Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
File:                     g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json)
Hash identifier:          v77JGwdf942d3TCxeww5f/i37dCtdcBMIXrSuTzKIuY=
Subject key identifier:   E8:F2:FE:41:2E:72:26:2E:BE:54:A3:44:3B:33:23:76:3C:3F:25:A9
Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89
Certificate issuer:       /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
Manifest number:          0273
Signing time:             Mon 05 Oct 2026 02:31:49 +0000
Manifest this update:     Mon 05 Oct 2026 02:31:48 +0000
Manifest next update:     Mon 12 Oct 2026 02:31:48 +0000
Files and hashes:         1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: FB7BdtllAXOgCynCSLLy5BL3voia/5XN2mU/5hNoXBA=)
                          2: 991CBF9A86F311F1B8F66003A7EE528E.roa (hash: jc4CCB8ZNjD5l8JwMnuS9o09cS9T+3d3PcbaK2GUzrA=)
                          3: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl
                          rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 02:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089
        Validity
            Not Before: Oct  5 02:31:48 2026 GMT
            Not After : Oct 12 02:31:48 2026 GMT
        Subject: CN=6ac30c15-63e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:65:2a:16:a2:08:bb:ef:cf:27:ef:5a:1f:ff:
                    f1:3a:22:a9:a9:1b:b2:51:d9:49:4e:88:a7:1a:cf:
                    2d:1b:06:38:d7:ab:47:65:09:79:67:44:05:f4:66:
                    90:5b:c5:9a:09:de:00:1b:a6:00:2f:e7:36:0f:fd:
                    36:55:87:98:ea:08:ce:ba:83:39:48:c7:0f:0a:f5:
                    0d:e2:1f:bf:c4:e0:49:f0:ff:03:06:5d:bc:ae:0e:
                    8a:68:b0:6f:ab:16:d6:d2:45:63:d2:71:46:7e:ff:
                    fd:33:66:56:3f:58:a7:15:0a:42:ae:f9:df:b8:d8:
                    3b:17:df:a7:fb:16:53:f6:ef:50:c5:70:4b:23:38:
                    da:e5:3a:92:3d:67:8d:4a:8c:16:c7:b7:17:40:a5:
                    11:1c:2f:f8:80:0e:b9:e0:1e:92:0a:b6:aa:31:bf:
                    2b:2c:9c:21:f1:80:f7:41:e5:71:9e:79:34:d1:ff:
                    0c:a6:b2:e6:09:a2:59:0e:eb:33:de:b9:5d:99:44:
                    4c:38:66:bd:d4:da:79:c7:e4:e7:e9:50:22:e8:a6:
                    cd:d5:8b:4b:62:0a:a7:94:2d:04:0c:4d:bc:4d:6b:
                    ea:ce:d7:40:9b:33:58:22:72:13:65:b8:b6:01:80:
                    f6:f4:c7:88:98:73:72:e8:b4:de:45:87:58:e5:ce:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F2:FE:41:2E:72:26:2E:BE:54:A3:44:3B:33:23:76:3C:3F:25:A9
            X509v3 Authority Key Identifier:
                keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:6b:a3:18:a1:c8:48:bb:d0:04:56:72:5c:dd:f4:01:f1:
         f6:0c:66:57:98:5b:e8:de:c5:e6:c9:6a:4e:b0:7c:81:60:21:
         69:c6:1d:c9:eb:a6:5e:f3:5b:b8:10:ce:49:2e:05:b7:0d:94:
         4f:1c:6e:8c:d4:37:69:09:00:32:da:96:d8:d0:7c:c1:16:15:
         33:6f:2a:0d:fe:b5:18:05:6e:c8:1e:6b:39:1b:6a:d3:34:8d:
         32:25:63:a3:f4:d8:a1:9e:0e:03:00:99:20:1a:98:3d:d3:68:
         51:3a:2b:82:c3:69:4b:18:cc:82:72:c8:d6:ab:8a:23:96:9c:
         35:73:a9:73:90:42:04:63:3a:2e:0d:cd:4a:26:b0:0e:d7:00:
         ac:ff:cf:5b:ab:8b:b5:29:0a:89:6b:7e:60:a6:ed:75:c7:03:
         6f:75:61:b3:16:44:c7:a1:19:42:af:4f:28:43:6b:6a:79:ce:
         26:dc:67:df:17:f6:14:74:43:13:47:20:e0:6d:93:8a:5b:25:
         79:57:08:bc:e1:16:8a:5d:49:ce:87:cb:46:f1:a2:94:58:70:
         48:e4:74:00:3b:f2:cb:d8:89:64:4b:8d:e4:ce:31:24:1b:5a:
         dd:de:6f:53:d1:76:8c:c7:ba:12:23:a9:b5:9a:66:3d:3b:9f:
         e8:4a:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:48:09 2026 by rpki-client