Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          oywLFVBp8m2pT3Z1ZISBT0HS41SiO5MxcMzmWi5sHC4=
Subject key identifier:   12:95:1B:98:B3:C1:46:2B:DE:D6:BC:62:78:99:A5:18:4C:E8:4F:66
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       0216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          0211
Signing time:             Sat 19 Sep 2026 03:03:13 +0000
Manifest this update:     Sat 19 Sep 2026 03:03:13 +0000
Manifest next update:     Sat 26 Sep 2026 03:03:13 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: wi6UZVfG0ch4ELNhYgQfaFqhOdk30ZjleAbGoBVFFjg=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: VhLN1aZzqiikbTrPMY7QXPTuOPPGxbfjsop6eJxwkqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 534 (0x216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: Sep 19 03:03:13 2026 GMT
            Not After : Sep 26 03:03:13 2026 GMT
        Subject: CN=6aadfb71-d2ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f9:91:45:f6:dc:1a:08:f3:23:8b:bf:16:03:
                    9d:ac:9b:11:38:31:e3:12:62:f4:f5:4b:39:98:57:
                    45:fe:22:c8:f6:f5:70:38:08:85:50:20:dd:2b:91:
                    e9:0e:fc:da:6f:5b:f4:4d:78:e8:19:c8:3d:08:d7:
                    b6:fb:ff:84:0d:3a:58:c7:70:e3:02:9d:04:ce:f8:
                    0b:84:cf:1d:e6:48:93:fc:c4:18:9e:bf:4b:af:a3:
                    01:de:fc:79:c8:80:3e:bf:67:5c:97:fc:2d:e6:69:
                    38:67:a8:72:31:2a:b1:60:6f:01:fd:8a:97:bf:d3:
                    bf:26:93:23:06:e8:c9:fc:b6:b3:4d:b1:64:7f:79:
                    e2:a0:31:a1:0d:cf:42:78:21:f9:2b:8a:7d:08:c9:
                    5b:f7:11:72:30:7a:b6:49:0b:19:c0:df:1c:f9:3b:
                    9d:a4:c9:55:cc:3e:38:cb:51:e2:f1:cf:43:e3:e9:
                    5b:c1:bd:49:59:d0:c1:3c:7f:1d:b4:97:3d:4b:32:
                    f6:c5:88:3c:0b:b5:2b:66:5f:ff:cc:7e:c6:97:35:
                    68:d2:c4:61:07:6a:a4:ad:74:52:49:8b:59:8e:39:
                    f5:b0:2a:64:83:5d:c8:b4:fe:dd:90:1c:51:e0:17:
                    00:21:d2:d8:5a:10:5b:ce:1e:65:ec:e7:b3:ef:bb:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:95:1B:98:B3:C1:46:2B:DE:D6:BC:62:78:99:A5:18:4C:E8:4F:66
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b9:9c:0e:ec:91:ff:df:9c:f3:36:96:80:bb:e0:08:a5:fc:
         0e:5c:86:e9:5e:7b:42:df:69:d7:d5:40:ae:fe:85:27:31:39:
         11:e9:8c:c6:59:40:d6:3c:c1:5b:2c:de:10:e5:fe:71:fc:56:
         6f:50:94:02:70:16:b7:da:68:ae:c1:f2:c5:b5:ad:a0:e0:d5:
         e3:b3:c0:c2:12:5a:e5:e3:33:76:8c:86:dd:c5:a7:ca:9e:4a:
         42:c8:21:29:3d:55:70:70:7a:7b:46:28:54:e8:67:cc:c8:24:
         45:2d:9d:24:cb:63:39:1e:35:42:0b:74:4f:e2:57:ed:77:59:
         d0:9f:d2:92:08:7f:69:18:b0:d3:f1:a9:87:59:56:d7:fc:2a:
         d8:61:ec:e5:ba:63:cd:e6:b2:0b:25:f3:03:ed:65:b3:53:ed:
         ad:e9:9a:9c:38:83:42:6c:05:0a:45:9b:b3:4d:25:0e:e5:5d:
         90:f6:e3:bc:de:02:24:f1:7c:43:a9:6b:ff:61:8a:8b:4a:57:
         d3:59:10:4c:1f:73:50:83:2b:07:9c:e9:0a:51:6d:fb:41:9b:
         37:58:ba:50:6e:ba:fd:51:22:9d:cc:07:5e:b9:7f:41:cc:74:
         49:83:50:bc:ce:54:fd:2f:cf:92:21:95:5b:a8:0b:bc:fd:67:
         4e:93:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:45:46 2026 by rpki-client