Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
File:                     SHy2MxcaDd84rLtq0e2K5pZVhgo.mft (raw, json)
Hash identifier:          +hnUlGhy43bgbTrND41j5Mlx15+p6fazDlSWJFCcpNo=
Subject key identifier:   F0:1C:48:E8:3D:25:75:EC:59:9D:3B:CC:48:15:FD:01:AF:8B:24:19
Authority key identifier: 48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A
Certificate issuer:       /CN=A916899E/serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
Manifest number:          029A
Signing time:             Fri 09 Oct 2026 02:08:44 +0000
Manifest this update:     Fri 09 Oct 2026 02:08:44 +0000
Manifest next update:     Fri 16 Oct 2026 02:08:44 +0000
Files and hashes:         1: SHy2MxcaDd84rLtq0e2K5pZVhgo.crl (hash: pTt/B/4/YPrk26W0MqorX7GunaaJ49N7pQ6vxfVw5aY=)
                          2: 96540A72CD0E11ED9A9CAE58C4F9AE02.roa (hash: VUhX4V+uuAXCvJJx8gbFvjg2DTFUtnIh9VNRCqvzwQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl
                          rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 02:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916899E, serialNumber=487CB633171A0DDF38ACBB6AD1ED8AE69655860A
        Validity
            Not Before: Oct  9 02:08:44 2026 GMT
            Not After : Oct 16 02:08:44 2026 GMT
        Subject: CN=6ac84cac-d183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:cb:20:3b:99:62:44:a1:a0:c5:b0:12:eb:
                    47:f4:64:a5:58:d8:56:ae:9e:75:d9:e9:0e:aa:77:
                    86:8e:be:0a:b4:17:db:e7:ca:3f:15:d5:98:5c:45:
                    71:54:c0:08:69:36:16:27:36:d2:65:0e:d4:63:4b:
                    d2:4b:54:8c:df:c8:55:60:74:24:1a:a7:0d:ab:27:
                    a8:d5:cf:3d:30:a2:a1:f8:66:77:28:50:c3:fc:57:
                    10:2c:2a:f5:04:28:88:73:54:5c:d0:ab:04:11:c8:
                    ce:da:2e:e8:70:3f:dc:08:33:b6:64:43:2d:6e:7f:
                    49:34:26:d2:c7:05:79:e8:73:04:45:a3:26:b2:3d:
                    7b:75:d5:a6:ae:86:fd:f4:28:05:d1:f2:b8:79:61:
                    aa:c6:c6:98:fe:cd:89:8d:b0:b3:e8:13:d4:3d:ef:
                    b6:83:46:2a:7f:b2:68:12:24:90:36:bf:be:29:ab:
                    57:a0:67:1c:3d:8c:65:e8:da:22:d1:b2:58:82:d9:
                    75:1a:43:13:c0:9a:8e:b8:e1:af:83:9c:39:87:e5:
                    20:a5:74:91:e5:25:64:ff:df:25:fc:86:c6:62:4d:
                    a9:aa:10:5e:aa:a8:f2:e3:c3:df:44:a0:27:a0:06:
                    02:9b:48:d1:4e:60:0e:dd:d7:be:f3:11:30:d1:70:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:48:E8:3D:25:75:EC:59:9D:3B:CC:48:15:FD:01:AF:8B:24:19
            X509v3 Authority Key Identifier:
                keyid:48:7C:B6:33:17:1A:0D:DF:38:AC:BB:6A:D1:ED:8A:E6:96:55:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SHy2MxcaDd84rLtq0e2K5pZVhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916899E/6C135434C9F311EDA5849269C4F9AE02/SHy2MxcaDd84rLtq0e2K5pZVhgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:ba:7c:17:7c:ff:4c:a7:df:4e:aa:20:49:6a:2b:e4:fb:
         a1:47:2b:a3:08:c3:77:a7:e3:34:6b:ef:92:33:a8:ed:73:73:
         58:f1:79:19:a4:ac:ad:cf:6a:e7:82:ce:8d:39:15:eb:6f:91:
         48:dc:a9:10:bc:6e:6d:1e:04:19:34:ac:c0:87:a0:34:5d:f0:
         22:f1:01:c7:18:6e:49:0d:9b:d2:df:3e:11:c8:19:7b:7e:6d:
         7d:c0:8f:6f:ac:21:03:bf:83:bd:b4:8f:ad:40:51:bf:c1:42:
         8f:96:aa:6f:03:78:59:fb:db:4e:76:d7:09:48:63:6c:2a:a5:
         a2:91:5f:f0:e3:1e:23:7b:d0:3f:83:be:54:0f:da:85:65:81:
         5e:c1:6f:e0:24:a3:3d:d2:17:1b:87:da:bc:71:2b:82:41:65:
         d3:59:4e:e7:fd:39:76:cb:a8:28:45:05:41:b8:cd:06:f0:46:
         67:3e:5b:76:93:64:50:e8:cb:6d:26:b6:a5:64:a5:24:35:73:
         6a:df:cf:54:e3:83:c5:80:41:0c:19:bf:0d:e6:86:c5:96:a4:
         61:93:f5:47:f7:60:77:02:0f:e1:55:ed:40:b5:b3:d1:fe:d5:
         b2:49:0f:10:65:36:13:c7:e6:62:b9:ee:d4:b6:11:c3:21:eb:
         bf:cb:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:38:06 2026 by rpki-client