Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
File:                     HimymPrXg8InXAD86GVujPdJpIk.mft (raw, json)
Hash identifier:          6luHEr9vhDkqZmAfURvPoxfYQsrpmRHJ21nSZ3r1WkE=
Subject key identifier:   23:98:0C:C5:43:C9:7A:75:07:AB:A7:BC:4C:10:FA:DC:5D:98:14:ED
Authority key identifier: 1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89
Certificate issuer:       /CN=A91598F6/serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
Manifest number:          09
Signing time:             Wed 23 Sep 2026 08:58:04 +0000
Manifest this update:     Wed 23 Sep 2026 08:58:04 +0000
Manifest next update:     Wed 30 Sep 2026 08:58:04 +0000
Files and hashes:         1: HimymPrXg8InXAD86GVujPdJpIk.crl (hash: GU1W+aeG48G+OyqeY04kvToW0BWN5BsstvRI6owOffw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl
                          rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91598F6, serialNumber=1E29B298FAD783C2275C00FCE8656E8CF749A489
        Validity
            Not Before: Sep 23 08:58:04 2026 GMT
            Not After : Sep 30 08:58:04 2026 GMT
        Subject: CN=6ab3949c-d909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:bb:c2:a3:ed:6a:33:73:30:63:fb:2b:bd:
                    af:3c:c4:92:eb:be:40:30:97:61:24:de:64:8d:00:
                    6d:06:ed:d1:74:c3:6b:d7:ae:9f:9f:48:3c:e0:94:
                    e4:d5:dd:a1:f7:06:d5:aa:28:61:00:b5:c5:4c:11:
                    54:7a:21:e4:bc:8e:72:44:67:99:b5:77:14:6a:d3:
                    77:d4:b7:13:78:2c:f1:d5:91:fa:e2:81:97:4a:98:
                    4b:00:05:b2:93:de:07:b9:11:a1:55:0e:cc:71:7e:
                    f6:3e:02:78:77:e5:fe:2c:8b:79:8b:36:0a:0b:dd:
                    4e:f0:58:60:50:40:c4:8d:6d:b8:71:40:32:b6:20:
                    77:3c:c8:31:74:55:05:17:99:90:42:b5:0d:4d:d6:
                    a0:b3:47:fc:ef:20:de:69:71:4b:1d:3c:1d:b1:81:
                    cb:fb:cd:05:6c:81:36:27:99:08:fe:81:b9:da:dd:
                    fe:15:62:b9:42:c0:79:7e:a4:7f:cc:45:b1:98:36:
                    33:88:ea:61:75:48:a6:70:3f:4b:c9:e7:a2:0e:e1:
                    6c:ac:3e:25:f9:ae:33:68:f4:8c:bc:31:e6:c7:8a:
                    ae:84:4f:6b:b9:bc:8e:fe:a2:f4:43:2e:d3:fe:39:
                    75:ba:6e:80:8b:38:e2:1e:00:e8:70:11:74:a4:3e:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:98:0C:C5:43:C9:7A:75:07:AB:A7:BC:4C:10:FA:DC:5D:98:14:ED
            X509v3 Authority Key Identifier:
                keyid:1E:29:B2:98:FA:D7:83:C2:27:5C:00:FC:E8:65:6E:8C:F7:49:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HimymPrXg8InXAD86GVujPdJpIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91598F6/CE8604AEAD0211F1990D91973911F970/HimymPrXg8InXAD86GVujPdJpIk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:90:77:3a:54:45:00:0a:c8:92:a1:44:0c:ae:09:cb:0e:
         ca:2f:00:09:2d:f0:48:65:4e:08:38:c2:1c:fc:27:67:8f:b0:
         a9:8a:f7:e8:98:c9:5a:91:32:35:6c:00:f6:9b:3c:ec:28:79:
         23:23:01:2e:84:66:86:a0:f9:da:9e:76:90:21:ad:67:71:33:
         b8:b3:ba:ce:ef:a5:3c:07:58:f4:71:cf:64:44:09:72:cc:ce:
         9f:6c:63:ee:c2:c0:5e:48:a1:e8:61:b1:1b:a2:3a:fb:61:89:
         80:ad:ad:2c:a4:44:dd:c5:a0:ee:c3:6b:fc:ff:db:fe:fa:0a:
         3e:c6:f2:ed:14:c1:3c:75:99:ab:b9:0d:34:cb:f4:25:a7:99:
         de:67:d8:c7:60:c3:a8:45:dd:4c:dd:b5:cc:75:83:a9:0e:59:
         ff:81:55:07:76:68:8c:71:30:93:d8:b9:33:6c:22:e8:0e:79:
         2e:93:03:08:f1:07:d3:74:f2:ae:77:7b:b1:f6:ff:c0:a1:34:
         c0:ce:ac:1f:40:07:d6:b0:ab:8f:4d:09:01:0c:d1:20:b9:d0:
         3a:8a:7c:dc:4d:e3:5f:e7:82:1d:13:5d:ee:6f:aa:57:0b:29:
         ee:1e:65:39:07:64:32:ef:ca:be:2d:0c:90:ff:f8:18:74:e9:
         55:91:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:57:37 2026 by rpki-client