Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
File:                     HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json)
Hash identifier:          mXr0qgPXKgjULW87OR7LqjbxVRJLamN+xt+szHPJHrs=
Subject key identifier:   6C:87:99:0E:1A:82:4F:96:F8:98:C6:72:39:E2:39:5D:BF:E6:E4:75
Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58
Certificate issuer:       /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
Certificate serial:       01F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
Manifest number:          01F1
Signing time:             Wed 23 Sep 2026 03:15:11 +0000
Manifest this update:     Wed 23 Sep 2026 03:15:10 +0000
Manifest next update:     Wed 30 Sep 2026 03:15:10 +0000
Files and hashes:         1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: OIF6IeauAGwcTv9Da/gQ3x1FrSY0lrsy6mfButVcPAM=)
                          2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: LectFDdTSMn7loXlQ2Wf7gPQucdUaSBxJzRdeIEEXm4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl
                          rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658
        Validity
            Not Before: Sep 23 03:15:10 2026 GMT
            Not After : Sep 30 03:15:10 2026 GMT
        Subject: CN=6ab3443f-2cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:df:6b:c0:fb:f4:c8:c8:c2:43:b2:19:3b:
                    a5:bc:f9:5d:4e:f2:4a:f7:61:77:06:93:de:33:06:
                    41:43:4e:a3:c5:bc:b7:95:55:0f:96:f3:70:6d:a0:
                    f0:72:96:65:ce:71:e2:6b:70:f6:dc:e4:1a:d1:c3:
                    87:9b:1e:95:dd:f8:8d:9f:2d:39:41:a3:5c:ad:30:
                    86:c0:a6:73:fb:28:0e:bc:d2:64:7e:38:0b:a0:f1:
                    19:01:97:81:db:df:c1:82:ee:30:0a:69:ea:8a:a4:
                    48:69:60:b9:a9:46:d3:ec:2d:85:1a:bd:96:03:e6:
                    93:5a:9f:04:9a:e4:b1:41:78:08:25:b0:4a:56:66:
                    d0:66:29:b0:af:80:30:12:4a:73:78:7f:24:28:ea:
                    7a:7f:3c:11:72:f6:c5:ae:db:5d:08:3d:7a:b9:94:
                    ed:7c:a6:fc:a5:bb:4a:7f:ee:d4:57:b9:2e:dd:df:
                    45:c7:a2:ab:eb:28:42:b9:93:3a:0b:6f:41:76:7c:
                    66:74:d4:4a:e9:77:38:e1:ef:dd:9a:f2:5b:68:6e:
                    99:fb:29:bd:32:b7:eb:b5:27:b0:8a:29:c2:4a:d5:
                    3a:7f:2c:e2:c4:5f:93:3a:d4:46:98:21:bd:5b:93:
                    a5:7b:34:c8:2b:8d:2f:df:1a:2d:db:59:5d:e9:0d:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:99:0E:1A:82:4F:96:F8:98:C6:72:39:E2:39:5D:BF:E6:E4:75
            X509v3 Authority Key Identifier:
                keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:06:c9:d6:22:28:c3:7c:86:1b:2a:e7:4e:10:49:c8:18:b6:
         60:95:d1:56:d7:3b:d3:11:51:98:4c:c6:68:2f:f2:17:20:07:
         7c:a6:0f:8c:95:af:2b:c1:38:e2:72:f6:c1:8c:38:34:24:dc:
         2e:4f:2d:23:4f:9a:09:31:4f:b8:e0:d8:6c:8b:ea:70:08:3c:
         13:1b:8c:9b:45:b2:cd:f4:a7:0b:67:99:a1:3d:f2:06:37:3c:
         6a:c9:55:ba:e6:10:88:54:15:f3:e4:0b:91:7b:b5:f0:51:1f:
         fa:19:ca:dd:6a:36:9b:b3:06:af:69:f4:47:67:4b:a0:88:a0:
         19:1d:ae:f8:16:eb:6a:12:7d:0b:5c:59:8a:c1:07:bf:5c:4f:
         e7:4b:db:2a:05:f7:cf:8d:aa:19:0a:0e:57:b1:f6:60:4c:8a:
         d4:ca:46:d3:d3:fa:2f:9c:6b:8f:eb:62:81:fe:e0:0b:e2:a7:
         41:4d:4f:8c:cc:8b:4c:6c:16:d2:25:0f:44:bc:89:0e:a6:d8:
         e8:9f:65:67:a5:b8:19:63:21:1b:c6:b9:17:c0:a0:17:c4:2d:
         d9:0c:60:4a:e5:33:6f:af:63:e9:f7:6d:75:8b:a8:a1:07:11:
         cd:8f:97:41:40:4a:a7:a6:77:2b:d9:d7:83:4a:f5:ae:bc:17:
         1a:df:d3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:51 2026 by rpki-client