Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
File:                     EMpiwqdJv5H1YirewPGWGEk8u6k.mft (raw, json)
Hash identifier:          R5a8Y6VFjaFJ/XXwL7ItRMSSJF2wwMVzwAUWTfG4LCk=
Subject key identifier:   C3:29:D0:B2:99:2B:33:65:EE:BE:20:3F:25:72:D4:73:74:B2:AE:97
Authority key identifier: 10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9
Certificate issuer:       /CN=A91306B2/serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
Certificate serial:       02EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
Manifest number:          02E3
Signing time:             Sun 27 Sep 2026 01:17:14 +0000
Manifest this update:     Sun 27 Sep 2026 01:17:13 +0000
Manifest next update:     Sun 04 Oct 2026 01:17:13 +0000
Files and hashes:         1: EMpiwqdJv5H1YirewPGWGEk8u6k.crl (hash: 4XWKFH82srBh+bK7HR9/mRhAjRkkLHakbrjBR9M22Y8=)
                          2: 695CA6D414BF11EEB8B95B7FC4F9AE02.roa (hash: 7oAXnZAUBtQjX3ZHXMNMC7v8KvbechSNV9axONzAjso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl
                          rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 01:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91306B2, serialNumber=10CA62C2A749BF91F5622ADEC0F19618493CBBA9
        Validity
            Not Before: Sep 27 01:17:13 2026 GMT
            Not After : Oct  4 01:17:13 2026 GMT
        Subject: CN=6ab86e99-ce37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:ef:a5:cc:f2:e6:8a:96:6c:90:3e:19:0a:
                    2d:2a:e6:eb:46:f5:7d:91:cc:35:35:c9:56:1b:e2:
                    dd:ba:ae:33:16:e2:8c:1c:f8:20:52:82:3f:5b:78:
                    13:6b:32:72:ce:39:89:a9:ad:2a:49:04:1a:8b:19:
                    12:eb:d2:8d:c7:b7:49:1f:0a:44:93:7e:12:3d:8e:
                    de:12:e2:bd:3b:7c:83:e4:7a:ef:98:40:a1:4e:0c:
                    59:e1:b3:63:33:cb:92:a5:4a:45:0b:46:1c:e1:e4:
                    0a:5b:56:a5:d8:ca:ea:be:63:a1:36:89:9c:2b:1f:
                    be:81:ec:27:53:80:94:8b:de:3b:63:d8:0c:7d:54:
                    bb:34:26:e4:9b:65:de:e5:a7:18:4b:84:ec:a8:e9:
                    b6:68:5d:91:a4:43:f4:73:e3:fa:fd:2b:b4:5d:e4:
                    d9:b8:11:50:d4:76:d0:28:99:9c:e5:aa:8c:48:49:
                    ac:cb:c5:74:61:60:97:ec:5a:2a:45:8d:ce:13:04:
                    6b:95:ad:05:98:37:a1:c9:f7:ba:4a:fc:58:3f:c0:
                    e9:4c:f4:dd:63:6f:69:4c:a3:4f:73:a4:8c:b7:bf:
                    6a:74:87:e8:43:e8:6f:60:f6:ff:89:6b:6a:5e:f1:
                    a2:dc:e5:b5:d8:22:ad:26:db:0a:ab:58:ec:5b:71:
                    23:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:29:D0:B2:99:2B:33:65:EE:BE:20:3F:25:72:D4:73:74:B2:AE:97
            X509v3 Authority Key Identifier:
                keyid:10:CA:62:C2:A7:49:BF:91:F5:62:2A:DE:C0:F1:96:18:49:3C:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EMpiwqdJv5H1YirewPGWGEk8u6k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91306B2/321FDD3E4D8311ED87FB1E6FC4F9AE02/EMpiwqdJv5H1YirewPGWGEk8u6k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3b:a1:3c:75:2c:86:dd:4f:50:72:5d:c3:4e:6d:06:f0:17:
         30:e2:d6:71:81:fa:b7:f9:fc:db:2f:18:2e:ad:d5:d0:23:2d:
         61:dd:cf:19:38:ef:b8:33:42:ac:39:ec:db:ea:bb:e7:70:22:
         c9:03:7a:46:a7:b0:59:6d:c1:d4:b2:99:d8:6d:8c:ee:29:15:
         89:4f:6c:ba:dc:16:66:b2:11:02:4f:2c:ab:5c:39:64:1a:e5:
         26:88:78:7a:1c:6f:d5:38:f2:cc:ee:35:02:a2:e0:af:32:4b:
         af:74:a5:ae:cd:02:de:53:29:e3:7e:de:61:71:b1:5d:09:9b:
         24:ec:b7:2c:18:c3:af:81:55:79:db:97:5e:cc:a1:98:4a:75:
         78:38:d2:e6:f4:93:78:b4:71:0b:21:60:e4:6c:b8:d7:bd:55:
         43:bf:77:47:0c:33:4b:a4:69:cb:09:21:87:13:37:16:48:4c:
         27:a3:3e:f9:21:32:86:03:0d:58:b3:a5:9a:91:f6:a7:b1:59:
         3e:7e:70:63:e4:9e:6b:cd:f8:8a:78:cb:d7:2b:b4:b1:53:e7:
         53:fd:52:f5:e6:46:72:63:a9:4f:a6:b4:85:17:dd:a2:9a:ff:
         9b:ba:da:47:44:93:4f:bc:5f:69:3a:89:aa:0d:1b:3f:3f:75:
         2b:70:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:03:17 2026 by rpki-client