Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File:                     E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier:          XWdav9N7bXIWAL3EZ6qTrI6QgI2Hbn+cstkuT+jLFjQ=
Subject key identifier:   32:36:B4:9D:7D:2E:AD:A7:68:A2:07:6D:D5:B9:8D:FD:BA:BB:FA:4C
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number:          01F1
Signing time:             Tue 13 Oct 2026 03:55:44 +0000
Manifest this update:     Tue 13 Oct 2026 03:55:43 +0000
Manifest next update:     Tue 20 Oct 2026 03:55:43 +0000
Files and hashes:         1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: 7LN0IyXBSOeDdbu74/a2ewwIoBPYXT5cmUSthmv7jMo=)
                          2: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
                          3: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 03:55:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Oct 13 03:55:43 2026 GMT
            Not After : Oct 20 03:55:43 2026 GMT
        Subject: CN=6acdabbf-ea30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:83:48:72:52:53:02:db:ed:aa:38:ab:f6:
                    72:5c:46:0d:34:54:c3:cf:66:02:7c:af:13:cb:04:
                    ff:5d:f3:ac:34:53:5a:b9:7e:c6:8a:0f:8e:c4:f6:
                    76:76:76:1b:a6:f5:bf:b8:a7:12:88:6e:12:40:ee:
                    ff:d7:ac:8e:2d:05:99:39:e3:fe:d0:48:fa:ee:3c:
                    65:b9:9a:b8:6b:2e:34:3b:09:69:fd:da:0a:69:e8:
                    7c:46:98:59:b6:d3:5f:a6:7e:f2:c5:ae:26:a6:27:
                    76:91:35:84:71:88:e2:98:9d:47:ed:53:71:6c:b5:
                    cc:e7:a0:35:7a:aa:9f:36:2b:d9:20:ef:2a:ad:b9:
                    4e:bb:28:07:bf:3b:59:ce:44:dc:d6:03:e7:05:d0:
                    3c:86:0a:ac:70:1f:b0:64:4b:a3:4a:15:70:33:9a:
                    62:30:90:26:47:5f:9d:5d:90:70:ac:ad:b2:72:14:
                    6a:bc:48:ec:c3:f2:f7:a9:86:42:13:5c:dd:32:5d:
                    58:67:ed:f9:0d:18:a9:8d:75:4b:8e:7a:ee:7d:4c:
                    78:f9:89:ea:3f:b7:8e:1e:b0:28:4d:7b:80:b9:2d:
                    2f:2e:64:94:6d:f7:3b:c1:5f:9e:05:8b:c7:18:9d:
                    66:57:49:75:e5:df:a7:63:9c:5a:a2:77:52:70:e1:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:36:B4:9D:7D:2E:AD:A7:68:A2:07:6D:D5:B9:8D:FD:BA:BB:FA:4C
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:56:be:ef:fc:af:bf:bb:99:82:ea:ec:e4:70:42:cf:19:78:
         0c:cd:19:55:2c:8d:49:85:ee:f9:dc:cf:87:4b:1a:61:fc:31:
         ce:16:c4:7b:4a:85:07:f8:bf:5f:4d:4a:36:89:66:4c:b8:57:
         01:96:1f:16:56:5c:09:60:81:5d:bb:61:48:97:66:d4:b9:0e:
         c8:59:23:6c:b8:e1:3c:c0:35:4c:42:2d:d6:15:90:ca:07:14:
         6e:f2:ed:ff:57:86:a7:16:24:ee:18:a9:f5:66:12:63:e6:e2:
         ad:cb:32:ee:a7:70:77:cc:d1:48:38:d2:50:53:89:6f:02:2f:
         87:2d:a8:53:af:ad:d2:ca:1a:81:33:a1:a9:92:e5:17:58:d9:
         b3:57:50:2d:a0:47:18:1a:70:09:ab:83:2f:da:fd:22:c7:f8:
         d3:84:7f:69:d2:7a:e2:93:f1:22:f7:45:26:e1:3a:f2:63:90:
         7e:eb:f7:11:35:d2:c3:06:79:a5:f5:03:3c:f4:73:28:95:a3:
         3f:06:b7:d6:90:63:8e:58:86:86:a2:20:2d:3a:19:60:8c:76:
         f0:b7:ab:51:a0:d0:de:10:66:33:a3:36:3a:b7:0d:91:50:4d:
         c3:31:3f:3c:e6:a8:ca:1c:73:c4:b1:70:22:69:62:16:6d:9e:
         97:02:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:10:56 2026 by rpki-client