Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
File:                     h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json)
Hash identifier:          1BidyY6tYHul3frmlLBCD0/fr+XmvF8wsktlEby3xQc=
Subject key identifier:   65:3A:26:CE:97:8F:4B:63:83:27:9A:77:27:49:5D:EA:86:B3:8A:B3
Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE
Certificate issuer:       /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE
Certificate serial:       08E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
Manifest number:          08DF
Signing time:             Tue 22 Sep 2026 20:11:34 +0000
Manifest this update:     Tue 22 Sep 2026 20:11:33 +0000
Manifest next update:     Tue 29 Sep 2026 20:11:33 +0000
Files and hashes:         1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: qMKSN7shzJudksQwYlDu+BoDfe2/yt5m9W1Dg+SaxMU=)
                          2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: x5zzGg+10gujwwdvHGSHtg4DSreIyjT/dhlTPS5SU8Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl
                          rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE
        Validity
            Not Before: Sep 22 20:11:33 2026 GMT
            Not After : Sep 29 20:11:33 2026 GMT
        Subject: CN=6ab2e0f6-7c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:96:1a:49:19:53:51:32:8b:57:96:62:55:88:
                    3a:f4:35:72:cb:9f:3a:a6:53:dc:d5:7e:ca:6b:38:
                    66:16:ff:be:fc:10:84:33:8e:95:02:f8:e7:9c:82:
                    4d:77:d3:12:54:d8:05:1c:15:55:6f:e2:19:20:16:
                    59:5b:80:49:38:60:05:e2:ee:1d:86:ae:4e:ce:c8:
                    35:a2:87:da:d4:c1:5f:e1:54:94:4c:c9:2d:ab:2a:
                    d7:fe:1d:1a:e7:c5:4a:e8:4a:26:d3:29:63:aa:c1:
                    50:96:25:1d:d7:05:bd:57:7a:d2:60:95:7c:43:84:
                    c2:2e:8c:02:b0:9a:f0:f3:b7:3d:78:55:62:3d:fc:
                    db:26:6a:35:63:fa:36:0a:5e:cd:31:45:7b:ac:99:
                    27:bd:03:00:eb:84:c8:be:1f:bb:29:cd:b6:cc:43:
                    a0:fc:55:54:85:e6:0c:60:73:43:2f:24:ae:92:4e:
                    ad:8a:7a:5e:d3:4c:34:60:c5:f1:1d:81:54:39:80:
                    bc:36:10:9a:d7:96:d2:46:5a:9b:2a:e3:dd:a9:10:
                    bc:cb:a2:48:68:99:e7:6d:fe:ac:0e:d6:72:a6:09:
                    5f:5b:a4:6f:df:a4:01:31:75:ec:cb:23:f5:bb:a8:
                    5b:d7:e1:93:d5:da:65:41:a0:4f:5f:20:23:a3:f2:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:3A:26:CE:97:8F:4B:63:83:27:9A:77:27:49:5D:EA:86:B3:8A:B3
            X509v3 Authority Key Identifier:
                keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:13:8b:b9:9b:3c:2a:22:d7:3c:0c:55:3e:53:10:64:ef:2b:
         b4:98:9d:98:36:e7:89:1e:db:15:8c:81:97:b2:bd:56:1f:55:
         a6:16:84:6d:ab:61:1f:93:3e:80:7a:9e:4e:0c:a8:f3:5a:a7:
         e4:78:a2:3f:e8:8f:96:1f:d6:e3:c3:86:2d:05:f6:6d:bd:27:
         5b:8a:3f:5d:3a:56:a5:6f:2d:ce:8c:df:2b:ab:04:e4:59:8f:
         cc:5d:59:0e:c3:ae:a3:57:2d:6e:94:56:c3:8f:ee:87:85:a6:
         66:e0:1d:87:d9:fe:41:db:c8:c4:63:7b:5e:6b:26:c2:b7:ef:
         69:2d:25:9d:fa:47:1b:9a:be:53:c8:35:5e:48:a5:ba:f1:43:
         c1:bc:2a:46:69:fe:18:9a:e6:7c:7b:a0:31:d8:32:39:51:1c:
         8d:eb:d5:b5:92:e5:4d:fb:ab:0b:c2:f5:33:8f:37:d3:c3:bf:
         ee:ea:a9:d8:f2:8b:be:6a:00:3c:a8:a2:21:b5:1e:8d:a0:d1:
         00:bf:3e:e8:f6:72:06:13:59:7a:6f:35:01:90:a3:69:5f:82:
         20:63:0c:03:ef:c4:6a:2d:4f:75:c7:64:65:f6:8b:e0:2b:36:
         2f:68:6d:6d:79:df:67:38:2a:26:b1:7c:b0:fd:6d:2c:1d:34:
         d4:74:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:34 2026 by rpki-client