Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File:                     ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier:          ZtG3sV4wQAzENDdZT4azz99dGGoOEm7FlYWzjNUTObY=
Subject key identifier:   F1:2F:7D:1E:58:77:48:31:CB:10:D5:35:13:37:CB:D7:4A:EA:8F:D2
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer:       /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number:          0154
Signing time:             Mon 21 Sep 2026 05:17:38 +0000
Manifest this update:     Mon 21 Sep 2026 05:17:37 +0000
Manifest next update:     Mon 28 Sep 2026 05:17:37 +0000
Files and hashes:         1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: NXXfRJtv51lnBlY6gzi8dlLMMxnkEkUrurhjc1skRMc=)
                          2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
                          rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
        Validity
            Not Before: Sep 21 05:17:37 2026 GMT
            Not After : Sep 28 05:17:37 2026 GMT
        Subject: CN=6ab0bdf2-a116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:36:c2:09:d2:db:64:64:07:c4:dc:ba:eb:
                    aa:a5:a5:47:ea:60:30:4c:21:da:8c:2d:c0:80:16:
                    d2:80:34:b8:92:89:cb:3f:32:ce:52:7c:1b:0c:1e:
                    c7:48:2a:17:f9:bc:dd:3e:33:b2:71:0a:c1:54:e6:
                    93:c8:fa:cf:79:cc:8e:6d:8b:5e:be:44:8d:14:79:
                    b9:d2:ef:cb:0d:15:46:a0:7a:bf:2f:a3:39:18:13:
                    45:04:78:01:65:8b:79:2d:0c:77:eb:53:7d:3c:45:
                    b1:25:5c:24:16:57:5b:e4:86:e7:03:de:e2:2c:ce:
                    98:06:42:98:5d:d8:3b:93:49:bc:4d:5e:f8:24:d0:
                    8f:b4:37:11:59:7d:c5:e6:55:5d:ed:fe:ce:08:20:
                    19:0e:41:31:ad:d9:1a:4e:1b:cd:dc:c3:8d:5f:18:
                    3e:3f:0f:29:a6:54:b3:6d:1f:c8:34:ed:9a:3b:32:
                    7b:f5:e8:23:c9:fc:62:e6:02:a8:60:5d:94:15:38:
                    83:06:66:d2:ed:96:79:70:8d:95:52:6b:47:05:80:
                    ae:4e:d2:06:c8:f4:02:d3:de:8c:4a:36:24:6f:ba:
                    14:b8:42:fe:49:6e:bd:fa:fa:56:5b:46:f6:5f:bc:
                    92:83:13:a7:cb:2f:dc:9f:8d:42:3d:07:60:ef:a5:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2F:7D:1E:58:77:48:31:CB:10:D5:35:13:37:CB:D7:4A:EA:8F:D2
            X509v3 Authority Key Identifier:
                keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6c:02:03:7c:06:12:ae:e0:52:2c:48:ef:27:63:a3:1a:cc:
         9a:ef:64:75:05:e4:3a:c8:c4:0d:7c:d7:a3:0b:0e:fa:5b:34:
         f4:f9:1b:5b:56:ed:df:6f:7c:93:08:e4:80:7c:ad:be:26:a5:
         b6:c9:39:a9:54:79:6c:6e:00:9e:55:64:d3:e7:92:06:84:bd:
         57:1e:d2:0a:35:32:eb:ca:ba:76:fc:fe:9c:c6:bd:e0:a4:c1:
         c6:e1:23:01:81:ac:8e:74:a1:1c:13:f9:73:9a:02:da:6e:93:
         ea:0e:76:dc:a8:37:6c:cb:9c:dd:13:c7:d1:ec:bc:41:d7:f6:
         4a:34:bc:5a:a6:3d:b3:20:6b:75:08:b9:45:c9:df:52:57:40:
         25:b0:a1:eb:53:2c:d2:31:21:fb:92:41:41:63:1c:84:33:ef:
         fe:ec:d2:39:02:d3:2d:3b:26:9b:a1:5b:da:89:eb:29:0f:0c:
         73:ee:cc:0d:84:f4:dd:b0:aa:0c:80:9c:fd:dc:07:13:09:58:
         26:bb:f0:91:e4:6b:a5:51:8f:d1:bc:07:82:5b:6d:d7:f6:42:
         c5:c5:1f:79:6d:96:a6:a9:d3:68:dd:f3:31:37:17:59:b3:32:
         b7:3d:7d:45:0f:37:c2:a3:e7:e6:71:b7:40:33:13:ea:48:0f:
         e8:55:a3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:21 2026 by rpki-client