Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
File:                     ED-ovf_7nwVXByxHMyuBqegO3TU.mft (raw, json)
Hash identifier:          6/AMwLQjSffWMWgkEVODfi0QBwQq4pMR0T/ul17yxWc=
Subject key identifier:   3D:1A:89:33:7E:E9:2B:0D:0D:87:DF:3B:34:47:3E:AB:3B:09:7E:C4
Authority key identifier: 10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35
Certificate issuer:       /CN=A9140D69/serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
Certificate serial:       03EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
Manifest number:          03B8
Signing time:             Thu 15 Oct 2026 01:08:09 +0000
Manifest this update:     Thu 15 Oct 2026 01:08:08 +0000
Manifest next update:     Thu 22 Oct 2026 01:08:08 +0000
Files and hashes:         1: ED-ovf_7nwVXByxHMyuBqegO3TU.crl (hash: tO7jdq1S8YiIVmokj2yZEkfLVYgcDZytjtzvsMRE6KM=)
                          2: E4C4FBB8200811F0AB28851DC4F9AE02.roa (hash: cKewtt8SgAEp19Mdq7crsI4kqR26T3STaRhxrBMFeAg=)
                          3: D84149CCEBAB11F090F576B05F6F56BC.roa (hash: hJz6pu98ti8mAR+MVo7nXFlkux8V4L70Mk2QQCM3jdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl
                          rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 01:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140D69, serialNumber=103FA8BDFFFB9F0557072C47332B81A9E80EDD35
        Validity
            Not Before: Oct 15 01:08:08 2026 GMT
            Not After : Oct 22 01:08:08 2026 GMT
        Subject: CN=6ad02778-4508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:c7:68:7d:e9:4b:5c:8e:1c:9e:ea:64:1d:
                    70:2d:95:75:dd:69:84:1f:20:83:6c:86:1e:29:52:
                    48:ed:8b:83:4e:64:82:6c:4f:b5:f8:fc:26:79:5f:
                    fb:64:e8:3c:4b:31:64:a2:1c:ef:19:8b:44:fc:b4:
                    17:70:b9:3e:f7:ff:fc:f1:ef:c8:35:23:8a:6a:cf:
                    47:77:d6:5c:d7:55:f3:d7:bd:d4:ff:04:47:c5:b6:
                    0b:df:13:f7:82:8a:18:cf:a4:0a:ca:3f:c9:b3:a4:
                    3a:c6:c9:8f:f2:76:b9:b5:37:00:68:aa:e0:79:55:
                    7b:53:7f:51:25:c4:ec:b3:02:9f:20:d0:5a:d6:68:
                    75:18:d6:52:c8:eb:4a:be:65:b2:f5:8e:88:16:ff:
                    b1:8a:91:46:1f:80:c5:e6:9a:82:59:a4:8e:bb:78:
                    ac:da:91:cf:c9:42:06:73:01:77:fd:dd:cb:85:0c:
                    49:99:0d:88:49:78:36:a0:6c:bc:de:22:44:6f:fb:
                    53:f6:e7:ae:e1:8f:5c:0b:69:fc:38:c5:b5:11:06:
                    e5:b6:b4:c4:76:10:1b:67:2b:8c:bd:a6:b2:47:74:
                    69:70:a3:4f:4d:63:f4:93:aa:15:f2:04:ce:26:e9:
                    dd:19:09:51:95:bf:01:04:83:e0:c1:a0:91:35:9c:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1A:89:33:7E:E9:2B:0D:0D:87:DF:3B:34:47:3E:AB:3B:09:7E:C4
            X509v3 Authority Key Identifier:
                keyid:10:3F:A8:BD:FF:FB:9F:05:57:07:2C:47:33:2B:81:A9:E8:0E:DD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ED-ovf_7nwVXByxHMyuBqegO3TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D69/0E177D5A058C11EDADD66011C4F9AE02/ED-ovf_7nwVXByxHMyuBqegO3TU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:14:0f:15:80:fe:7f:b4:c2:91:e4:19:b5:d7:0f:53:ab:7b:
         19:d4:4f:a8:6f:79:fe:16:c3:de:58:ab:63:04:ef:a1:27:d7:
         83:d9:a1:07:37:8f:c7:c7:7e:93:10:a1:13:bc:db:eb:73:e5:
         85:ab:9d:b4:60:60:b2:c7:4d:3d:b3:85:34:62:f7:5f:15:aa:
         61:93:0e:3d:45:cb:d7:b8:b3:3e:56:4c:28:1c:b2:77:86:3b:
         66:0d:19:29:7a:cb:1c:83:83:37:06:0e:35:de:d6:ce:1d:6c:
         a5:7d:fd:57:88:37:ef:0d:32:f1:70:1a:62:73:8c:45:b4:a7:
         8d:a8:7b:58:17:56:c1:6d:d6:18:0d:46:14:97:c3:37:57:47:
         dd:fd:f2:2a:33:94:8d:76:24:c1:df:80:94:21:c6:54:e1:5b:
         96:1b:86:39:ad:81:39:74:c0:b0:eb:60:f3:8c:0b:fd:4b:70:
         0e:87:2f:39:f6:49:a3:dc:89:74:f0:19:a6:f8:60:cd:c8:da:
         4d:60:1a:82:18:1d:ff:17:0d:04:02:ce:54:cf:92:ec:ce:59:
         9a:27:60:e1:52:56:29:92:91:5c:4f:f9:a8:28:81:39:8e:02:
         5c:05:6a:9e:68:be:82:01:50:98:dd:7f:a7:1a:1c:c4:bb:60:
         e3:89:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:19:13 2026 by rpki-client