Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
File:                     _egcp2lelKkL_f2D8Rp3NGMIF-g.mft (raw, json)
Hash identifier:          C075Kz2/1Aqh6x3Ww3dxd9fBE3+1dodC+ZpGnFQ9gR4=
Subject key identifier:   7B:2A:18:26:87:AE:FA:22:4A:82:A6:33:70:B6:F4:EF:BD:60:4D:FC
Authority key identifier: FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8
Certificate issuer:       /CN=A91127B5/serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
Certificate serial:       0226
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
Manifest number:          021D
Signing time:             Mon 21 Sep 2026 02:58:33 +0000
Manifest this update:     Mon 21 Sep 2026 02:58:33 +0000
Manifest next update:     Mon 28 Sep 2026 02:58:33 +0000
Files and hashes:         1: _egcp2lelKkL_f2D8Rp3NGMIF-g.crl (hash: y3CWiJR7USnEx0Ab+l3IFOMfPiw5EdmEQhvkvC2qP2Q=)
                          2: AA02862E890C11EE87862551C4F9AE02.roa (hash: txKDX+YhBJXdDuRQY7L74gG8NetRgth5sfhluKMRd0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl
                          rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 02:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91127B5, serialNumber=FDE81CA7695E94A90BFDFD83F11A7734630817E8
        Validity
            Not Before: Sep 21 02:58:33 2026 GMT
            Not After : Sep 28 02:58:33 2026 GMT
        Subject: CN=6ab09d59-8066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9a:d7:ec:ff:96:8f:47:e3:a4:ae:6b:2b:52:
                    e8:71:ca:f2:68:b0:49:ff:ab:43:01:38:a1:2b:cd:
                    28:d0:57:e7:d4:cc:32:f8:d3:48:0c:78:eb:b7:13:
                    7c:af:da:b0:50:97:fa:6b:b7:8d:d3:2c:48:eb:2d:
                    04:58:7c:2e:ef:29:91:cb:35:57:9c:8d:2b:d6:12:
                    60:38:b3:a0:5c:cb:0d:30:3f:4c:ec:78:c0:38:35:
                    4c:4f:21:6a:28:ad:69:8d:bc:15:01:c2:4e:a1:7d:
                    1f:70:07:0a:76:08:8b:41:63:3f:0f:c6:8a:ad:ac:
                    df:32:3a:dc:9a:0a:46:69:be:af:a8:95:30:af:4c:
                    dc:d3:eb:fb:b3:39:2c:3a:27:16:15:43:9f:38:96:
                    c0:7d:72:b0:c0:a7:95:17:c7:e2:4e:75:9b:50:35:
                    54:a8:de:8a:51:68:51:a4:76:f3:5d:36:32:33:67:
                    ee:3d:64:c9:ce:03:91:e8:ef:79:2b:36:45:6e:2b:
                    a3:03:be:a9:a8:73:00:ad:93:80:34:14:3f:92:45:
                    4c:94:50:3f:7c:da:57:84:7c:54:7a:00:41:0e:5e:
                    b0:04:03:6b:4b:da:52:58:a5:fd:68:37:41:ee:b5:
                    f2:df:ed:43:01:f8:94:53:b5:2a:ac:c2:99:c1:1b:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2A:18:26:87:AE:FA:22:4A:82:A6:33:70:B6:F4:EF:BD:60:4D:FC
            X509v3 Authority Key Identifier:
                keyid:FD:E8:1C:A7:69:5E:94:A9:0B:FD:FD:83:F1:1A:77:34:63:08:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_egcp2lelKkL_f2D8Rp3NGMIF-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127B5/0F194EAE890C11EE9DF72C50C4F9AE02/_egcp2lelKkL_f2D8Rp3NGMIF-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:79:b9:04:a6:8d:2f:66:08:4e:be:26:a9:31:6a:52:cc:55:
         b9:01:d2:bc:82:45:16:b1:6d:6b:c8:ba:bc:52:f3:6f:f0:ab:
         20:9e:20:ca:06:5f:88:22:28:a0:94:56:b6:aa:fe:5c:34:49:
         fa:ed:c5:ef:b2:9e:02:ab:ad:c8:4b:91:dc:bb:0e:dd:f6:96:
         39:ff:fd:87:d4:d1:ee:94:fd:7b:6d:eb:8b:aa:f5:6b:fb:59:
         4e:4f:9c:5c:cb:b2:18:82:0e:ea:9b:f8:41:40:a7:df:ef:92:
         6d:04:a1:ff:57:00:45:4f:8c:ab:35:d2:c0:91:51:08:71:33:
         5c:03:f5:b6:b2:14:64:cd:91:d4:5e:bb:79:f5:12:0f:4a:de:
         19:8d:26:b1:bd:85:78:30:b4:01:c4:43:a5:2b:89:1e:c9:2a:
         96:39:d3:fe:70:3b:f6:57:4c:50:58:4c:10:30:f6:2d:8a:9d:
         87:a1:de:e0:45:e2:42:17:19:25:d4:84:64:db:3e:7b:56:d6:
         d9:39:27:67:bc:5c:71:a3:a8:a3:e0:c2:0c:b3:5d:c3:50:10:
         6c:d3:25:7c:ea:93:1d:8d:2a:1c:dd:6b:03:97:3b:d8:3b:d0:
         ea:eb:be:4f:b8:5a:3e:98:05:bb:fe:8e:37:8a:25:28:6e:fe:
         98:aa:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:14 2026 by rpki-client