Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File:                     HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier:          Mt1bbn6jmDKHiDyoMWHlr+l0tPDmKIv3Fq23T8yGOS0=
Subject key identifier:   23:42:CB:30:1D:90:9B:31:53:C2:6F:AF:C3:20:60:6C:0E:EA:1C:8A
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer:       /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number:          01EE
Signing time:             Thu 17 Sep 2026 03:37:05 +0000
Manifest this update:     Thu 17 Sep 2026 03:37:05 +0000
Manifest next update:     Thu 24 Sep 2026 03:37:05 +0000
Files and hashes:         1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: CWvaPIpisbiZlt1wbeeUZHSm20wCRWCif5eghpbgdIk=)
                          2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
                          rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 03:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
        Validity
            Not Before: Sep 17 03:37:05 2026 GMT
            Not After : Sep 24 03:37:05 2026 GMT
        Subject: CN=6aab6061-4513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:62:b7:13:58:0e:06:91:77:ff:22:2b:2c:6f:
                    cb:6c:c3:53:e7:90:4d:61:a1:35:75:61:2c:cf:62:
                    db:41:bf:bd:7b:4c:64:0d:76:00:34:a1:a2:61:87:
                    5b:be:d3:d2:71:2c:d7:ca:85:af:23:c4:01:06:77:
                    6a:c5:82:99:63:e3:39:b5:0e:58:18:17:c7:17:61:
                    77:be:bf:15:f0:d4:dd:9f:7c:5c:6b:cb:e3:04:31:
                    10:59:09:c1:15:a0:a4:b3:57:da:12:9e:36:12:aa:
                    89:3f:60:52:48:ef:5e:20:58:82:cf:3b:b6:13:33:
                    85:b0:1e:3c:8d:af:7e:11:da:a2:f5:af:e0:f1:44:
                    aa:08:da:9c:c1:05:e8:7d:ac:6d:b4:04:d9:43:06:
                    31:46:ea:7d:9e:0f:20:16:b6:a3:10:70:50:af:b7:
                    7e:b8:15:ca:24:5c:3a:84:67:27:f0:3e:b0:2f:db:
                    e6:a1:47:d1:06:78:d9:7a:31:66:aa:00:cb:0b:84:
                    b0:4a:ce:d4:8e:ba:9a:8a:07:53:00:ff:a9:53:15:
                    6b:ee:ba:8a:b3:d0:d6:52:96:5e:13:5e:69:11:e9:
                    cb:86:d3:a0:a1:ed:4a:65:2e:99:2d:e2:f1:a2:56:
                    ff:67:9a:97:51:bc:10:2b:1f:8d:f6:27:7f:13:d0:
                    5d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:42:CB:30:1D:90:9B:31:53:C2:6F:AF:C3:20:60:6C:0E:EA:1C:8A
            X509v3 Authority Key Identifier:
                keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:bf:71:f0:4e:66:91:5d:e8:07:af:46:48:18:78:40:7b:23:
         b3:ff:fb:91:2b:e1:da:b0:4a:05:95:95:91:67:6e:b9:03:b8:
         f5:be:ec:bf:85:3e:57:1c:6f:bf:92:4f:8a:b4:ba:f2:2f:cb:
         34:db:82:29:f0:89:d0:03:f9:67:30:f1:ed:0c:fa:b8:1b:3f:
         43:fd:95:3f:ad:b9:e0:9b:f5:10:11:30:a0:a2:8c:6f:7a:cb:
         0b:49:14:9a:81:d2:8e:71:aa:81:c2:ab:ba:90:18:6a:90:63:
         c9:d1:d1:92:4c:e2:30:46:7f:06:5c:67:70:c0:79:df:0f:d1:
         da:0a:34:bb:be:01:f6:14:e1:2b:8f:5a:a1:47:5d:b5:c5:a2:
         04:4d:ea:06:e1:ff:b6:13:91:d3:7b:7b:7e:55:a2:96:11:da:
         cc:a0:a8:35:43:68:59:78:b9:bf:7b:43:4c:9e:96:4c:fe:6c:
         9f:85:b2:ea:1a:ca:f5:f7:d1:13:f3:e8:29:af:0d:49:87:27:
         09:49:3a:38:d1:87:89:3a:91:dc:80:f4:ea:b3:ef:1c:a4:e2:
         11:a2:a6:86:c9:5d:72:7f:3f:78:0b:a9:57:ac:eb:d7:73:51:
         bf:ca:57:41:47:83:e9:2c:4f:04:cc:ca:40:0c:8a:02:d6:9f:
         81:59:15:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:42:47 2026 by rpki-client