Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
File:                     EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json)
Hash identifier:          YL2p9iMfoURuX3/BkMz7VPw/qNz7X2EmNaipZWe2U6o=
Subject key identifier:   22:88:0A:2A:B8:5F:43:89:45:39:94:4F:0A:98:54:14:A7:C3:D2:25
Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF
Certificate issuer:       /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
Manifest number:          0169
Signing time:             Mon 21 Sep 2026 04:57:44 +0000
Manifest this update:     Mon 21 Sep 2026 04:57:44 +0000
Manifest next update:     Mon 28 Sep 2026 04:57:44 +0000
Files and hashes:         1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: cqqXalL24H7n/aOlJ0jI67W0Ok17nRTNdI8IoHoy2fQ=)
                          2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: rVa/wWPzr3OwQnrIVB/RLkiVW7fhkqdwgET1KnDvQTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
        Validity
            Not Before: Sep 21 04:57:44 2026 GMT
            Not After : Sep 28 04:57:44 2026 GMT
        Subject: CN=6ab0b948-a0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:50:8f:d2:2d:92:f4:08:58:54:9b:4c:2f:
                    dc:83:26:3c:36:ac:5d:eb:98:e9:e7:06:ea:51:5d:
                    aa:38:ad:e4:bf:ed:10:a0:81:c7:1a:f2:58:fe:fd:
                    b7:f3:20:9e:4b:b7:e8:87:83:3f:92:c1:52:19:87:
                    17:b5:2b:cc:d9:97:ee:96:90:de:38:e2:4c:99:78:
                    2a:2e:18:d3:8f:93:65:de:57:6e:f8:bf:b2:bc:c5:
                    53:eb:a9:55:d9:95:2e:22:5f:be:b2:0d:47:71:31:
                    fa:b5:4b:77:72:73:b5:3a:5e:df:09:87:c1:73:51:
                    64:17:0f:cc:5c:3a:e5:e4:cd:ad:93:7a:32:42:d3:
                    ca:60:25:ec:65:79:6a:1f:73:ac:e6:d4:6a:7c:ae:
                    87:f1:60:8d:d3:0c:cc:80:98:08:b3:ca:6f:82:26:
                    bc:ae:52:67:93:59:46:15:d1:c5:f8:14:12:e0:3a:
                    fc:77:bc:66:63:5e:d7:4e:02:53:e7:7d:e7:96:a7:
                    fd:a0:e6:25:63:67:d8:21:ce:f5:4e:ff:3c:63:ea:
                    c2:ad:52:f4:6a:79:a7:81:83:9a:28:b4:74:f0:b1:
                    35:fa:12:a5:d8:3a:56:95:a9:f9:da:24:9d:a6:22:
                    7e:fd:83:01:c6:53:cc:7b:00:19:a0:23:74:4b:f8:
                    d8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:88:0A:2A:B8:5F:43:89:45:39:94:4F:0A:98:54:14:A7:C3:D2:25
            X509v3 Authority Key Identifier:
                keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:7e:e3:30:9a:09:c7:97:07:85:01:54:70:94:ce:90:ce:
         a4:40:90:4a:67:32:ed:0f:86:78:7d:2e:0e:57:78:1d:aa:a9:
         a9:f7:e7:64:27:da:b7:48:6c:84:a1:23:61:73:5d:b6:35:4e:
         67:8c:a1:70:5e:4a:c3:d6:2b:96:e0:67:71:7c:8a:bc:ee:e1:
         de:61:92:5e:b6:23:67:38:de:82:ae:dc:4a:90:1c:13:67:73:
         3e:40:61:8a:04:75:d7:a6:94:bd:45:60:d3:7f:ea:f9:ad:cb:
         a4:c4:47:9c:1d:c1:3e:b5:31:26:24:3c:31:a5:7f:1c:98:a6:
         3b:4c:5a:eb:16:cb:ad:ef:99:06:3a:fc:46:ab:0f:7b:9e:2b:
         8f:05:f8:dd:e3:03:ae:16:31:1a:17:91:f8:63:e2:6c:6f:f0:
         de:8c:aa:27:00:bc:6b:49:05:07:0e:ae:4d:eb:c0:1e:9c:7c:
         c3:e4:44:b8:f8:3b:45:a6:65:98:fb:78:ae:ed:92:52:2b:ed:
         50:3e:c7:cf:a3:84:dd:fa:e0:82:55:17:80:9b:7e:0b:be:2f:
         93:4b:77:db:57:1e:73:95:81:dd:12:c4:49:b4:84:90:da:b2:
         77:75:f4:54:7f:ef:93:14:d6:35:ea:7c:a8:b7:4a:4f:84:11:
         92:f4:ae:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:50:37 2026 by rpki-client