Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
File:                     HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json)
Hash identifier:          Cj+xAomlQ0dFqmI2rQfJgVPKdU4m4jFX7rudmxkFqz8=
Subject key identifier:   B7:07:3F:34:99:96:D1:EC:31:F7:50:21:B5:82:71:D4:D4:C3:BA:9E
Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C
Certificate issuer:       /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
Certificate serial:       02C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
Manifest number:          02BD
Signing time:             Sat 03 Oct 2026 01:57:31 +0000
Manifest this update:     Sat 03 Oct 2026 01:57:30 +0000
Manifest next update:     Sat 10 Oct 2026 01:57:30 +0000
Files and hashes:         1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: J8YrfLR0t32rc4HuAIT+MuarQFIlQH3TCQHc26JtshU=)
                          2: 4Nm4cUgaAqJbFSvTnbxQNF9jQzE.asa (hash: Xs+VY24SytYmkpk3hC7Bpp3vyNK1OEYGmwv/Xfm0vyw=)
                          3: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: KTnG5DXA4ykdIF+F6HQFhuSS9PnoKt4qehFaA66nt4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl
                          rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 01:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C
        Validity
            Not Before: Oct  3 01:57:30 2026 GMT
            Not After : Oct 10 01:57:30 2026 GMT
        Subject: CN=6ac0610b-647c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:65:dd:2d:4d:d6:61:e8:16:93:40:3a:d0:
                    72:6f:f5:a1:d9:5e:a6:17:78:69:3b:ee:08:32:d9:
                    43:f5:ff:8f:93:59:09:47:cb:06:9a:76:af:c6:16:
                    e6:a2:7c:6c:dd:cf:f4:12:35:6f:74:95:08:a9:76:
                    9c:c9:40:34:42:5b:9d:e4:fe:38:74:9c:69:cb:f0:
                    ab:a4:54:21:86:cc:5c:3b:b2:84:aa:c4:7a:20:e7:
                    a6:16:16:0a:6b:8f:77:e3:ff:0d:90:ad:75:a0:98:
                    75:4d:4e:20:c1:59:77:4b:dc:5b:3c:2b:28:cc:7a:
                    1b:2a:f3:f9:7d:d6:0a:19:15:6e:56:23:bb:48:e4:
                    9a:cb:18:ca:61:72:1b:c8:20:14:5e:78:86:d7:a9:
                    a1:06:30:d4:40:8e:86:f3:35:b4:95:3b:3f:25:36:
                    e5:17:66:b6:92:e5:53:27:02:0e:11:b2:3f:a3:3e:
                    9a:57:03:55:c6:83:27:3e:ab:41:e8:79:bf:11:0e:
                    11:fa:d9:e7:aa:65:92:10:1e:25:c8:10:fb:54:d0:
                    15:fe:65:13:26:7e:70:a7:3d:e8:29:3c:e8:31:7f:
                    f2:fc:63:23:d7:2b:d9:87:9c:4e:ac:50:9d:d8:da:
                    90:3e:09:d3:ff:6c:35:ac:b5:04:93:47:23:1c:c6:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:07:3F:34:99:96:D1:EC:31:F7:50:21:B5:82:71:D4:D4:C3:BA:9E
            X509v3 Authority Key Identifier:
                keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:d4:02:5e:68:05:82:ff:4a:e6:75:7f:15:92:a4:b6:e8:74:
         09:b3:fd:e1:10:bc:98:03:5e:7b:9f:44:59:ea:34:eb:30:d1:
         20:ec:4e:9a:68:7d:6b:9f:d7:a2:3a:27:24:83:55:f7:41:07:
         cb:1f:1c:3b:2c:64:d6:5d:5a:f1:aa:ad:77:81:93:03:52:15:
         19:f7:49:6c:4c:2e:36:31:d0:a5:42:8d:cd:ba:a2:9e:b5:40:
         a5:bd:f5:69:13:87:82:17:19:fb:9b:c4:ab:7f:da:b9:af:3d:
         27:ae:a5:66:98:9a:e2:42:1d:31:9a:b5:2e:60:de:37:2b:b7:
         73:7b:73:b1:83:c8:12:b7:99:7d:14:68:27:28:12:d6:25:ae:
         03:c4:8a:c9:50:9a:28:87:8b:29:b1:b8:31:5b:0b:91:24:76:
         9c:4f:4a:d4:cb:94:98:ab:6f:84:dd:b3:f8:a5:e8:1b:9d:12:
         1a:99:57:96:71:6d:1a:3a:70:2f:20:65:d3:25:e0:56:d3:77:
         d4:14:59:64:a4:ce:20:92:6c:70:13:77:98:22:bd:b1:c3:aa:
         84:8f:03:1e:7f:98:2f:0d:c6:e2:df:e9:06:c8:ef:59:66:79:
         b9:b6:ae:ce:88:a3:11:97:2d:2d:fc:83:1d:d9:bc:d7:8d:cf:
         3d:39:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:02:10 2026 by rpki-client