Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
File:                     h19AAhxtQ7BO_olKf8FcxPbtibo.mft (raw, json)
Hash identifier:          IHh6K25Nl/HMOSDLi1kphca4wfvR0HItUAi1H5fTITk=
Subject key identifier:   0D:3B:BE:71:A5:52:04:09:5B:DA:C8:72:9D:77:95:21:05:06:7F:A0
Authority key identifier: 87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA
Certificate issuer:       /CN=A91151C9/serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
Certificate serial:       18E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
Manifest number:          18C5
Signing time:             Tue 22 Sep 2026 16:25:17 +0000
Manifest this update:     Tue 22 Sep 2026 16:25:17 +0000
Manifest next update:     Tue 29 Sep 2026 16:25:17 +0000
Files and hashes:         1: h19AAhxtQ7BO_olKf8FcxPbtibo.crl (hash: 1JodicBADT28oO3VALq1zy67afTVmRP2NyNnaBwRRnU=)
                          2: A652A68C3DB911EFACDF8C75C4F9AE02.roa (hash: rehHNVoMzYrcbyHR3xn9AScPl8hoBFDtA7CJ2MlnTrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl
                          rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6368 (0x18e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91151C9, serialNumber=875F40021C6D43B04EFE894A7FC15CC4F6ED89BA
        Validity
            Not Before: Sep 22 16:25:17 2026 GMT
            Not After : Sep 29 16:25:17 2026 GMT
        Subject: CN=6ab2abed-a878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:84:07:02:1e:e5:c9:74:f0:fa:a1:9e:92:
                    b8:5a:59:7b:9e:fd:bb:97:7c:77:7a:a3:bb:36:94:
                    4b:3e:81:58:01:be:63:45:8d:8f:54:15:1e:bf:24:
                    5e:62:f9:6d:80:6c:d6:18:0b:cc:cf:a1:d4:d6:d3:
                    1e:a4:c7:08:22:e0:8f:db:e0:ac:9b:51:7f:6e:4a:
                    7f:c8:9e:37:07:6e:95:4b:4e:1f:61:e3:f9:0a:de:
                    20:47:c2:f0:ee:dc:c9:9b:07:57:56:3e:6b:9d:a1:
                    8c:74:cb:93:a8:34:16:67:3e:6f:16:bc:c7:a2:a9:
                    01:86:4b:e2:5c:60:9b:26:09:73:25:f0:d5:e8:42:
                    c4:dc:c3:57:ea:5c:0d:8e:cc:80:b4:7e:0f:4d:ce:
                    4d:3c:ba:f1:1e:e1:34:65:e9:d7:6e:16:76:c4:a5:
                    61:a9:40:12:cc:00:f4:3f:ca:40:20:bb:02:19:10:
                    0a:29:4c:65:64:25:c4:fd:b3:97:ea:4e:df:79:e1:
                    ed:7e:af:84:cd:41:cd:9b:86:bd:01:fd:fe:92:71:
                    55:e2:3a:a7:b1:49:e8:52:17:56:e3:24:0b:19:46:
                    c7:ab:97:53:89:3d:ec:d9:97:49:e2:78:45:59:45:
                    a3:64:e6:0f:7e:9e:5c:44:86:be:1f:77:46:2e:59:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3B:BE:71:A5:52:04:09:5B:DA:C8:72:9D:77:95:21:05:06:7F:A0
            X509v3 Authority Key Identifier:
                keyid:87:5F:40:02:1C:6D:43:B0:4E:FE:89:4A:7F:C1:5C:C4:F6:ED:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h19AAhxtQ7BO_olKf8FcxPbtibo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91151C9/C300C2CEC6FA11E7AAABCC0BC4F9AE02/h19AAhxtQ7BO_olKf8FcxPbtibo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:9a:7f:a0:8d:6c:82:4e:26:39:a7:32:83:b2:dc:d3:a3:
         9a:f5:e1:ab:b7:73:5c:ed:5f:a9:17:96:95:2a:8a:ef:26:1d:
         fd:74:0b:23:ac:39:1d:51:31:68:f7:8d:c1:d1:28:c5:3b:ff:
         11:69:70:93:37:4a:95:d2:8b:e4:93:51:cf:09:d6:55:39:e6:
         48:ee:28:14:ff:e6:e6:a9:1e:8f:ce:74:03:5e:00:0c:fa:26:
         6e:c3:f9:ea:a3:79:5c:cb:fc:9a:8d:ac:4d:b1:2d:6b:09:9f:
         b7:fa:50:5d:5c:e0:03:f2:24:b4:e0:c8:db:0c:5c:3c:2e:06:
         2f:b3:af:22:b1:2f:b6:a2:bf:10:98:b9:45:31:4d:c6:cd:7a:
         a8:72:a3:b8:ea:b8:e7:9f:be:33:2c:65:e9:51:c6:58:bc:83:
         ed:25:96:78:2a:cd:58:bb:2e:24:16:cb:8b:3e:48:35:9e:f6:
         fb:74:e9:e1:33:d6:77:2e:57:52:7d:b8:9c:c9:33:c8:f9:14:
         5a:49:b7:39:7c:63:2c:69:c9:31:a0:be:8b:11:69:48:b1:87:
         8c:31:0a:48:9f:b4:7b:d0:9a:82:ec:31:d5:56:c5:32:52:43:
         b4:60:97:1f:7f:04:79:7c:17:5e:d0:fa:0a:ce:67:60:5e:2e:
         6a:6c:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:03:24 2026 by rpki-client