Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File:                     ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier:          alugDaJy+8U6DxJLkJuE+5BvY4G+l8e0a9yDsOKTfzk=
Subject key identifier:   6B:8C:37:83:6C:67:0C:AC:67:E9:5C:AA:CA:4D:50:74:55:7D:66:FA
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0D4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number:          0D3D
Signing time:             Fri 02 Oct 2026 18:25:02 +0000
Manifest this update:     Fri 02 Oct 2026 18:25:02 +0000
Manifest next update:     Fri 09 Oct 2026 18:25:02 +0000
Files and hashes:         1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: /4vcUU7RrhPUShEZfihPvcaI3GtDxLK+YcE3rcUevbs=)
                          2: 46836218B00411F199D785AD6611F970.roa (hash: 75k5rEpcgz3vp3EOdLhixBQ7Kaiu/ExepMO2+t7KbxM=)
                          3: A71C98C4B00411F184AE3FF86611F970.roa (hash: 0qf+ZPszaZ90AY479kx3fJzerzO61Sj4OArotXEpOV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3403 (0xd4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Oct  2 18:25:02 2026 GMT
            Not After : Oct  9 18:25:02 2026 GMT
        Subject: CN=6abff6fe-85e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:65:18:3a:a4:c1:06:75:27:50:0b:e1:8e:
                    e7:cb:66:a2:86:9c:93:3e:7a:8c:6f:1a:f5:d0:8c:
                    4e:24:09:a0:9c:30:36:2c:8a:b9:4e:ea:db:d6:26:
                    e6:72:b8:52:db:55:01:18:58:c5:34:35:c8:6b:54:
                    4e:f7:d1:ba:d4:8c:bf:01:ef:03:45:ab:1f:eb:93:
                    19:fa:94:8e:2a:35:be:16:ee:7e:24:c0:0b:32:0f:
                    12:10:3b:ff:6c:6a:86:b8:51:f8:5d:e1:ce:c0:a7:
                    2f:e4:74:5c:ec:08:67:ec:91:bb:49:69:36:db:fb:
                    87:a3:78:b0:0d:d3:34:1d:9e:f0:ba:2d:b3:c9:1d:
                    e1:fd:a6:a8:66:4b:e2:c8:8c:14:f5:b6:f7:3f:0e:
                    e0:97:ea:dd:73:84:11:86:e8:ec:9a:18:e7:41:86:
                    6d:66:d5:c1:95:be:d8:1e:01:bb:3f:71:90:0d:f0:
                    5f:e5:36:6b:9c:52:2b:69:fc:6e:8c:40:50:76:ca:
                    a7:e0:0b:e0:71:66:12:61:5d:88:cf:44:c9:d7:0b:
                    9e:12:5d:c7:b9:85:ba:e8:bb:7f:af:f7:43:97:aa:
                    32:15:66:8e:81:52:f3:95:7d:35:26:54:70:84:c5:
                    7c:e9:03:3f:a5:9d:22:76:ea:7e:c8:1f:9c:71:60:
                    98:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:37:83:6C:67:0C:AC:67:E9:5C:AA:CA:4D:50:74:55:7D:66:FA
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:22:ee:e0:ad:48:19:ab:8a:74:ee:91:02:dd:ae:ff:d8:fb:
         99:96:68:fb:3f:15:bb:05:9e:fc:a3:0f:cd:8e:14:29:16:9c:
         d1:93:10:4f:c2:99:4f:cd:6a:8a:14:62:cf:d4:3b:3e:5b:ed:
         00:09:9d:b6:c0:fe:7b:e9:b3:58:20:11:0a:61:e0:61:c7:c7:
         5d:6d:dd:a3:03:10:35:6d:62:c0:1f:6a:4e:63:5e:ab:a3:8c:
         b2:f1:9d:b1:3b:c6:30:07:8c:80:98:3e:d5:8c:bc:bf:ed:94:
         a7:14:bd:fd:80:7b:a7:75:39:ef:a7:a7:66:9c:14:d7:e1:c9:
         ff:d1:d4:85:4c:91:ee:02:bc:7a:3b:ef:ff:dc:3f:cf:24:46:
         c9:dc:51:3b:11:3a:a9:d9:5d:72:1b:30:d3:1d:17:82:74:e1:
         7e:2a:53:c1:1a:d9:91:83:22:64:6b:c7:e2:5c:68:09:9d:81:
         57:6c:e2:99:a4:a3:a2:88:e0:35:8d:b2:df:46:d0:9b:fe:50:
         d0:7a:6e:3a:55:14:b5:e3:57:5b:12:c9:ca:e9:52:49:0f:a1:
         f6:19:62:6f:fb:c9:9f:39:95:b9:9c:50:14:8a:ca:37:75:16:
         ce:80:d6:e6:af:b5:b9:a2:c1:aa:38:dd:b9:da:0c:90:3e:35:
         d9:19:b6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:01:57 2026 by rpki-client