Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft
File:                     mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft (raw, json)
Hash identifier:          i/T8jSgxqy02VIDSTcctyPFUwxZYSs7oOcuAlXCgK24=
Subject key identifier:   32:E3:84:E3:91:CA:53:A4:11:BC:1F:9F:A3:E5:AE:6F:B9:BD:8F:53
Authority key identifier: 98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF
Certificate issuer:       /CN=A9190B12/serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft
Manifest number:          086B
Signing time:             Tue 22 Sep 2026 20:38:58 +0000
Manifest this update:     Tue 22 Sep 2026 20:38:58 +0000
Manifest next update:     Tue 29 Sep 2026 20:38:58 +0000
Files and hashes:         1: mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl (hash: pky9qVi145+2kp7XpycBQeTi/dArFnI6RMCuzkBYaVw=)
                          2: 0F785ED8171F11EB9D7AD884C4F9AE02.roa (hash: uYRcmYnVRR3f/0hv22P01RHvOApbvvFLiEzXRSMpgzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl
                          rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 20:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190B12, serialNumber=9874E6D61A60D8844C301D81F3377CBF34F0D8BF
        Validity
            Not Before: Sep 22 20:38:58 2026 GMT
            Not After : Sep 29 20:38:58 2026 GMT
        Subject: CN=6ab2e762-be6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:8f:7b:ed:17:78:f6:8b:25:c8:78:fb:18:
                    0d:34:4d:e3:10:9e:5c:67:47:cb:ff:b9:44:63:c7:
                    12:47:ac:73:b2:c5:f2:5a:ea:3b:44:7f:90:4d:fb:
                    a9:52:04:ff:f2:49:e3:65:00:ad:b1:aa:63:0d:d2:
                    47:2b:58:01:9d:fe:7c:85:27:07:31:3f:ed:f6:e0:
                    47:ed:85:6f:50:85:87:9e:16:e1:44:90:40:15:48:
                    f1:25:c3:06:86:84:65:06:c9:2f:77:19:d3:32:20:
                    83:0a:96:e1:a8:19:7e:75:12:72:fd:3c:23:1e:b4:
                    f9:8d:9f:20:9d:87:3d:dd:7d:c7:37:f2:3d:97:29:
                    13:73:bd:66:83:44:86:bf:71:a7:fc:0f:94:6d:60:
                    15:e8:9c:c9:98:aa:ed:24:00:a1:10:74:52:7d:39:
                    08:b4:8b:52:56:95:ad:c3:5f:01:85:a6:e6:3e:cf:
                    46:f0:9b:84:f0:0a:dd:f9:51:06:d9:10:ae:e5:68:
                    8d:e8:0c:f3:66:47:59:76:3d:a4:cc:e9:9e:5d:d3:
                    1c:ed:c8:77:2b:53:82:56:86:9d:aa:03:fc:68:e4:
                    96:7f:64:ad:f2:bf:25:e0:a6:1c:ab:06:a8:78:59:
                    37:bc:66:0c:4f:46:9b:2c:82:ad:c4:b9:a9:ee:0b:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:84:E3:91:CA:53:A4:11:BC:1F:9F:A3:E5:AE:6F:B9:BD:8F:53
            X509v3 Authority Key Identifier:
                keyid:98:74:E6:D6:1A:60:D8:84:4C:30:1D:81:F3:37:7C:BF:34:F0:D8:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mHTm1hpg2IRMMB2B8zd8vzTw2L8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B12/26D36278171D11EB833F4D80C4F9AE02/mHTm1hpg2IRMMB2B8zd8vzTw2L8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:42:60:97:ff:ae:34:20:f1:d5:d7:9e:8c:bc:e2:04:94:0d:
         c5:1b:bd:41:c9:d1:56:fe:9f:ec:a5:57:08:7e:d6:15:64:d4:
         93:3a:e7:ed:2f:cd:6d:aa:a7:c4:4f:e9:f5:90:d8:27:aa:72:
         25:82:0c:4d:63:3c:df:58:88:93:03:ad:f7:17:6b:f8:eb:f5:
         04:09:b9:bf:f6:ba:f4:17:56:8b:d8:c3:43:0b:39:d7:4f:4d:
         5a:77:a8:f4:6d:10:80:af:d7:b5:9f:36:e9:eb:18:be:e9:a9:
         95:32:dd:8b:49:78:4d:11:8f:25:d4:49:46:68:ee:8b:97:73:
         d0:fc:c1:aa:1a:e0:77:73:f4:2d:ad:91:32:c1:1f:5c:8f:9d:
         6f:8d:b8:79:6d:4a:84:62:fb:85:11:38:33:6c:b0:5e:9f:11:
         d5:67:4d:03:25:f5:b6:df:52:ac:79:49:5a:39:40:7e:75:b3:
         10:70:48:af:6c:6e:6f:61:b3:0b:22:b6:8d:f7:4d:f0:6d:7a:
         83:44:37:88:f8:cd:22:09:0b:d4:44:fc:ae:fa:ce:7a:97:ec:
         a8:7b:93:b3:09:41:3c:c3:d5:79:e1:b5:bf:cb:96:2f:c9:9f:
         59:44:64:68:b2:9c:37:f1:ac:34:b9:6e:5f:6b:fe:62:21:e2:
         44:41:5a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:54 2026 by rpki-client