Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
File:                     eX36GIOfh9ExDpypw0EKvraDnnQ.mft (raw, json)
Hash identifier:          tfPWBABYnD54+QdhqEojNLZUl38j7/X/3J4dlhZQL0Y=
Subject key identifier:   55:AF:00:22:93:BA:94:CE:8C:F6:20:38:2B:88:BB:A7:99:D2:F2:1E
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Certificate issuer:       /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial:       0520
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
Manifest number:          0518
Signing time:             Tue 22 Sep 2026 23:16:40 +0000
Manifest this update:     Tue 22 Sep 2026 23:16:40 +0000
Manifest next update:     Tue 29 Sep 2026 23:16:40 +0000
Files and hashes:         1: eX36GIOfh9ExDpypw0EKvraDnnQ.crl (hash: Lf+mdp3BRJZUFKeuBhpOfSQQ9izihAT/v+T+NT5HQN4=)
                          2: ED6CA80868B211EC9974F51FC4F9AE02.roa (hash: 7dmcjwf3qKkvWDXhJJ0yFS4Iw9ffbjP8rVUkXu2XNOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 23:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1312 (0x520)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F52, serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Validity
            Not Before: Sep 22 23:16:40 2026 GMT
            Not After : Sep 29 23:16:40 2026 GMT
        Subject: CN=6ab30c58-b8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d9:a1:bc:15:30:d8:29:cb:ba:52:0d:4d:13:
                    8e:93:1a:52:33:82:58:c7:96:20:23:96:06:51:2a:
                    6f:2d:0c:91:5c:f3:d6:01:c1:6b:33:3e:2d:16:2a:
                    51:2d:6e:f8:53:bd:aa:07:e7:9a:1b:fd:02:e5:9b:
                    6c:f7:64:9e:c8:da:a8:81:a5:81:5b:31:71:7b:0b:
                    4d:a2:ad:77:e1:20:f2:b6:cb:e7:2b:64:3b:9c:68:
                    a9:df:86:aa:eb:de:d7:67:8f:8e:0d:b7:3a:2b:cc:
                    37:74:8c:b0:b2:13:0a:07:82:b8:f0:ae:bd:78:b7:
                    a0:6e:a4:dc:54:ea:8a:da:c4:57:7a:e1:b4:7b:1e:
                    46:9f:4a:b5:f6:47:91:33:cd:ab:21:64:76:d4:7f:
                    ed:2f:ea:20:73:23:a4:ec:0a:1c:08:c0:bc:eb:23:
                    33:51:9d:4b:86:59:fc:68:a5:11:3c:5e:d1:be:f4:
                    a4:ad:f9:14:5a:be:3f:a7:29:cf:59:e2:bb:2c:b7:
                    f1:54:09:cd:9b:23:95:5d:47:84:af:c9:0a:71:05:
                    c0:7a:9c:d7:dd:95:81:8f:e2:dc:78:33:38:96:4f:
                    9f:f8:79:4c:e2:b6:03:a1:ee:74:b2:42:25:fa:ed:
                    cd:bb:a2:83:89:c3:2b:da:dc:6c:4a:35:72:83:5e:
                    56:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AF:00:22:93:BA:94:CE:8C:F6:20:38:2B:88:BB:A7:99:D2:F2:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:c7:f0:73:95:83:0e:41:3c:00:19:a4:4c:6e:40:65:79:
         af:07:6d:ed:27:46:6b:30:0a:7a:2d:99:cf:b7:58:19:2c:57:
         8c:60:be:b1:c9:0c:54:a8:86:93:71:f1:ea:e5:57:f6:87:90:
         83:98:ac:7d:25:61:6e:01:cb:1f:10:0d:e8:fe:4f:92:56:ee:
         ed:2d:28:31:fb:6b:23:a8:60:a7:d3:a1:cb:5a:c3:c0:7f:b4:
         bd:2b:dc:3a:b1:9a:01:78:c6:2d:dc:6d:1c:37:63:fb:1f:01:
         f9:11:4e:6b:8d:02:48:51:b6:e9:34:2d:77:08:66:59:93:eb:
         b7:15:1b:9e:90:db:fa:79:db:d8:d0:35:8e:d3:5d:ae:80:1c:
         d2:70:3b:be:fb:a3:45:8a:8d:4b:e1:65:b3:60:5d:2c:c9:1c:
         24:3c:5b:48:d2:07:37:1a:d3:c7:8c:53:c9:6e:b9:07:e4:ba:
         2b:1e:c9:c6:f2:6f:3f:91:17:33:08:47:c9:3f:7d:6f:e6:e8:
         81:5d:89:e8:ec:80:38:1f:c5:46:6f:5f:63:5d:b4:90:87:d0:
         ec:09:91:29:54:21:71:86:f5:6f:54:32:f2:1c:36:b2:ed:d9:
         eb:b8:b8:f5:c1:68:e6:1f:f7:13:31:34:81:5c:53:49:36:9c:
         f7:86:d3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:08:00 2026 by rpki-client