Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
File:                     EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft (raw, json)
Hash identifier:          Z5cBnxkoc6orIeCVdFjiq1wlCYIClgyc/y6luTqxaxk=
Subject key identifier:   1A:0A:89:45:05:D6:76:BB:F7:B7:94:A3:AC:80:7F:B7:9C:38:93:10
Authority key identifier: 10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A
Certificate issuer:       /CN=A91383F0/serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
Manifest number:          027F
Signing time:             Wed 23 Sep 2026 01:58:32 +0000
Manifest this update:     Wed 23 Sep 2026 01:58:31 +0000
Manifest next update:     Wed 30 Sep 2026 01:58:31 +0000
Files and hashes:         1: EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl (hash: iuaPiJOkEEhqUy3lkivlpAZEyaytOMKLukIE1DBBCxc=)
                          2: 14C77BFA28C611EFA33ED95FC4F9AE02.roa (hash: UEXS3yc2mXGxMZD1Q+vEJLA5TUiKnrPvYK0oDB2lGPg=)
                          3: F098580828C511EFB2C79E5FC4F9AE02.roa (hash: w2XOSYSVPfFuJ9EOEOjpxW5/RY7joVGE5SSXWuMDy1A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl
                          rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 01:58:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383F0, serialNumber=1036C1E0FFE1CFC37D655D89FA65D65FE22E1F7A
        Validity
            Not Before: Sep 23 01:58:31 2026 GMT
            Not After : Sep 30 01:58:31 2026 GMT
        Subject: CN=6ab33248-f85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:0e:2f:f6:38:77:16:e7:5e:4e:77:2a:46:
                    53:3f:4c:01:44:80:44:3a:0c:1b:e3:ab:4a:1a:35:
                    a9:c8:1d:0a:24:a4:bc:ee:f2:d3:68:30:2d:2f:99:
                    f8:35:c0:9e:b8:f8:0b:0e:63:c7:ac:bc:65:8b:1d:
                    8f:dd:3b:0d:02:b8:1e:74:68:8a:63:39:db:07:74:
                    f1:32:6d:bc:57:c0:c6:2a:f8:57:5b:b6:77:20:e6:
                    2e:43:ce:0a:5a:ff:04:17:ca:e7:f0:6e:df:fd:8d:
                    31:52:92:b4:44:1d:35:5f:fc:de:a7:13:4e:29:10:
                    4d:88:ba:e9:05:a9:4e:23:8b:01:13:2b:b4:1a:ff:
                    8a:ec:a4:28:2a:11:9d:51:19:ac:eb:ab:03:07:78:
                    75:9a:aa:c9:da:89:8d:93:11:71:ec:46:58:05:f0:
                    c4:43:2e:40:8e:f4:c2:c4:92:4e:64:95:25:57:c3:
                    dc:d9:ce:c4:0c:c2:76:ba:c3:86:7f:75:e4:e8:fd:
                    f2:19:39:2b:2a:d7:9a:7e:bb:91:b6:99:f4:5e:75:
                    3d:69:08:7a:75:66:c8:0f:6a:39:0e:3d:02:c7:d0:
                    bd:b8:1b:ab:35:b5:fd:75:01:ea:3f:c4:a7:1a:64:
                    7e:94:71:6a:89:ec:c2:6e:13:a5:4f:80:a8:31:4f:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0A:89:45:05:D6:76:BB:F7:B7:94:A3:AC:80:7F:B7:9C:38:93:10
            X509v3 Authority Key Identifier:
                keyid:10:36:C1:E0:FF:E1:CF:C3:7D:65:5D:89:FA:65:D6:5F:E2:2E:1F:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383F0/DCFCA6A20A8311EE9E6A9250C4F9AE02/EDbB4P_hz8N9ZV2J-mXWX-IuH3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:e9:23:5f:bc:a8:0c:30:3b:4c:a5:b3:46:0f:4f:4d:56:
         45:9f:f1:16:32:1c:ce:ca:81:6b:ef:d6:8d:2e:13:d8:7c:e7:
         72:c1:92:fa:14:e8:2d:78:e6:72:df:1f:6c:b4:35:10:c1:6d:
         e5:0b:40:af:cc:bd:12:f4:eb:c8:28:52:02:39:51:fb:52:c1:
         2c:59:f4:e9:c8:4a:60:9e:b7:d3:5a:ad:c2:c3:1e:43:9c:15:
         70:ce:4d:ae:8c:6c:ea:a1:60:ca:f4:32:8e:51:5e:e6:2b:78:
         ef:82:61:d5:c5:6f:d0:f6:0a:85:a0:64:c9:ae:18:19:63:cb:
         31:1a:4f:a0:4c:a8:0e:5c:04:eb:78:3e:98:67:0e:eb:da:5d:
         cc:20:3a:05:d2:17:b8:2e:28:3d:37:2a:d5:92:32:0c:da:8d:
         2c:65:3f:8c:cc:0d:35:b9:49:18:f3:d8:2c:25:cf:e8:80:ca:
         39:26:19:a2:82:0f:29:1e:01:25:c8:57:85:ec:8f:da:57:ac:
         06:58:44:6f:c3:c0:bf:bf:35:ee:cb:35:0d:76:91:ae:44:5d:
         c5:51:15:14:54:0c:bf:31:20:44:49:7b:3d:be:3a:87:9f:21:
         cc:d4:31:eb:d8:03:32:c6:05:ac:ff:db:59:21:52:e1:dc:5c:
         e4:a4:c4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:35:54 2026 by rpki-client