Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
File:                     9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft (raw, json)
Hash identifier:          MLZ1cLVwj2lkW/60HILpxDOXRKFiOVUHu8Ll5NbMXqI=
Subject key identifier:   43:3E:CE:40:CD:7F:4F:AB:23:FB:BF:5A:3B:8A:B7:F9:D6:E1:E7:A5
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0E8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
Manifest number:          0E67
Signing time:             Wed 26 Aug 2026 17:42:51 +0000
Manifest this update:     Wed 26 Aug 2026 17:42:50 +0000
Manifest next update:     Wed 02 Sep 2026 17:42:50 +0000
Files and hashes:         1: 9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl (hash: 4IxbxuMEgC5N97oKdD+43jjmMa0SwynwMai28/yr20A=)
                          2: 471FC532E6FC11EE84213C0FC4F9AE02.roa (hash: Ec8W4gQuX0b++CAV01O5jV4Wjhz49qlbass79pnKtTU=)
                          3: 79666614E79311EC81D3720BC4F9AE02.roa (hash: Hpcf4lgDgZQzXJtpEHpaQml11q/y16dSr2w1HCLRatk=)
                          4: 6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (hash: BuWqwvZP/WAlc5pltyqdqjYN2tYsPZenNwkSyiZ+IjM=)
                          5: 22639692E6FC11EEB3BCD10EC4F9AE02.roa (hash: jTINudEF1PytBKZidbXRaxHONjKZ1aZaJMZAVtgeI8c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 17:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3724 (0xe8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC, serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
        Validity
            Not Before: Aug 26 17:42:50 2026 GMT
            Not After : Sep  2 17:42:50 2026 GMT
        Subject: CN=6a8f259b-af8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:4b:3e:c9:d4:4a:60:c5:dd:38:e1:27:a2:
                    a3:85:f2:09:a9:f2:c1:61:a9:5f:8c:2d:01:d1:fb:
                    d9:5a:aa:93:b7:d4:93:22:cf:1c:81:da:b6:a6:f4:
                    2a:54:3e:9b:63:c2:1b:ce:1f:ab:b9:20:60:db:74:
                    41:4e:73:51:eb:c4:34:69:0f:ad:0c:85:da:5d:f7:
                    77:26:20:bf:40:06:18:92:16:e9:27:6f:ad:f2:bf:
                    f0:6d:8e:58:67:6d:6d:3e:d4:90:a7:66:a9:f7:bb:
                    c6:cc:da:d6:79:09:d7:d4:e1:89:71:4b:05:00:53:
                    05:dd:47:4f:ff:fc:ad:60:a9:62:16:33:e5:5a:93:
                    56:83:6f:36:73:cb:83:76:8d:4f:62:f0:9d:24:f0:
                    dc:4c:ad:17:0a:11:e5:d7:64:08:f4:ae:89:01:37:
                    84:83:4b:fb:57:3b:e0:dc:d9:ab:54:7d:b5:d5:1c:
                    e7:d5:87:48:68:ca:1c:48:48:ea:0c:fb:47:72:18:
                    b1:31:bf:b8:d6:ea:78:69:e2:86:8b:30:07:fd:ec:
                    3b:85:bc:fb:df:b1:c9:4b:9c:a6:0a:50:56:fc:4e:
                    f4:ba:90:1c:ac:c4:4a:bc:41:43:20:36:23:d5:46:
                    1b:7d:99:31:d0:15:fb:a0:41:7d:b7:95:4a:b3:c0:
                    bf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3E:CE:40:CD:7F:4F:AB:23:FB:BF:5A:3B:8A:B7:F9:D6:E1:E7:A5
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:9b:d1:44:f6:2e:da:95:4c:1d:4c:f9:f2:15:40:1e:a4:76:
         5f:55:04:f7:b2:28:3f:21:bd:ba:8d:ca:b2:37:cb:8a:33:6b:
         7d:4d:7f:54:5f:8f:23:5d:e5:e1:40:9c:14:0a:bb:91:88:15:
         92:87:8e:1a:e6:77:fd:23:74:09:20:ff:c6:c9:a7:96:09:23:
         f9:2b:a3:ef:c9:af:f7:45:73:20:02:61:75:15:49:db:a0:0a:
         7c:8c:c6:bf:d7:94:a8:48:9a:03:5a:58:3e:7b:89:56:61:b1:
         70:41:8a:62:b9:7a:ad:e9:be:7a:c0:71:0b:86:42:db:d8:55:
         59:66:8a:59:7b:17:4f:0b:4f:c3:8a:34:9c:99:9c:24:78:f1:
         90:fc:d0:fa:2d:8f:c0:81:f3:09:bf:fd:7a:f6:df:1f:48:a9:
         13:97:2d:f5:c2:b3:f7:57:5d:7a:c2:91:5a:e5:14:0a:e2:50:
         80:85:35:cb:0f:33:49:83:ae:aa:df:78:7b:db:cc:32:ff:fa:
         6d:fe:79:26:98:10:55:cf:9d:c1:89:62:94:b4:51:6b:d3:59:
         83:d2:71:d2:8e:49:62:29:95:09:20:90:f6:4b:f4:01:ac:15:
         e5:56:20:0a:1d:05:e6:7a:40:93:91:a5:95:73:6f:c1:9e:e8:
         66:f8:15:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:44 2026 by rpki-client