Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
File:                     H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft (raw, json)
Hash identifier:          BQEJ0HIw0BWSZx+BkL7dsP8yPBZNPYI42Hr5k9NZhy8=
Subject key identifier:   42:D7:A0:ED:4D:67:74:64:37:36:93:5B:F0:DA:19:66:D1:36:31:C4
Authority key identifier: 1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24
Certificate issuer:       /CN=A91F8282/serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
Certificate serial:       0134
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
Manifest number:          012C
Signing time:             Fri 09 Oct 2026 06:22:39 +0000
Manifest this update:     Fri 09 Oct 2026 06:22:38 +0000
Manifest next update:     Fri 16 Oct 2026 06:22:38 +0000
Files and hashes:         1: H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl (hash: cxUzGN0WGO7nN1intEzy7doLWa8jnzcAT9PoesqvuPk=)
                          2: 0664C974FEF811EFB0C52572C4F9AE02.roa (hash: VTTmes8N3+DkLFdnT/jEg6MX9n3Ds/jhDY1DgH8WfVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 06:22:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8282, serialNumber=1F4DCE3439B1F4035FFF8C71CE359E5D20E69A24
        Validity
            Not Before: Oct  9 06:22:38 2026 GMT
            Not After : Oct 16 06:22:38 2026 GMT
        Subject: CN=6ac8882f-ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:04:69:d9:0a:f9:c7:b4:ab:75:c6:07:5a:91:
                    09:ff:39:ee:77:46:9a:d2:86:17:df:84:ab:49:c5:
                    b6:9f:6a:b0:53:8a:d2:50:fb:f7:b8:ed:63:32:e3:
                    fd:b3:00:20:34:5a:fe:0e:8f:71:a3:6c:f3:31:20:
                    09:0d:8f:53:57:26:15:59:01:ac:a6:e5:d6:89:7b:
                    d8:cd:a3:2a:e6:e7:7b:10:15:ed:09:d6:de:6d:a4:
                    ff:7b:83:eb:2d:03:eb:eb:5c:df:2d:93:e1:bb:cc:
                    8b:84:78:08:2d:60:39:14:50:be:f4:a1:bd:41:38:
                    70:6c:2e:3d:d3:ac:4d:48:1b:d2:ee:16:a1:45:c1:
                    81:f4:fa:ab:04:60:df:bc:6f:4e:fa:65:b6:4d:29:
                    07:b3:cc:d8:a9:46:13:22:20:51:b9:01:43:35:37:
                    6d:46:ac:04:e6:49:de:9f:f0:55:d4:47:a5:8d:f9:
                    5c:6b:3b:7d:59:76:0c:7f:f7:5e:ef:25:60:8f:78:
                    72:9a:d6:1b:fc:61:bb:58:4a:e5:c4:c0:3e:f9:62:
                    21:ef:84:45:c5:07:cc:6a:59:80:78:3a:68:3a:78:
                    91:31:d0:95:23:8f:b1:7f:a0:40:e4:82:c0:3f:7a:
                    8f:53:15:97:02:3f:46:4f:77:ff:db:d7:da:fc:c5:
                    8d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D7:A0:ED:4D:67:74:64:37:36:93:5B:F0:DA:19:66:D1:36:31:C4
            X509v3 Authority Key Identifier:
                keyid:1F:4D:CE:34:39:B1:F4:03:5F:FF:8C:71:CE:35:9E:5D:20:E6:9A:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/H03ONDmx9ANf_4xxzjWeXSDmmiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8282/2F253C1AFBFE11EFB5520A12C4F9AE02/H03ONDmx9ANf_4xxzjWeXSDmmiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:2b:a7:71:aa:26:1e:8f:46:f0:ae:85:81:4e:cb:71:b2:
         69:04:92:31:94:70:68:46:e2:09:c2:76:c1:86:4d:56:ed:af:
         18:af:15:7c:20:3c:03:d2:32:f6:60:ce:be:93:86:02:5c:08:
         38:dc:e8:21:30:1f:fc:21:02:af:65:bf:d0:33:54:d8:34:80:
         78:56:b0:73:d3:ec:ac:b6:47:41:be:50:48:2b:da:56:39:17:
         62:9a:04:7f:09:00:51:09:d6:c5:2e:c8:9b:63:71:01:5b:75:
         c7:1b:35:a7:02:46:3a:6f:09:b0:d7:f5:1d:8c:f8:29:ae:c0:
         cc:7d:dc:c7:72:d9:61:cf:a9:50:7c:6d:ae:d2:f8:27:45:58:
         f4:6d:47:6b:67:99:73:5f:ad:39:b1:7b:28:1c:6a:9d:c4:c7:
         e3:b5:ff:0a:1f:93:a4:91:a3:fe:79:24:b2:a4:51:67:5d:60:
         cb:51:1d:81:8b:64:9a:f2:0d:46:5a:45:f4:34:86:b7:9d:16:
         ab:9c:f6:4a:f8:4e:be:02:68:3d:1c:80:c3:ec:5c:6f:32:b6:
         54:3c:d1:a9:2f:0e:1d:1f:31:a1:67:b7:21:1c:ef:5c:15:b7:
         a4:1b:ac:e3:56:83:14:e0:63:a0:be:f8:a5:27:6b:70:24:29:
         35:66:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:04:54 2026 by rpki-client