec:c4:8a:24:3f:
         77:dd:13:10:f4:94:8d:4b:d4:9f:50:16:14:02:58:74:67:75:
         9e:5c:e2:ee:1c:5d:0c:08:3e:93:53:88:0d:e6:9e:54:2d:05:
         92:cf:64:7a:9b:01:bf:89:ac:3c:d8:fd:c8:eb:8b:6a:e4:c5:
         0b:bc:69:13:0e:a7:64:3c:95:77:46:0f:57:b1:5d:55:d8:b5:
         0a:4f:da:df:03:38:be:f5:10:b2:b0:86:28:25:5a:22:ab:73:
         99:d2:c8:0a:cc:c0:85:ff:5d:0d:22:ab:cc:93:34:d6:87:19:
         11:a5:ea:55:3e:b8:31:77:2c:81:55:5e:5c:4f:6b:01:72:fc:
         61:73:ee:e1:90:92:5e:7d:67:5b:87:bd:99:79:f1:59:77:b7:
         b7:38:80:75:6d:25:d1:93:1a:24:c4:44:20:ba:e7:d8:1a:cd:
         ae:c8:38:22:f8:a5:d0:5f:a3:04:68:06:33:e3:87:63:e7:91:
         22:2a:4f:ac:ab:35:fa:23:03:38:05:0e:6b:63:89:60:fc:c8:
         ae:1f:23:41:f4:b3:09:86:24:11:5e:09:7c:16:ed:1b:e6:8a:
         9b:82:e6:26:c8:64:7e:b2:ef:a4:e3:2d:eb:62:7a:a9:ab:ce:
         88:02:03:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:04:48 2026 by rpki-client