Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
File:                     hDGOgbLln2EUsQL6RQgzfekVw5M.mft (raw, json)
Hash identifier:          fZV91+We02afjWx3HVJnMD8Xf88LhJ8PIg7TVeH+Rc0=
Subject key identifier:   48:E8:A8:CB:FE:1F:C6:FE:5E:01:F6:E2:A0:00:03:95:EC:D8:A6:37
Authority key identifier: 84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93
Certificate issuer:       /CN=A9176632/serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
Certificate serial:       26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
Manifest number:          26
Signing time:             Fri 19 Sep 2025 08:32:55 +0000
Manifest this update:     Fri 19 Sep 2025 08:32:55 +0000
Manifest next update:     Fri 26 Sep 2025 08:32:55 +0000
Files and hashes:         1: hDGOgbLln2EUsQL6RQgzfekVw5M.crl (hash: Omd0GlRJIvuKUBUbfXXuCJOkYLeXqqhAWWJzvb7NxIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl
                          rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 07:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176632, serialNumber=84318E81B2E59F6114B102FA4508337DE915C393
        Validity
            Not Before: Sep 19 08:32:55 2025 GMT
            Not After : Sep 26 08:32:55 2025 GMT
        Subject: CN=68cd1537-a486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:42:5b:65:22:de:81:66:ff:a8:ef:62:e0:
                    a9:97:e1:1e:24:85:cf:2b:f6:aa:63:29:23:7e:c2:
                    8f:a1:ad:94:c3:c8:1b:d0:f3:be:12:66:63:9a:b2:
                    30:ef:52:af:36:00:8d:0a:44:8e:74:dc:ce:d3:06:
                    d6:f6:c8:5e:aa:f0:de:3f:23:21:bb:19:40:c0:c6:
                    4b:be:a1:5b:e1:73:14:20:65:53:1e:dd:09:fb:be:
                    3d:00:05:ed:1a:0e:5b:83:8a:72:97:bf:65:a1:2f:
                    56:1d:10:97:f2:a5:76:1e:1d:1d:44:54:be:51:9b:
                    30:db:f5:ca:fa:b4:09:e6:48:49:b6:3e:bf:7a:25:
                    00:60:99:76:48:8d:0f:53:58:70:8e:31:c1:f1:a9:
                    c7:4f:65:6d:52:e7:07:97:f7:22:85:0e:1d:3f:31:
                    dc:d6:52:20:2b:6a:42:58:cc:ad:7e:63:c3:75:91:
                    f4:f8:12:3a:a8:94:c4:68:ff:70:b9:38:35:dd:f7:
                    8f:ee:89:cc:bb:c6:41:c1:14:1b:96:d8:02:19:30:
                    9f:1a:45:73:7a:3b:89:c6:71:e9:d2:af:e4:55:d6:
                    b2:1b:6f:09:c0:07:67:d0:ee:fc:44:8e:db:8f:47:
                    6b:6a:91:8e:4a:14:13:b7:77:20:64:f7:46:3d:b5:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:A8:CB:FE:1F:C6:FE:5E:01:F6:E2:A0:00:03:95:EC:D8:A6:37
            X509v3 Authority Key Identifier:
