Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
File:                     h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json)
Hash identifier:          jmbyfgpqMrXJ+E3tZzXRWk9Ktp3QT6nkvwmIoVB5Xew=
Subject key identifier:   C9:34:38:E5:FF:87:42:0E:44:1E:81:F8:B7:7C:96:CD:2F:CB:BD:9E
Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08
Certificate issuer:       /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
Certificate serial:       0958
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
Manifest number:          092A
Signing time:             Thu 24 Sep 2026 20:14:22 +0000
Manifest this update:     Thu 24 Sep 2026 20:14:21 +0000
Manifest next update:     Thu 01 Oct 2026 20:14:21 +0000
Files and hashes:         1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: uGXPVoLvnJth7qu6x8x3HLYiVKvFzvzjkGcbPUxdMrI=)
                          2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: x86404EpdTGR3Hsexhe6avivh4rHBMKypzDIfRqpXWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl
                          rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 20:14:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608
        Validity
            Not Before: Sep 24 20:14:21 2026 GMT
            Not After : Oct  1 20:14:21 2026 GMT
        Subject: CN=6ab5849d-0fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:bb:2a:0d:bc:ce:d5:3f:3b:a3:42:9b:b8:
                    83:00:74:ba:6f:e7:45:2e:5e:bc:8c:68:6d:f2:1b:
                    67:86:ff:c0:9e:2b:2b:ab:08:31:7b:51:f1:9e:3c:
                    52:e0:17:c3:5f:2a:23:db:e7:fb:09:97:41:0e:8a:
                    ad:8f:f6:0d:a1:d7:d0:50:2a:54:f3:81:68:47:03:
                    63:89:af:91:65:11:fb:ff:ae:c0:79:21:0f:39:4d:
                    ea:cd:4d:21:cd:8f:26:de:5a:8b:75:47:6e:ab:61:
                    a2:67:fe:57:57:da:5f:fb:51:3d:e3:fe:42:7c:50:
                    32:d1:90:16:ab:80:18:96:bc:4c:44:8a:7c:cc:5a:
                    45:5e:4b:40:97:44:0f:2a:e8:e1:9a:bd:f8:bb:f6:
                    c1:e7:98:7f:79:cd:15:5b:b0:44:70:4c:b9:8a:8b:
                    08:c5:8f:82:b5:bf:c9:c9:07:d3:29:47:29:28:1b:
                    80:50:86:22:5b:59:f7:a9:a2:f9:44:82:f5:2c:a7:
                    86:63:ae:7f:d9:18:27:ff:55:b2:33:22:7b:51:14:
                    6d:8d:fb:e2:d7:06:30:bd:7c:f8:b1:1a:91:02:48:
                    36:37:eb:af:1b:5f:46:33:09:51:c6:e4:b3:94:5b:
                    ce:6c:20:12:79:3f:e4:c1:8c:eb:02:3b:0b:06:cb:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:34:38:E5:FF:87:42:0E:44:1E:81:F8:B7:7C:96:CD:2F:CB:BD:9E
            X509v3 Authority Key Identifier:
                keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c8:e8:82:2a:bb:3b:55:e8:a7:26:09:aa:5d:ee:c5:d0:0a:
         dd:12:fa:fa:8c:eb:40:7c:fe:d0:4a:97:bc:e8:98:5b:64:1c:
         c3:8a:60:35:33:d7:04:d0:cf:67:b1:7e:93:bc:14:64:b4:40:
         e4:87:f1:4e:ac:0a:91:6e:43:7b:a4:d8:cc:56:37:29:f0:77:
         21:c9:c0:e0:d8:6c:4e:ea:ce:bb:2a:a4:91:c3:11:6d:61:ed:
         f9:5a:bc:96:03:ac:7a:34:37:0d:85:47:1c:38:87:1c:91:ff:
         7d:b8:7e:86:ee:fe:35:11:e2:5f:dd:ff:17:70:55:dc:a0:cb:
         1d:4d:d9:59:31:13:16:b3:d2:03:d0:0b:f3:d6:a6:b2:f9:b1:
         c3:ec:0d:f0:88:28:f4:68:a5:68:00:14:98:c9:85:8f:94:e8:
         a7:49:0d:ce:9d:79:d1:2a:2e:03:be:ed:05:32:cc:9d:a8:3b:
         55:f4:ee:59:60:1c:b1:3a:b4:04:32:54:73:59:fb:3c:ce:e2:
         04:8a:fd:80:0e:51:23:73:78:3e:aa:06:d6:15:f1:4c:cf:95:
         29:f1:b6:95:45:e8:22:69:17:e5:e4:a4:3f:67:94:32:ca:f0:
         f4:bd:3c:c5:1c:d1:e4:3b:1c:20:3b:e6:b0:66:86:80:49:d6:
         72:10:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:26 2026 by rpki-client