Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
File:                     EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json)
Hash identifier:          J+TyVpTkqD/ECInVdN2zSL3mwmmIUC94LzlG/74BVEY=
Subject key identifier:   0E:2B:A2:4E:8E:59:39:8D:7A:75:15:A7:3D:4F:47:0A:BB:23:56:CB
Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA
Certificate issuer:       /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
Manifest number:          0110
Signing time:             Mon 21 Sep 2026 06:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:15 +0000
Manifest next update:     Mon 28 Sep 2026 06:00:15 +0000
Files and hashes:         1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: A6MgIfGc0uJHC5Ex3lm232IYFf5viXM2akrdf/y7vx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl
                          rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA
        Validity
            Not Before: Sep 21 06:00:15 2026 GMT
            Not After : Sep 28 06:00:15 2026 GMT
        Subject: CN=6ab0c7f0-8296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3b:69:56:52:d9:f3:fa:d8:72:cb:e7:eb:6e:
                    1a:69:0a:a9:80:1d:19:54:a0:63:be:65:7b:86:11:
                    fe:ee:10:fa:67:d2:d4:83:37:77:4b:b7:b3:f6:1e:
                    8c:27:3e:66:d5:64:db:c7:73:8c:e5:44:fa:f5:d7:
                    72:a6:c1:79:60:25:f2:66:17:72:26:05:6f:5b:5c:
                    d7:80:50:a6:89:02:06:ed:f7:91:ab:17:ed:c6:46:
                    4b:51:ab:b4:22:5c:1d:5e:fc:fa:2a:da:f9:c8:5d:
                    7a:97:50:ff:7d:d4:01:d9:5d:46:5e:03:ea:4e:fa:
                    fe:4c:e0:d3:7b:a0:8d:35:fd:49:d8:ec:8f:a6:6b:
                    c9:0a:eb:9e:08:d4:a0:89:1f:50:a2:be:8d:b0:e5:
                    c5:f6:a7:ff:22:69:36:8c:b4:fb:69:7d:17:55:6f:
                    2d:8d:00:8b:23:8d:ff:2a:46:a7:e6:ac:b1:b9:cd:
                    6a:6c:b5:35:da:08:3a:94:62:5c:26:3d:21:5e:ec:
                    f6:8e:cd:a2:50:59:e0:a7:ca:37:11:f7:fd:ba:98:
                    18:d2:83:8a:fb:0c:56:9b:bc:e0:f5:cd:cc:c3:d0:
                    cd:a5:02:6a:22:ac:4b:49:4c:5b:63:92:5b:c7:36:
                    79:23:82:a6:7d:87:5b:4e:c4:0c:be:a3:3a:83:13:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2B:A2:4E:8E:59:39:8D:7A:75:15:A7:3D:4F:47:0A:BB:23:56:CB
            X509v3 Authority Key Identifier:
                keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a0:8b:23:e4:d0:2a:44:7c:87:c0:7c:39:01:2d:55:30:6a:
         46:05:ae:88:c7:f6:35:3f:2f:3e:d5:a2:61:9b:35:80:b3:f2:
         69:12:f2:47:06:81:a1:c9:05:6e:cb:4b:63:45:d6:d9:86:5a:
         b7:e9:4c:5a:59:87:fd:3d:19:19:60:da:38:11:b6:78:0b:c0:
         45:16:fb:3d:2f:61:fa:cb:4b:cd:98:1a:66:13:c0:ba:0b:02:
         05:2b:0f:5b:be:eb:f9:ba:c5:63:52:e4:71:1f:35:37:fc:2e:
         cd:93:1a:79:0e:fd:15:b1:3d:ed:08:e5:f6:f1:11:73:9e:fb:
         8e:fd:03:b9:de:d1:d3:56:19:10:4a:f7:d9:bc:81:91:73:53:
         53:34:64:2e:ac:39:c6:6a:08:95:eb:e3:cf:d4:09:39:3f:59:
         04:ba:4f:f7:f5:9a:9d:83:0e:19:66:91:36:23:7b:db:f5:35:
         a4:88:5c:11:79:35:73:1e:32:3f:a9:d4:bd:db:3d:41:65:6f:
         8b:bc:97:88:28:e0:29:52:13:02:3a:8a:ff:c6:48:a7:74:ac:
         45:51:2a:d5:23:f5:2b:25:49:80:37:f2:ea:40:8d:f9:13:15:
         73:bc:ab:82:4b:60:83:16:46:8c:79:82:d4:86:f7:f2:1d:d6:
         81:d3:85:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:36:55 2026 by rpki-client