Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
File:                     scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json)
Hash identifier:          bw1RjsU2RNamzZOwD9pFKYseybBYzgwTERjTPeVVZas=
Subject key identifier:   3E:9C:E0:B9:71:49:3C:0F:E4:6B:E5:78:D9:C3:3A:F1:34:4A:DA:46
Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B
Certificate issuer:       /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
Certificate serial:       07DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
Manifest number:          07BE
Signing time:             Tue 22 Sep 2026 21:11:53 +0000
Manifest this update:     Tue 22 Sep 2026 21:11:53 +0000
Manifest next update:     Tue 29 Sep 2026 21:11:53 +0000
Files and hashes:         1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: JFVarBLekfkQv6/zLLHIoVS7ob8RSnRzh5WWObDs9mQ=)
                          2: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: OuyC5TmVNJMLDabcwM8A0FwhQBrfR/VlGDzUJTCn8/U=)
                          3: 2mAvWNmJ-wT9J8VEJAZoZpykpf8.asa (hash: ZJ5wRyiN9xTWxZ56f7HInHFmchNgRi4/XyNoHCmCObQ=)
                          4: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: WVvSpMhKFxSN9i8JnDOZYNXQPB/pQobS+FdjnkNHrVI=)
                          5: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: QtOxsjWDqgNGgCTcsMTzCCptaAMNkGCIlXxZlBPaZcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl
                          rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 21:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012 (0x7dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B
        Validity
            Not Before: Sep 22 21:11:53 2026 GMT
            Not After : Sep 29 21:11:53 2026 GMT
        Subject: CN=6ab2ef19-8ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:d8:25:ba:4c:19:78:9b:6f:05:73:a1:33:
                    5e:9c:9f:f0:51:de:73:d0:02:e0:ca:6c:07:cf:fc:
                    b0:33:ef:03:0e:fa:0e:53:ce:34:c4:19:63:4c:82:
                    5d:92:16:1b:03:6e:98:cc:8a:bd:17:a6:73:ea:0a:
                    ec:8c:cc:1b:53:33:b7:77:a3:7b:ba:2a:b9:bf:d4:
                    91:27:3a:7f:bc:a7:e9:71:d8:ea:5d:ac:5c:4a:47:
                    57:46:db:97:59:e1:af:38:e6:d7:c1:08:e3:c6:2d:
                    33:e8:50:20:6f:38:fe:9e:9a:94:15:d0:62:1b:4e:
                    fa:21:9c:51:63:e9:f8:c9:bd:7c:97:db:a8:7c:44:
                    0c:59:b9:62:6d:0e:e1:a0:56:65:f9:f9:b4:52:de:
                    35:23:b7:36:7d:80:90:85:dc:a2:08:bd:c6:4a:af:
                    f4:91:d4:dc:0c:af:97:07:64:c5:fd:6a:bb:c5:20:
                    7c:ad:b0:79:e7:03:c2:74:e5:e7:07:a5:c3:ae:85:
                    f1:89:bd:27:54:5e:23:3c:94:57:01:0d:c7:64:63:
                    3c:0d:e8:98:2d:08:3d:eb:4a:50:c8:29:b2:c0:46:
                    ba:b3:c9:da:96:fd:49:f5:e3:2f:97:14:1f:be:45:
                    1b:aa:6f:8a:4f:18:76:f4:a4:e1:68:09:72:f8:97:
                    d9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9C:E0:B9:71:49:3C:0F:E4:6B:E5:78:D9:C3:3A:F1:34:4A:DA:46
            X509v3 Authority Key Identifier:
                keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:78:01:93:f4:aa:c6:5d:76:8d:59:8d:a0:2e:e3:71:a3:6f:
         62:fd:54:9d:f0:4a:00:09:aa:b4:5a:0d:63:d4:2e:af:8a:6c:
         e2:28:e3:6d:fd:33:8c:de:76:11:7a:af:2a:72:23:2b:55:f9:
         4b:5e:09:19:f7:52:e4:ab:e8:5a:e7:b8:f8:f9:77:0b:69:ef:
         85:ca:cb:4e:b9:9a:18:7f:25:98:e1:11:1d:5c:ac:d2:a5:f1:
         05:c6:5a:a7:dc:22:92:83:c2:d1:e9:47:20:d6:f2:90:78:7a:
         30:90:9c:b9:db:74:4c:ae:ca:f6:56:47:5f:38:05:2f:79:91:
         54:37:7a:97:f7:90:dc:4a:ed:a3:09:61:da:cf:ad:f3:83:6e:
         f5:08:b8:57:ef:80:aa:22:b0:ee:56:89:51:71:6e:b9:bd:2f:
         20:c3:f5:6a:a8:6d:da:1e:b4:dc:22:ff:91:17:46:39:d0:10:
         ab:94:db:59:3d:84:34:8a:cd:af:75:74:0e:ca:f3:3d:4e:28:
         80:b1:11:a2:bd:42:e6:f9:54:1f:74:9e:27:28:ad:d3:80:ac:
         9b:be:e5:cb:2b:8f:58:d7:a6:16:88:17:20:c7:28:7a:4d:ce:
         63:e0:da:6f:77:1f:4a:5c:e9:73:c1:af:1a:e5:21:85:62:6d:
         50:42:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:06:01 2026 by rpki-client