Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File:                     18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier:          k6NOC2XaijD+7TTCu1vdVVRRHOj5h0ImwUAOg6WgXWA=
Subject key identifier:   8F:37:68:32:E2:1D:E5:84:CF:48:DE:13:BB:A6:53:F1:6C:BF:D1:DB
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer:       /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number:          0428
Signing time:             Tue 22 Sep 2026 16:14:12 +0000
Manifest this update:     Tue 22 Sep 2026 16:14:12 +0000
Manifest next update:     Tue 29 Sep 2026 16:14:12 +0000
Files and hashes:         1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: VN95pAM3xZX5Pyjz500OjfqwrS47hn5XvlyZXUHHKpU=)
                          2: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: MnQKwxbbpwYvCT9UEDUb9YHnOUTSQHiCV3o0jnph1XA=)
                          3: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: j8Yr7Ss4joe6oU5k+fjglOWHr8Bf9I77TQW0zKWVXNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
                          rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 16:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
        Validity
            Not Before: Sep 22 16:14:12 2026 GMT
            Not After : Sep 29 16:14:12 2026 GMT
        Subject: CN=6ab2a954-2532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:d6:4f:16:fc:9b:29:9c:c1:80:af:e5:60:
                    c9:25:5f:f5:fe:62:2a:92:c6:43:b4:dc:0d:ed:81:
                    85:d1:0a:bb:8d:be:05:4a:19:f0:34:03:b0:35:d6:
                    14:f9:46:d1:42:b7:14:ab:03:e2:67:91:f5:71:11:
                    ce:73:f6:f2:26:6d:a7:40:f4:8c:74:a8:04:ec:f7:
                    83:65:97:fb:06:45:d4:cb:f6:68:bb:7c:6e:8b:e9:
                    d9:b4:61:aa:84:02:02:f9:5a:12:f7:b5:83:48:fa:
                    67:66:b8:44:62:41:94:ce:3d:63:d0:f2:ba:aa:70:
                    25:cb:79:d1:9c:27:67:13:22:78:8f:3e:ac:9f:8b:
                    70:ff:74:23:23:fa:eb:10:48:91:7f:21:6f:6f:70:
                    57:e8:74:4c:53:2b:49:a6:4d:14:55:a5:26:e6:8a:
                    27:d7:85:a2:b2:ff:b4:14:f8:2e:9e:d7:77:39:e5:
                    fe:3b:58:48:88:77:c2:b4:41:7c:22:11:a1:67:8e:
                    bc:96:aa:ae:c7:21:4e:b9:be:37:a0:8f:6b:b3:9b:
                    3c:a4:43:e2:bc:ca:b4:6b:77:e2:6c:7e:7d:2c:c7:
                    f0:fb:17:99:b8:e9:59:7d:d8:4a:e5:7d:2f:80:ff:
                    5b:64:97:47:86:44:b5:9b:8f:47:58:88:e6:e7:44:
                    8f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:37:68:32:E2:1D:E5:84:CF:48:DE:13:BB:A6:53:F1:6C:BF:D1:DB
            X509v3 Authority Key Identifier:
                keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:70:a8:c5:20:a0:de:c0:39:38:c5:92:06:f5:f8:fb:a7:d0:
         de:58:a7:cb:f2:28:e8:19:2b:ca:8b:82:28:04:c5:7e:b3:12:
         8d:de:1e:3a:44:8d:91:40:64:42:59:de:89:f6:b6:93:54:9c:
         11:23:74:e3:3d:2e:98:7f:2d:23:dd:14:2e:85:25:e7:4f:fc:
         fc:e6:ea:4b:95:f7:26:ca:5c:3b:fe:71:98:96:d9:1e:e0:9a:
         7a:b6:0f:cc:d8:51:82:9f:d8:a0:4e:de:b7:35:6a:66:42:b1:
         2d:33:e8:77:c5:85:be:ea:92:78:06:fc:cb:e5:9e:82:5c:1b:
         44:d8:b2:0e:d5:3f:ae:9a:61:af:3f:c7:03:98:03:d2:c8:fc:
         29:7d:5a:91:26:4a:c6:30:39:cd:f0:90:93:e0:37:ca:7d:13:
         4c:5d:74:88:aa:cd:0f:52:f4:86:cc:a7:94:ba:00:d6:58:ac:
         a1:94:e0:b1:88:67:c0:61:41:e8:f9:31:d9:7c:dc:08:ca:8f:
         f4:44:57:ae:a6:b5:c6:f8:c5:36:4f:24:be:70:06:67:1d:42:
         ca:97:6c:6b:55:31:17:16:2f:4f:17:bf:cc:ef:e2:8e:5d:e4:
         9a:f1:12:f3:27:d0:47:9b:1f:cc:cb:27:e8:19:2e:77:6d:2a:
         ce:82:38:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:26:37 2026 by rpki-client