Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File:                     EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier:          QS617an6nFvKBr2pMwKqpVCJMe55o55isPzrwk+xZOI=
Subject key identifier:   C2:96:FC:02:A9:DC:E3:73:B7:62:CC:F6:FA:7D:AE:68:EF:85:05:37
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer:       /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial:       217C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number:          2170
Signing time:             Thu 08 Oct 2026 15:57:14 +0000
Manifest this update:     Thu 08 Oct 2026 15:57:14 +0000
Manifest next update:     Thu 15 Oct 2026 15:57:14 +0000
Files and hashes:         1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: eZFbm2wvvGJ8iqn8q4bbvQ/k8R/EXOH7YbfArp9YpqI=)
                          2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CbaVakrw0TtkU+Q7XuwXMaUsEoO5bFQk16pQPN02uwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 15:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8572 (0x217c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
        Validity
            Not Before: Oct  8 15:57:14 2026 GMT
            Not After : Oct 15 15:57:14 2026 GMT
        Subject: CN=6ac7bd5a-6d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3a:f6:ca:f1:3e:85:c9:f9:72:ca:39:3e:20:
                    53:9f:1a:85:c8:a5:c4:6d:45:09:40:a0:20:c8:5a:
                    14:ec:0f:73:2c:71:0a:f3:70:4f:fd:5c:87:65:6a:
                    98:36:c6:da:b4:c6:41:28:a4:32:a6:c0:76:d4:57:
                    7c:f7:dc:ad:73:4c:82:1e:1a:85:f7:02:c0:53:6f:
                    f8:d9:60:c7:2e:9f:06:eb:14:ef:0e:96:5d:3a:27:
                    06:d1:df:4b:c8:4d:ff:07:50:77:58:74:5a:4d:62:
                    f1:35:ea:48:d3:0a:59:45:9b:58:2a:e4:cb:11:2f:
                    c1:69:c6:5c:1f:82:77:1d:ff:78:8e:0d:68:49:79:
                    b0:73:ab:65:ac:0e:ed:ff:95:79:9f:34:dc:c4:e3:
                    67:13:f0:3d:0b:77:1a:33:25:53:cf:e8:36:79:37:
                    02:31:59:0c:16:18:f2:b6:a6:98:1e:70:e6:38:79:
                    18:36:1b:14:08:2e:2b:ea:32:51:aa:9d:4c:b1:51:
                    fa:55:64:2b:8f:70:cc:47:e6:a8:fe:fd:06:b0:ef:
                    ae:94:57:ff:10:f2:9d:64:15:26:80:2a:78:c9:12:
                    b5:8f:e3:6e:e4:c4:c2:80:e6:a0:49:fd:80:c8:0b:
                    18:eb:3d:84:2f:11:3d:d4:8e:c0:cb:e5:f7:7e:a8:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:FC:02:A9:DC:E3:73:B7:62:CC:F6:FA:7D:AE:68:EF:85:05:37
            X509v3 Authority Key Identifier:
                keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6a:f6:ce:d0:b1:b8:66:e2:9a:ad:05:6c:c9:b9:dc:6c:74:
         a8:b5:a0:4a:dd:cc:49:1a:48:bf:d7:83:ae:86:9d:f3:e5:e4:
         df:b5:a7:9c:21:8f:1f:58:27:12:a0:f4:fd:10:6a:b6:96:3e:
         f8:56:63:a0:4a:67:3a:9e:b7:b3:ca:9a:d2:26:9b:55:e5:53:
         d9:ec:b4:bd:3d:9f:a1:d8:e3:d8:7e:01:2a:38:42:b2:f0:95:
         58:ce:91:95:aa:b5:52:0a:db:1c:af:c9:ff:1b:33:98:b4:09:
         43:9e:bf:33:68:d2:19:d2:c5:3e:b3:f5:08:36:b2:53:00:6a:
         cb:48:f1:f7:92:35:f6:46:fe:93:40:a4:ff:ad:01:61:c2:6c:
         04:92:ed:29:59:9c:1d:c8:50:78:2e:9e:81:c5:12:a6:5f:dc:
         3a:8d:af:d2:cc:df:b3:92:10:e9:26:14:e1:ae:ec:9f:a0:d7:
         6d:19:53:90:25:cf:29:75:82:e8:ed:c6:2a:09:07:ca:d2:0a:
         5c:4e:1c:00:f1:09:c9:bf:64:9d:bf:00:7a:89:21:25:5b:12:
         c0:06:15:74:73:ac:ca:16:b9:df:bc:5b:5f:9b:02:1e:42:e2:
         00:a5:14:0e:ac:20:f6:19:7f:ec:5c:32:62:c8:47:35:d7:27:
         2f:03:f4:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB
QzFDM0E1RTcwHhcNMjYxMDA4MTU1NzE0WhcNMjYxMDE1MTU1NzE0WjAYMRYwFAYD
VQQDEw02YWM3YmQ1YS02ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiDr2yvE+hcn5cso5PiBTnxqFyKXEbUUJQKAgyFoU7A9zLHEK83BP/VyHZWqY
NsbatMZBKKQypsB21Fd899ytc0yCHhqF9wLAU2/42WDHLp8G6xTvDpZdOicG0d9L
yE3/B1B3WHRaTWLxNepI0wpZRZtYKuTLES/BacZcH4J3Hf94jg1oSXmwc6tlrA7t
/5V5nzTcxONnE/A9C3caMyVTz+g2eTcCMVkMFhjytqaYHnDmOHkYNhsUCC4r6jJR
qp1MsVH6VWQrj3DMR+ao/v0GsO+ulFf/EPKdZBUmgCp4yRK1j+Nu5MTCgOagSf2A
yAsY6z2ELxE91I7Ay+X3fqi9pQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKW/AKp
3ONzt2LM9vp9rmjvhQU3MB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw
REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x
aC11dGhFell4Q2FzSERwZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnmr2ztCxuGbimq0FbMm53Gx0qLWgSt3MSRpIv9eDroad8+Xk37WnnCGPH1gn
EqD0/RBqtpY++FZjoEpnOp63s8qa0iabVeVT2ey0vT2fodjj2H4BKjhCsvCVWM6R
laq1UgrbHK/J/xszmLQJQ56/M2jSGdLFPrP1CDayUwBqy0jx95I19kb+k0Ck/60B
YcJsBJLtKVmcHchQeC6egcUSpl/cOo2v0szfs5IQ6SYU4a7sn6DXbRlTkCXPKXWC
6O3GKgkHytIKXE4cAPEJyb9knb8AeokhJVsSwAYVdHOsyha537xbX5sCHkLiAKUU
Dqwg9hl/7FwyYshHNdcnLwP0hw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:40:46 2026 by rpki-client