Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File:                     EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier:          prax9y6Vsih3ypSaGcNpuaG7NSNLccVEk2O3+1WrFuY=
Subject key identifier:   42:27:2E:90:17:E0:F8:67:24:FA:7D:1A:BD:33:E0:99:78:A9:EC:80
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer:       /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial:       129A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number:          128B
Signing time:             Sun 04 Oct 2026 17:06:15 +0000
Manifest this update:     Sun 04 Oct 2026 17:06:14 +0000
Manifest next update:     Sun 11 Oct 2026 17:06:14 +0000
Files and hashes:         1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: 6zY0djFgN3Fvqfw18oQ7VlFCWOONFBtt0o/oHe+CjXE=)
                          2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
                          rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 17:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4762 (0x129a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
        Validity
            Not Before: Oct  4 17:06:14 2026 GMT
            Not After : Oct 11 17:06:14 2026 GMT
        Subject: CN=6ac28787-9143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f2:e4:88:bc:82:a5:29:3f:af:52:64:15:43:
                    56:e0:47:be:ae:e5:1e:1e:08:c1:9b:e4:af:c1:da:
                    55:83:c5:84:7d:24:01:e3:00:45:98:46:9d:55:eb:
                    58:6b:36:57:0d:ff:10:dd:19:c7:45:90:c2:fd:7b:
                    42:cd:5e:c6:b6:a6:13:d8:e9:03:f1:16:27:a9:93:
                    8a:d5:67:b7:4a:1b:f5:71:98:de:1b:c9:8f:6c:e9:
                    bb:08:08:97:83:7f:75:d4:89:0e:44:96:cf:70:86:
                    e8:39:4e:93:ac:93:5a:db:55:0d:ec:9c:70:1c:aa:
                    d4:bf:d1:5f:10:9c:ed:06:19:44:0f:29:25:77:ad:
                    ff:6e:dd:49:c9:18:c3:4d:42:89:f5:df:e6:a7:47:
                    fa:8a:26:7d:ec:42:59:89:2f:41:70:e8:5f:e5:87:
                    74:ce:9d:12:6c:84:7b:16:f5:48:ed:f6:04:b4:b9:
                    85:b4:7d:bd:39:98:06:db:7f:81:0c:b4:31:76:66:
                    b9:26:8f:62:95:61:3e:af:f2:b3:55:e7:ea:66:b7:
                    0f:d9:ec:e5:88:33:cd:0c:8e:6a:52:d2:ce:1c:e2:
                    a0:1a:78:3b:de:16:68:65:95:71:8f:32:c1:d9:b5:
                    d6:70:15:6f:1f:30:16:80:32:72:79:8b:16:b6:a8:
                    30:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:27:2E:90:17:E0:F8:67:24:FA:7D:1A:BD:33:E0:99:78:A9:EC:80
            X509v3 Authority Key Identifier:
                keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:ea:70:fe:22:26:43:fa:e4:e1:d6:65:e4:75:6e:a1:74:
         ae:c1:05:70:0c:72:b2:f0:d5:56:e1:9d:38:73:3a:6d:4c:69:
         39:16:40:fe:9f:42:57:33:23:0f:51:95:40:72:fd:a5:76:0f:
         ef:9b:d7:79:61:18:b7:f0:1d:24:48:9e:cb:b3:ba:9c:8c:cd:
         32:9c:b7:5d:e2:7b:8c:c8:ff:8d:a3:e2:10:af:ec:69:68:2c:
         47:0f:e0:a0:7e:c0:4c:ca:11:82:67:9f:7e:e6:33:f3:e2:77:
         06:36:1a:d4:d3:73:3f:69:1a:91:19:f0:5c:55:01:51:7e:5c:
         a4:ac:b4:83:2b:dc:6c:62:25:a3:ab:4c:33:12:ce:ce:da:e0:
         db:98:66:59:49:b3:d8:c2:9e:04:cb:d7:3f:15:87:0e:5c:d0:
         22:77:5f:55:86:ea:9a:f4:6d:0b:93:a2:59:98:de:dc:c0:24:
         27:d8:31:d9:bc:93:84:58:1f:d9:64:08:1f:f9:41:ab:19:9e:
         6d:73:ad:da:3f:1a:c9:b0:39:da:24:26:39:5f:9c:c9:86:79:
         56:ec:31:f5:84:81:85:0d:bf:4d:91:91:5e:60:35:c9:ee:59:
         37:d0:ad:42:f3:2c:73:f7:b8:ec:ef:a3:35:98:36:7a:3d:c8:
         45:37:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:37:45 2026 by rpki-client