Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
File:                     EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft (raw, json)
Hash identifier:          myyuHTSjj1fgIMTZSlqGPhEG8TDMtx60aZbGbd8z7QM=
Subject key identifier:   4D:F5:AD:BF:F6:9A:64:ED:8D:B8:E4:A7:30:CE:4A:AE:DE:08:C1:FF
Authority key identifier: 11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17
Certificate issuer:       /CN=A913B1DA/serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
Certificate serial:       0247
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
Manifest number:          0243
Signing time:             Sun 20 Sep 2026 15:24:08 +0000
Manifest this update:     Sun 20 Sep 2026 15:24:08 +0000
Manifest next update:     Sun 27 Sep 2026 15:24:08 +0000
Files and hashes:         1: EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl (hash: dDuKcuxTSzAPT1xgVx8XY9oNObg/I0MKfZs0+WXTAIw=)
                          2: 94DAF6C241DE11F1A57436B1B5833773.roa (hash: 9AeXOOMXpBY5Hw+qh02itkG4wf9hqR+y5ENFHPEiYrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl
                          rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B1DA, serialNumber=1109FBC73A189B3D64713A1F6C486A04E7B43B17
        Validity
            Not Before: Sep 20 15:24:08 2026 GMT
            Not After : Sep 27 15:24:08 2026 GMT
        Subject: CN=6aaffa98-cc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:4c:41:bb:a4:7c:85:b7:bb:62:40:63:e9:
                    d4:e5:44:c4:99:ab:a8:bf:ee:96:5f:d4:c3:05:56:
                    df:e8:e5:6f:60:13:85:e5:66:ab:ec:53:b4:09:89:
                    79:17:64:33:c5:40:6b:0a:21:8f:01:e6:03:2d:c6:
                    5b:e1:34:55:2c:72:d1:27:cc:07:00:aa:bd:59:01:
                    ad:8e:01:c8:69:d5:1e:45:ef:85:5f:0d:03:85:cf:
                    99:ed:98:8a:a7:f1:16:af:fc:b4:c5:18:be:28:fd:
                    cc:5d:b8:71:70:c9:a5:37:bc:5e:d3:52:7e:ce:0c:
                    15:29:e9:cc:12:3a:33:64:d2:0c:1a:60:ff:3a:27:
                    9a:e4:8d:69:6c:38:22:3b:db:03:ca:72:33:22:97:
                    8a:10:05:97:40:01:84:c8:01:5b:b5:4a:26:31:90:
                    9c:ff:86:36:04:5e:23:d1:64:31:13:53:a2:80:f6:
                    c8:1f:1a:23:bd:b3:e5:c2:b7:57:a9:c0:b1:3a:9b:
                    70:88:dc:1d:4a:1f:ce:69:ef:23:8d:17:a8:b5:61:
                    3c:46:b8:74:1a:8c:cc:39:22:b4:f6:6b:eb:08:f3:
                    31:ea:bc:00:36:e8:c9:c9:6c:6f:f1:ce:01:7e:da:
                    4c:c7:7d:75:16:c9:61:0d:f1:0a:16:45:ef:cb:93:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F5:AD:BF:F6:9A:64:ED:8D:B8:E4:A7:30:CE:4A:AE:DE:08:C1:FF
            X509v3 Authority Key Identifier:
                keyid:11:09:FB:C7:3A:18:9B:3D:64:71:3A:1F:6C:48:6A:04:E7:B4:3B:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQn7xzoYmz1kcTofbEhqBOe0Oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B1DA/A90F8DA44C7911EEA79DCD3BC4F9AE02/EQn7xzoYmz1kcTofbEhqBOe0Oxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:35:e1:08:fc:c4:79:2c:c0:c6:e3:a4:12:19:a1:58:cc:d5:
         cb:98:6e:34:d1:e6:c7:d4:69:4e:6e:5d:dc:6c:6f:da:53:70:
         d3:58:9b:a5:b9:a1:89:a2:30:50:c5:e4:c6:c4:c9:98:d2:8b:
         57:f0:0b:98:a6:a5:87:c6:b6:65:6d:5c:db:77:cb:6a:f6:40:
         bf:81:e8:35:8d:2d:23:a6:2e:5b:2e:ae:a5:46:18:e6:38:57:
         ac:08:00:85:25:71:ed:92:80:5d:07:23:d1:89:0c:a2:08:29:
         bf:7c:d8:a9:10:d5:86:21:f6:aa:da:a1:53:7d:51:3c:80:54:
         8b:30:4a:4c:18:bc:f3:fa:23:11:ec:60:d9:e2:52:60:e7:0f:
         65:9b:4a:aa:eb:95:a4:70:fb:da:c9:31:d7:e4:ce:e1:b6:72:
         33:ab:b0:77:d6:68:29:30:23:66:e9:d8:66:29:b5:16:09:3b:
         ef:3b:c2:5d:f6:02:5a:8e:5d:d2:26:ef:7a:5f:ef:82:96:f8:
         e4:fb:a3:84:a5:97:15:d1:cf:80:41:48:64:1a:67:d9:62:9f:
         25:4f:dc:73:1f:a5:d7:26:59:68:47:42:6b:72:7e:89:b1:a3:
         78:07:11:d0:aa:6e:dd:dc:54:0d:a4:ae:1f:84:95:02:dd:f0:
         7b:aa:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:38:45 2026 by rpki-client