Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
File:                     jhahBq30E6__xY8QEZJ09wDPpZM.mft (raw, json)
Hash identifier:          Bq7ahKO682z6qCN0rPRFRVqy9Z77Tf6DZ19mHxDBpd8=
Subject key identifier:   ED:31:E4:2B:2B:97:36:E2:65:AB:8E:9B:C6:C6:30:32:B3:CD:75:C1
Authority key identifier: 8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93
Certificate issuer:       /CN=A913EF8E/serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
Certificate serial:       0363
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
Manifest number:          035B
Signing time:             Fri 25 Sep 2026 00:44:58 +0000
Manifest this update:     Fri 25 Sep 2026 00:44:57 +0000
Manifest next update:     Fri 02 Oct 2026 00:44:57 +0000
Files and hashes:         1: jhahBq30E6__xY8QEZJ09wDPpZM.crl (hash: wF4JbisVBPsgsSyzzh15KnuVWFljKtS8Hv9K3xjsUPg=)
                          2: 92F8EAF428F511EDA8D1655FC4F9AE02.roa (hash: EJWDG6artzDnlSJXJ9bXJrFLczaZm/NemCfoX5YfgoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl
                          rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 00:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF8E, serialNumber=8E16A106ADF413AFFFC58F10119274F700CFA593
        Validity
            Not Before: Sep 25 00:44:57 2026 GMT
            Not After : Oct  2 00:44:57 2026 GMT
        Subject: CN=6ab5c40a-59d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:fd:5c:f2:27:0b:57:82:09:a4:54:31:1b:
                    2e:54:f3:a7:cb:15:80:60:98:de:4e:33:1b:4f:a1:
                    1b:2b:cc:de:2f:5c:fd:3e:86:78:4b:34:f6:1a:b6:
                    d5:ce:fc:7d:f1:93:0e:c5:16:cf:fe:44:da:52:5c:
                    d4:39:ca:c0:a6:94:fb:0e:e8:af:16:f8:a8:e6:64:
                    a7:d9:13:f8:b8:ec:bb:48:3c:9a:8a:fb:2e:0f:ee:
                    43:7c:c7:1f:07:e8:d5:08:68:f7:e7:e8:14:07:d6:
                    1f:b5:dd:13:a3:20:50:2d:f6:07:05:93:41:76:56:
                    e1:59:dd:fb:19:76:21:2c:d7:05:de:0b:bf:ef:cb:
                    c6:4d:46:43:99:b9:e6:a3:b4:b5:32:8a:1f:d9:34:
                    33:5c:e9:66:a2:51:4d:3b:28:f2:47:a4:f9:91:f6:
                    e5:6a:41:e9:c4:49:ef:b4:39:a0:91:4d:47:7c:11:
                    29:7e:2d:7f:c4:64:8c:77:8c:7a:03:ed:7a:93:72:
                    b6:c4:e1:1f:7d:e2:4e:86:6d:46:bc:c0:66:fe:99:
                    47:54:4e:0b:a4:df:38:20:ee:be:00:18:0e:a1:69:
                    ef:51:20:32:bc:da:46:ae:aa:cb:6c:bf:e4:f3:f0:
                    9b:48:46:c9:bc:12:ad:22:cf:17:3d:b7:58:ac:ef:
                    93:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:E4:2B:2B:97:36:E2:65:AB:8E:9B:C6:C6:30:32:B3:CD:75:C1
            X509v3 Authority Key Identifier:
                keyid:8E:16:A1:06:AD:F4:13:AF:FF:C5:8F:10:11:92:74:F7:00:CF:A5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhahBq30E6__xY8QEZJ09wDPpZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF8E/2AB24918171B11EDB3544D68C4F9AE02/jhahBq30E6__xY8QEZJ09wDPpZM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:1c:80:5b:e7:f5:b7:cd:30:df:de:9b:1f:25:eb:0f:b0:
         e1:35:b0:0f:e9:cb:85:08:03:53:e1:83:ab:fc:ee:25:59:02:
         d5:e4:45:6a:08:c5:9f:ce:7f:dd:09:72:6d:0a:a2:05:39:0f:
         ec:62:2e:86:ae:56:b6:52:43:47:f5:55:e0:b4:c9:31:32:99:
         f7:44:29:ca:93:46:37:a6:23:09:ac:6c:da:b0:10:ed:30:44:
         13:f9:5a:8f:c0:2a:6b:cc:ed:84:77:a1:f2:6e:12:ba:b5:9d:
         eb:30:9e:b0:ea:eb:26:ad:27:4c:44:76:5d:6e:3f:af:90:d5:
         c4:bc:dc:c8:e8:10:73:a7:79:3c:b2:89:47:b2:b2:1a:d2:f8:
         61:0c:e1:d6:62:56:dc:2b:fc:9d:5c:58:ee:86:e1:c5:75:c1:
         a0:70:c5:03:ee:a1:6a:a6:17:ba:83:4a:0c:df:71:31:c8:ea:
         2b:a0:fa:26:5a:ab:2b:87:5a:ff:43:aa:f6:0d:80:2e:08:66:
         c0:eb:4e:4f:e1:5f:97:60:81:c2:f9:41:85:8d:94:a6:7d:c1:
         af:8f:fd:d1:8d:18:e5:aa:41:1f:0c:c3:08:95:12:36:fd:58:
         4d:56:ae:83:7d:6b:26:9f:f3:ed:d2:90:68:4b:a1:ed:b5:5d:
         13:0f:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:29:08 2026 by rpki-client