                keyid:84:31:8E:81:B2:E5:9F:61:14:B1:02:FA:45:08:33:7D:E9:15:C3:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hDGOgbLln2EUsQL6RQgzfekVw5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176632/AB5A87065E0D11F094762F13C4F9AE02/hDGOgbLln2EUsQL6RQgzfekVw5M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:60:36:9e:41:19:07:d8:53:fa:a1:7a:bb:9a:75:de:79:84:
         a0:c7:b9:b5:b5:6e:86:31:4a:b7:66:50:b4:0c:44:57:6b:1e:
         1d:b9:fa:3b:d5:eb:fb:f1:c8:96:fe:a9:32:e7:95:31:c7:27:
         56:1f:98:04:df:ca:e6:43:65:2c:ff:9f:aa:19:0b:de:8b:d8:
         a8:4a:7e:4c:fd:03:27:6d:38:a8:ef:68:c1:08:f5:ab:ff:18:
         8a:68:9d:ef:b4:44:76:6d:82:43:94:5b:18:ac:4c:23:a5:96:
         f4:aa:08:c8:14:d7:b3:fb:d2:53:ce:a1:b7:bf:c1:b4:6e:83:
         49:7f:dd:9c:3c:b4:f0:18:99:29:2a:a8:8f:eb:82:0c:44:20:
         85:93:0d:80:ea:e4:cb:f1:0b:14:0e:84:ef:d4:ef:11:ef:7a:
         9f:5c:fb:fb:6e:7d:71:84:a3:c0:a7:78:f3:67:38:3d:ed:8c:
         a4:1b:39:1b:0e:95:a1:a6:68:b0:bd:f2:c1:d7:d5:e3:31:27:
         c7:7e:ab:4d:10:d3:46:4b:54:a7:2e:01:1e:ce:a5:77:f3:04:
         7e:bd:45:4f:f8:76:54:78:59:69:2c:72:0c:ac:1b:c7:1d:fb:
         ed:95:7d:d8:85:ae:29:c9:da:37:5a:15:1d:71:43:a1:f1:d0:
         f9:7f:83:87
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NjYzMjExMC8GA1UEBRMoODQzMThFODFCMkU1OUY2MTE0QjEwMkZBNDUwODMzN0RF
OTE1QzM5MzAeFw0yNTA5MTkwODMyNTVaFw0yNTA5MjYwODMyNTVaMBgxFjAUBgNV
BAMTDTY4Y2QxNTM3LWE0ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZCEJbZSLegWb/qO9i4KmX4R4khc8r9qpjKSN+wo+hrZTDyBvQ874SZmOasjDv
Uq82AI0KRI503M7TBtb2yF6q8N4/IyG7GUDAxku+oVvhcxQgZVMe3Qn7vj0ABe0a
DluDinKXv2WhL1YdEJfypXYeHR1EVL5RmzDb9cr6tAnmSEm2Pr96JQBgmXZIjQ9T
WHCOMcHxqcdPZW1S5weX9yKFDh0/MdzWUiArakJYzK1+Y8N1kfT4EjqolMRo/3C5
ODXd94/uicy7xkHBFBuW2AIZMJ8aRXN6O4nGcenSr+RV1rIbbwnAB2fQ7vxEjtuP
R2tqkY5KFBO3dyBk90Y9tQ7fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSOioy/4f
xv5eAfbioAADlezYpjcwHwYDVR0jBBgwFoAUhDGOgbLln2EUsQL6RQgzfekVw5Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2NjMyL0FCNUE4NzA2NUUw
RDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJFVXNRTDZSUWd6ZmVrVnc1
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaERHT2diTGxuMkVVc1FMNlJRZ3pmZWtWdzVNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2
NjMyL0FCNUE4NzA2NUUwRDExRjA5NDc2MkYxM0M0RjlBRTAyL2hER09nYkxsbjJF
VXNRTDZSUWd6ZmVrVnc1TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEBgNp5BGQfYU/qheruadd55hKDHubW1boYxSrdmULQMRFdrHh25+jvV
6/vxyJb+qTLnlTHHJ1YfmATfyuZDZSz/n6oZC96L2KhKfkz9AydtOKjvaMEI9av/
GIpone+0RHZtgkOUWxisTCOllvSqCMgU17P70lPOobe/wbRug0l/3Zw8tPAYmSkq
qI/rggxEIIWTDYDq5MvxCxQOhO/U7xHvep9c+/tufXGEo8CnePNnOD3tjKQbORsO
laGmaLC98sHX1eMxJ8d+q00Q00ZLVKcuAR7OpXfzBH69RU/4dlR4WWkscgysG8cd
++2VfdiFrinJ2jdaFR1xQ6Hx0Pl/g4c=
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:23:05 2025 by rpki-client