Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
File:                     MJHb_j66tWY-h63G6ZX4gtOyZMo.mft (raw, json)
Hash identifier:          nq54bHC1AsgCFxPxICIoZO6jHiCyNtgyaRxHZBgQ4Vs=
Subject key identifier:   11:09:4E:47:23:E8:E1:32:87:45:21:1F:F1:7D:E9:97:67:25:91:EF
Authority key identifier: 30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA
Certificate issuer:       /CN=A91C1C49/serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
Certificate serial:       0D1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
Manifest number:          4299
Signing time:             Sun 04 Oct 2026 15:02:05 +0000
Manifest this update:     Sun 04 Oct 2026 15:02:05 +0000
Manifest next update:     Sun 11 Oct 2026 15:02:05 +0000
Files and hashes:         1: MJHb_j66tWY-h63G6ZX4gtOyZMo.crl (hash: iBHUK029kGE2zJr1PDAoftjxwp0HQuN3mdUzo8SkMgc=)
                          2: 8941689CB44911EA92F1F886C4F9AE02.roa (hash: LEzt89CvLVju98tJMXEY3BB8Z+2hDsrkV3y8xZ+yWY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3358 (0xd1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=3091DBFE3EBAB5663E87ADC6E995F882D3B264CA
        Validity
            Not Before: Oct  4 15:02:05 2026 GMT
            Not After : Oct 11 15:02:05 2026 GMT
        Subject: CN=6ac26a6d-a6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2e:90:ba:dc:cf:28:d7:07:cb:b0:db:3a:49:
                    94:d8:3c:fc:d2:b3:06:51:ab:d9:49:a0:73:2a:60:
                    3c:95:06:c8:a5:d5:54:e4:48:39:8d:bd:4c:4f:93:
                    32:99:77:2c:bd:6a:ae:02:03:ed:ef:a4:28:09:8a:
                    b4:0e:5e:6c:cc:c8:75:ca:7b:22:40:15:fd:cb:66:
                    56:47:86:e6:10:9e:02:7d:10:57:6b:f8:c1:bf:70:
                    6a:4f:f9:74:ca:41:e3:62:1c:d9:1c:a4:7b:91:e6:
                    dc:6d:de:bf:f2:57:4b:1d:e4:24:c8:3b:d6:05:bc:
                    a0:ae:c6:9a:5d:20:45:bf:0f:f8:51:72:ad:07:7e:
                    a7:a0:0e:8d:88:9a:41:48:f7:b1:82:87:6c:d4:e1:
                    58:2b:3a:23:3b:53:6a:81:94:1e:e6:ec:68:ae:bc:
                    ca:01:97:99:d3:09:21:42:e7:35:32:9a:92:61:ee:
                    67:49:3d:24:1b:aa:fc:f7:03:86:22:d8:14:6d:94:
                    48:60:8d:76:62:2a:3c:c2:ad:47:bf:1e:80:2b:3a:
                    2d:dd:7b:c6:36:2f:2b:53:20:13:3a:3a:39:e9:cb:
                    c2:dd:5e:a8:1a:6c:81:23:ac:b1:a6:46:25:cd:1c:
                    eb:b8:70:b1:25:63:9a:e0:80:92:c2:40:34:73:f9:
                    ca:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:09:4E:47:23:E8:E1:32:87:45:21:1F:F1:7D:E9:97:67:25:91:EF
            X509v3 Authority Key Identifier:
                keyid:30:91:DB:FE:3E:BA:B5:66:3E:87:AD:C6:E9:95:F8:82:D3:B2:64:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MJHb_j66tWY-h63G6ZX4gtOyZMo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/MJHb_j66tWY-h63G6ZX4gtOyZMo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:57:ba:2d:8a:84:ec:f7:96:5a:c8:82:76:94:c8:f0:52:cc:
         d1:b5:bc:ba:22:38:7e:b1:9d:68:8f:be:a3:c0:6e:a8:2f:5b:
         48:77:25:17:96:bc:68:fb:05:50:24:2a:8b:92:09:ce:7d:44:
         07:27:48:b4:6f:e9:da:de:15:8a:94:22:c9:5d:fa:46:6b:c2:
         8c:c8:20:3f:63:80:1f:03:97:3a:85:aa:eb:ce:f8:13:37:9f:
         5d:bf:b0:c0:be:9f:3b:d1:9d:7e:7b:50:70:eb:ce:9f:4a:bf:
         7e:5b:2a:53:ba:cd:42:2a:30:d4:77:01:12:a2:c4:74:fd:33:
         0f:1b:61:09:ee:53:8a:45:05:15:10:f0:fb:db:f3:76:c5:27:
         17:88:95:ce:3b:cc:ae:ac:ca:ce:45:ed:a5:f7:0b:16:50:b4:
         d9:87:b2:49:68:46:ae:aa:40:90:39:2c:30:07:df:71:bd:39:
         c4:0b:76:5a:b1:86:19:0f:43:4c:28:d6:8b:c9:88:86:ee:69:
         a9:99:bf:40:cd:a9:55:52:4f:45:10:35:58:45:75:9f:05:14:
         75:ff:f6:ed:f3:a7:2f:b1:97:98:91:83:92:c6:8d:fb:0e:a1:
         76:b3:b9:91:86:f4:6e:ec:80:4f:d5:31:7b:f1:15:ed:37:5e:
         f7:ca:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:28:23 2026 by rpki-client