Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
File:                     ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft (raw, json)
Hash identifier:          90Awyv89a4O9A8JezRlStH0FBc5jkG6nzh4UmrMuz5E=
Subject key identifier:   7C:AF:50:11:1C:71:8F:C4:4F:29:53:D5:68:08:0C:9C:C8:CE:B9:B0
Authority key identifier: 6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7
Certificate issuer:       /CN=A919C451/serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
Certificate serial:       0D46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
Manifest number:          0D38
Signing time:             Tue 22 Sep 2026 18:05:28 +0000
Manifest this update:     Tue 22 Sep 2026 18:05:27 +0000
Manifest next update:     Tue 29 Sep 2026 18:05:27 +0000
Files and hashes:         1: ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl (hash: /6yOreuqIS6QDGkcF2MqYlzGiwwVPMTYuY810H8sVwk=)
                          2: A71C98C4B00411F184AE3FF86611F970.roa (hash: 0qf+ZPszaZ90AY479kx3fJzerzO61Sj4OArotXEpOV8=)
                          3: 46836218B00411F199D785AD6611F970.roa (hash: 75k5rEpcgz3vp3EOdLhixBQ7Kaiu/ExepMO2+t7KbxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl
                          rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3398 (0xd46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C451, serialNumber=6A185BF417A2EB02A12E19D57590AD8D118475F7
        Validity
            Not Before: Sep 22 18:05:27 2026 GMT
            Not After : Sep 29 18:05:27 2026 GMT
        Subject: CN=6ab2c368-05f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:bf:25:8e:1b:66:35:52:29:24:92:ca:a7:
                    d9:b2:63:96:92:ad:af:76:62:31:67:3f:a2:d5:d9:
                    9e:82:52:0e:96:27:2f:cf:e4:86:14:45:19:15:71:
                    bf:3f:2b:5a:a8:b7:0a:1e:b9:a5:49:1a:ea:44:a4:
                    3b:db:2c:6f:29:16:bc:ab:6f:1c:4f:43:87:f7:93:
                    39:07:3a:ce:b6:ba:c8:da:f2:9a:a7:48:d0:69:f1:
                    1c:be:d1:2e:40:eb:19:e7:d4:e1:f9:85:03:46:dd:
                    a0:2e:08:e6:b5:4c:78:41:30:88:0f:53:2e:57:cb:
                    58:50:82:fc:99:04:21:07:2d:ed:6c:0b:2b:6b:0f:
                    00:92:50:4d:35:71:f6:f1:cd:21:5e:8c:1a:87:74:
                    d3:18:1f:af:da:9b:04:0e:aa:47:ab:54:37:55:bd:
                    65:1a:da:db:9a:2e:a8:05:47:f3:6b:69:06:12:f9:
                    96:05:ef:9e:e4:27:a9:ab:82:1b:66:e8:17:28:9c:
                    bd:09:09:82:30:17:6a:1b:8d:ae:6b:53:72:b6:cc:
                    ea:30:70:c5:cd:64:4c:f2:6b:12:4d:60:96:d1:5d:
                    e4:12:7c:5f:1c:ce:5e:e7:0a:2e:3a:6c:3a:24:a2:
                    85:35:95:29:d0:3f:5a:8a:4c:a3:9c:ef:5d:ec:58:
                    08:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AF:50:11:1C:71:8F:C4:4F:29:53:D5:68:08:0C:9C:C8:CE:B9:B0
            X509v3 Authority Key Identifier:
                keyid:6A:18:5B:F4:17:A2:EB:02:A1:2E:19:D5:75:90:AD:8D:11:84:75:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ahhb9Bei6wKhLhnVdZCtjRGEdfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C451/B934937A06D011EA8D438C3FC4F9AE02/ahhb9Bei6wKhLhnVdZCtjRGEdfc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:22:3b:26:61:d1:d3:7f:0b:90:18:7f:2e:e7:cf:2e:0f:
         88:ee:c2:69:51:21:0d:72:bd:f2:8b:b7:d9:59:b4:b4:57:9c:
         c7:b2:04:0e:93:64:5b:91:ac:10:69:b8:8b:e0:26:77:25:cf:
         1d:48:e0:4a:90:90:d7:08:97:b1:29:0e:35:b6:af:c5:c7:9b:
         fc:34:b4:3c:74:4f:c0:73:bf:0b:32:8b:b3:09:92:24:c6:37:
         6a:16:56:5d:fb:f4:e4:a1:83:81:27:3a:4e:87:71:27:b1:50:
         9a:33:46:71:87:50:af:24:40:d4:01:53:88:89:72:1e:d9:0a:
         04:89:7a:32:fd:2c:95:e1:5b:15:11:ac:d0:7a:31:75:54:a1:
         fc:85:7a:e6:74:cb:fd:77:29:90:e9:46:2c:ae:b1:69:c7:dc:
         cb:bf:e9:8c:8e:f6:48:0a:eb:e7:c2:25:1b:6e:7f:21:eb:b7:
         73:11:34:96:fa:51:32:1d:75:24:48:97:a0:b0:87:86:2f:d3:
         8d:55:9a:c9:2b:5a:d0:8a:36:dd:c1:2a:26:7f:2a:87:71:44:
         4e:2c:7c:cb:22:16:bd:e1:a9:95:41:ea:dc:b0:e8:63:52:22:
         49:12:9b:c2:9c:30:86:ad:5c:9e:dd:d1:a1:20:aa:31:95:51:
         b0:96:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:41:33 2026 by rpki-client