Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          m+kEHJb7UuXGb8S3B7+0iFFNbwzaeaLna7ix6GNzR7c=
Subject key identifier:   5D:98:D3:7D:10:DD:C7:5A:50:04:50:93:8F:D7:6E:9D:87:CC:DA:3A
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       029A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          027E
Signing time:             Tue 27 Oct 2026 02:19:21 +0000
Manifest this update:     Tue 27 Oct 2026 02:19:21 +0000
Manifest next update:     Tue 03 Nov 2026 02:19:21 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: C3w0uR/cMg1jX9fd8wEB5y1KuMAvG900ZLpAM8r5ebI=)
                          2: 991CBF9A86F311F1B8F66003A7EE528E.roa (hash: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=)
                          3: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:19:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Oct 27 02:19:21 2026 GMT
            Not After : Nov  3 02:19:21 2026 GMT
        Subject: CN=6ae00a29-1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4a:96:8a:1f:98:7f:21:60:a1:3d:96:a1:c6:
                    a9:7b:43:a4:0b:57:23:ce:8c:00:8c:b2:f6:44:f3:
                    66:14:33:a8:fa:54:80:5b:d0:54:05:42:e4:bd:69:
                    53:99:c1:f1:bb:af:73:5e:5d:ff:f1:14:36:09:71:
                    15:0d:e7:17:e9:93:13:a7:88:07:22:a1:60:56:d7:
                    91:78:98:70:63:f2:aa:ad:ab:ed:04:bd:c6:0c:f9:
                    28:d6:1e:b1:06:ec:30:a4:d5:70:61:bd:6f:ed:70:
                    08:40:75:bb:d4:72:7a:7d:63:a1:61:a3:a5:c2:e2:
                    19:cb:44:2d:1c:7d:45:e5:80:ea:bb:5c:66:98:50:
                    22:63:fe:38:8d:39:cd:1d:cb:50:18:e8:0f:a8:53:
                    95:70:a5:48:1e:4a:e9:e3:eb:10:57:d6:71:00:19:
                    8e:32:9e:02:d7:80:ad:2d:37:6c:f9:ec:a9:ef:37:
                    9c:63:2a:74:46:78:20:9a:2b:16:d3:4a:30:24:e1:
                    fd:bb:81:62:13:6c:af:d4:60:e9:28:78:5d:14:35:
                    01:3c:b1:43:bc:6c:3e:20:63:fb:75:4e:b0:41:49:
                    80:30:21:83:fd:cc:e8:e7:8f:65:12:c6:1a:52:bf:
                    bb:35:8f:22:3a:eb:69:fe:56:22:06:cd:f8:df:bf:
                    8c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:98:D3:7D:10:DD:C7:5A:50:04:50:93:8F:D7:6E:9D:87:CC:DA:3A
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:10:3d:c8:1e:75:78:bf:dc:73:c6:20:83:0b:7d:2e:e4:
         0a:69:c1:1a:fe:62:cf:e3:bc:fb:fc:2a:5b:b1:f0:bd:d7:44:
         7f:93:0b:61:d6:34:9d:85:e6:76:f5:0f:44:a9:6c:72:f9:32:
         f5:62:07:60:99:8d:5d:f5:57:f3:77:44:3c:f5:fd:3e:50:8d:
         a8:03:55:0d:1a:eb:37:11:04:9f:6a:e8:d6:bd:e8:39:fb:f9:
         36:c8:04:59:4c:06:8a:f8:df:d9:ad:ea:d8:d1:02:f3:a9:9b:
         88:62:18:b2:fa:6d:dc:73:59:b6:de:10:40:3d:12:e0:97:cf:
         4a:88:17:a8:30:f1:1d:9f:ad:eb:c0:e3:35:63:fd:e1:7c:c7:
         0d:87:fc:dd:7a:65:5d:11:05:67:45:8e:9d:7d:b5:f5:ba:14:
         27:50:3b:63:1e:3a:88:05:4e:c9:2b:3d:0f:d8:28:01:5e:49:
         01:75:ff:ac:05:69:20:e1:80:d3:54:b1:3c:f1:1f:66:f2:59:
         a4:02:9f:71:cb:d4:71:da:9a:26:d8:39:b1:36:10:8a:7d:80:
         50:24:e1:bd:28:4c:c8:e0:e2:21:ff:7c:8c:d7:bd:fd:19:c7:
         8f:07:3b:f8:bf:cd:48:b4:2b:32:8a:aa:a3:34:ed:27:94:e1:
         9c:c3:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:41:47 2026 by rpki-client