Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
File:                     ELQL29GDlBfXrRIzKwvm-fxugQU.mft (raw, json)
Hash identifier:          fCvT4VGNd2TBC0zt83tlB8jyw6t6S7w4rVbaj8sIHac=
Subject key identifier:   E8:12:61:A3:13:F3:77:93:24:63:4C:24:85:D0:B8:2F:F6:69:9E:F4
Authority key identifier: 10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05
Certificate issuer:       /CN=A914189D/serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
Certificate serial:       04E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
Manifest number:          04DB
Signing time:             Sun 20 Sep 2026 23:35:28 +0000
Manifest this update:     Sun 20 Sep 2026 23:35:28 +0000
Manifest next update:     Sun 27 Sep 2026 23:35:28 +0000
Files and hashes:         1: ELQL29GDlBfXrRIzKwvm-fxugQU.crl (hash: VSpDgGZlckJtVIlp/IAxwVO/7NMQJ0TSIjAZHhseGxw=)
                          2: 05A179C2B02E11ECA990305CC4F9AE02.roa (hash: Sp1tLOHgP1Vvckd77gK28KifubUUSmZqT6Sq31wKEBI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl
                          rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 23:35:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914189D, serialNumber=10B40BDBD1839417D7AD12332B0BE6F9FC6E8105
        Validity
            Not Before: Sep 20 23:35:28 2026 GMT
            Not After : Sep 27 23:35:28 2026 GMT
        Subject: CN=6ab06dc0-10c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:33:90:f0:f1:a9:e9:a5:5f:a4:11:e6:1e:
                    86:c5:5b:49:32:c8:a4:37:9f:c9:d4:84:0a:ec:2b:
                    13:77:3a:72:f1:23:05:27:be:29:45:35:ef:ef:d4:
                    b5:d6:2a:ea:05:c6:f5:14:4a:4f:e3:8d:6c:6f:e2:
                    f8:8e:01:65:94:1a:94:0e:30:ea:29:28:4f:f3:77:
                    00:e7:0d:2f:20:70:ef:6e:0f:d3:93:5c:22:28:2d:
                    20:a3:9e:8e:55:c3:8d:85:4d:fb:73:fa:c5:5d:37:
                    3e:49:66:85:46:99:c7:48:fe:cc:da:d1:d1:ac:75:
                    4f:91:eb:5f:17:f7:3e:75:37:1d:da:b9:e2:71:e2:
                    2c:1b:52:e9:0a:b8:a7:d9:4a:2a:25:5c:04:05:a4:
                    49:96:36:f8:e3:75:6b:ce:d4:c5:7c:10:9b:18:9d:
                    64:75:c7:91:76:d8:29:1f:a0:9a:a8:e3:56:8b:b6:
                    5f:fc:ae:55:94:e7:e5:5c:bf:eb:13:c6:a4:97:f7:
                    c6:61:97:1c:9f:e2:6d:2e:1b:51:45:94:bf:14:0e:
                    18:b4:4b:cb:c2:7f:5c:89:ad:bc:90:f4:77:49:2c:
                    b5:ee:4f:8a:e5:db:ff:04:7e:a3:2f:18:54:24:61:
                    7e:a9:9e:cd:25:d4:45:3b:f5:ca:27:d5:f9:fa:66:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:12:61:A3:13:F3:77:93:24:63:4C:24:85:D0:B8:2F:F6:69:9E:F4
            X509v3 Authority Key Identifier:
                keyid:10:B4:0B:DB:D1:83:94:17:D7:AD:12:33:2B:0B:E6:F9:FC:6E:81:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ELQL29GDlBfXrRIzKwvm-fxugQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914189D/F44F56E281C711EC9952324DC4F9AE02/ELQL29GDlBfXrRIzKwvm-fxugQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2c:48:6c:24:7e:19:56:c5:53:db:54:eb:cd:10:9b:39:c9:
         da:ec:9b:dd:07:22:17:c6:fd:a8:65:d0:84:e8:4b:fb:48:4e:
         31:93:a2:06:08:30:7f:9b:67:f2:ae:71:42:07:07:18:ce:f7:
         2f:b0:f4:85:ff:a2:bc:fc:7e:54:2b:e8:ea:81:02:24:f5:93:
         00:f5:68:e7:14:a4:e6:1d:96:09:23:f4:b5:7c:94:4e:2d:89:
         f5:2c:21:a9:0a:b9:71:28:88:fe:14:5b:56:42:d5:58:72:54:
         b8:17:ed:08:3a:ce:f4:d3:06:ce:1f:6c:41:ca:72:f5:bf:2f:
         6c:8d:57:84:fc:e4:46:b9:00:aa:6d:88:17:53:26:fc:20:dc:
         67:59:bf:fd:4e:85:de:a8:50:b2:da:c6:ac:56:a3:da:50:b7:
         70:b9:cb:4d:7f:93:32:5d:c3:2d:8c:8d:14:68:8c:18:8a:6b:
         24:bc:5c:b4:bf:15:a9:66:43:3e:d7:51:7c:4d:a2:c7:a7:12:
         3d:53:eb:c5:b8:a9:d8:bb:b7:88:a7:a3:cb:f4:ea:19:23:35:
         9e:2a:a8:a8:35:57:d2:7f:d6:d5:3e:68:97:e0:50:37:e1:c6:
         66:52:82:cc:c5:44:e4:8e:42:2d:6a:d8:d1:98:97:6c:80:0a:
         13:08:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:35 2026 by rpki-client