Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
File:                     hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft (raw, json)
Hash identifier:          arGw9yYavbVAW1Qbva2W3a3F/XOTHQXP1NqfZLIjYgo=
Subject key identifier:   36:F2:DF:B5:B4:82:22:28:C6:81:25:23:BD:7A:52:2F:32:A6:E5:FB
Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
Certificate issuer:       /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
Manifest number:          53
Signing time:             Wed 23 Sep 2026 08:03:14 +0000
Manifest this update:     Wed 23 Sep 2026 08:03:14 +0000
Manifest next update:     Wed 30 Sep 2026 08:03:14 +0000
Files and hashes:         1: hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl (hash: 3ssAPJzl8gXEFrOlTAw2L48KfFjmTWYzOJzXrdT5pWY=)
                          2: 2BC7F9083F0611F1ADBFCBF4C9833773.roa (hash: fjBBp9RAWRX1PPIA5V4SattdM60ZaCT18eTtLAtSLSY=)
                          3: yXbfSYbD29mEtJ_OVJA2nVuCtMk.asa (hash: z3ITVA5+vv3swb2erAhhZhDQWe0QlzjqbV+CNbmeheI=)
                          4: 04DF866C3F0611F1B36B08F4C9833773.roa (hash: ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
        Validity
            Not Before: Sep 23 08:03:14 2026 GMT
            Not After : Sep 30 08:03:14 2026 GMT
        Subject: CN=6ab387c2-ed27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e7:11:fc:3b:26:e2:03:20:7b:bf:f4:1a:20:
                    4b:27:90:50:cf:16:a7:ff:ea:f1:fa:01:57:bd:6f:
                    13:4b:13:c6:2c:32:c0:7e:d0:d3:31:88:ae:47:c5:
                    1b:8a:42:f2:11:d7:78:d9:f7:35:40:66:76:7c:e2:
                    2c:dd:92:d5:55:06:df:17:ad:2b:8c:95:86:84:8f:
                    36:f3:5e:f2:70:f9:0a:b2:cb:66:14:e3:43:ab:6d:
                    38:d6:19:a9:55:27:bb:ab:2b:b2:e1:de:77:a8:68:
                    be:52:7c:f2:34:04:af:42:cd:27:97:03:f4:68:a6:
                    28:d2:b4:dd:76:34:56:b3:ce:d9:1e:b6:c1:a6:41:
                    ba:90:1d:ea:0a:0a:ea:5c:2e:77:f4:c7:94:08:eb:
                    f4:e7:97:6c:7f:1f:e7:bd:1a:56:ae:8d:01:ed:10:
                    d8:56:b9:4b:7b:5d:87:e1:3b:63:2f:be:de:21:d5:
                    9a:83:02:ce:d4:6d:0c:55:17:7e:31:3a:70:52:96:
                    40:a8:45:f8:48:7e:9b:3f:98:9b:62:e6:14:d8:ff:
                    22:7d:d9:dd:50:12:ca:11:8f:4b:00:c2:60:54:0f:
                    c0:62:a3:27:ba:f6:5f:12:42:3a:36:aa:1b:c2:b7:
                    b6:4f:56:70:32:7f:1c:9d:d0:5f:13:b4:c5:e4:79:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F2:DF:B5:B4:82:22:28:C6:81:25:23:BD:7A:52:2F:32:A6:E5:FB
            X509v3 Authority Key Identifier:
                keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:96:40:c0:30:e3:3d:53:a6:7a:8d:2c:90:00:0c:e0:44:
         8c:7a:ee:39:57:ac:46:91:8c:64:0d:59:02:2b:e7:e0:07:22:
         e5:c3:7b:da:5f:5c:58:33:d2:5a:16:de:f9:68:5c:16:ef:a3:
         30:c8:4b:a8:70:e5:25:61:af:32:57:48:d0:82:96:b1:10:50:
         ff:5a:50:4f:d8:cc:43:65:12:c2:db:ca:da:5f:5a:a6:5d:d4:
         fd:a9:9e:15:c3:84:cb:8a:ff:e7:b4:77:27:24:ea:bc:4e:37:
         67:86:49:2b:fb:59:3f:40:0e:c3:24:35:49:fd:2c:2f:10:2b:
         25:91:c3:8f:19:9f:c8:b1:e6:ed:83:ad:ab:54:e3:7c:5b:d8:
         7d:22:d7:13:b0:ed:b7:21:19:cf:59:87:f0:e8:77:66:97:c2:
         20:f3:21:e2:44:ed:7f:51:51:a5:cc:1d:fa:67:0b:1e:19:f9:
         74:2a:17:2a:80:53:10:82:a1:86:52:1a:16:bd:aa:d7:97:a3:
         e1:31:48:09:19:f5:7e:07:cd:ba:8a:54:b3:80:2e:87:8d:27:
         7e:2b:9f:53:f1:af:2e:51:d1:98:ef:18:0f:85:8b:d6:d3:9d:
         c8:8a:c8:99:0d:76:22:26:31:f5:42:d0:b8:b9:35:fa:16:c6:
         69:ba:b2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:28:17 2026 by rpki-client