Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
File:                     E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft (raw, json)
Hash identifier:          mrXc66NwMjNn+BhqJFMbdzHsuV0sKTRqMztNIdKwRQA=
Subject key identifier:   47:E5:FD:13:78:EB:08:A4:70:9E:D3:20:29:5D:07:2B:E9:DD:9C:F6
Authority key identifier: 13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3
Certificate issuer:       /CN=A917B633/serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
Certificate serial:       017A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
Manifest number:          0172
Signing time:             Tue 29 Sep 2026 05:15:44 +0000
Manifest this update:     Tue 29 Sep 2026 05:15:43 +0000
Manifest next update:     Tue 06 Oct 2026 05:15:43 +0000
Files and hashes:         1: E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl (hash: aZjHE5wqab1MTcED9a7vzzik6QhZ0aZQWwQiczeMpN0=)
                          2: 3E4867CC86DC11EFA6022627C4F9AE02.roa (hash: oEyX+N8POVIt0NPqCPVZb7yBeCptqcWugjG7I1xvlZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 05:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633, serialNumber=13D7A13B423BB6E87A1A75B7493F0BC19D0CEAA3
        Validity
            Not Before: Sep 29 05:15:43 2026 GMT
            Not After : Oct  6 05:15:43 2026 GMT
        Subject: CN=6abb4980-ab02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:fb:fd:48:ca:2b:05:ce:19:f9:46:a5:df:
                    47:ac:2a:d0:cd:f8:b9:70:46:76:ee:a0:96:28:1d:
                    c5:83:30:9a:82:c4:73:58:ce:ab:96:45:09:f5:ea:
                    42:19:67:f5:e7:40:81:f7:1c:2e:38:05:5f:0f:1f:
                    bc:58:e7:c0:78:01:64:fb:1b:27:42:61:ba:c1:c9:
                    59:56:2b:f1:90:0c:ce:e9:15:87:c3:d7:6c:2f:b6:
                    a9:d7:56:0a:21:a5:7b:8c:40:bf:40:11:34:81:fb:
                    66:9a:f7:e4:17:bb:8a:b6:7a:53:9a:b4:76:c0:a1:
                    cf:bc:b2:bd:11:56:9b:33:69:9f:df:ee:6f:a4:a8:
                    6f:7a:24:59:1a:b3:20:14:e3:fb:0a:2c:8c:dd:e0:
                    d0:8f:01:5e:d4:40:1b:d6:00:07:61:28:d8:fe:0f:
                    f1:3b:de:46:4c:46:eb:f4:7a:bf:d7:8d:8c:ff:99:
                    db:d5:33:d5:9b:4a:b2:40:e4:21:8c:b6:47:ae:af:
                    ed:bb:b0:f5:b5:c9:c3:a0:6d:12:f3:9c:c0:21:a8:
                    95:92:ba:11:4b:20:06:e7:40:8c:77:31:59:2b:ad:
                    4b:0b:e9:94:5e:2c:6b:65:44:ad:c3:b7:47:e9:63:
                    27:2f:ae:20:23:73:d7:e4:6a:ac:e1:7c:ab:b9:86:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E5:FD:13:78:EB:08:A4:70:9E:D3:20:29:5D:07:2B:E9:DD:9C:F6
            X509v3 Authority Key Identifier:
                keyid:13:D7:A1:3B:42:3B:B6:E8:7A:1A:75:B7:49:3F:0B:C1:9D:0C:EA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D0AB93E486D911EF8B8BEB1FC4F9AE02/E9ehO0I7tuh6GnW3ST8LwZ0M6qM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:63:88:fb:47:d4:43:23:a7:a6:4a:b9:16:d0:13:55:4b:8b:
         2e:ac:f4:17:b2:70:cc:0c:b4:e7:7d:33:86:05:88:79:6e:fa:
         7f:cd:8d:61:7e:a5:e4:53:f9:7d:d1:12:0d:2a:4f:0a:fe:97:
         29:c7:ce:26:4a:d4:86:5d:ac:c0:9f:46:9d:ce:50:14:08:4e:
         16:e8:ea:89:25:07:9b:c3:2b:85:08:ca:1b:13:6c:19:4a:e5:
         09:5f:e2:aa:cd:8e:43:7a:03:05:74:15:d7:29:8f:f5:79:7e:
         9a:ee:4a:e4:7b:6f:7f:8d:a1:3d:b1:81:70:e0:85:ef:82:3a:
         90:c5:af:51:05:bd:a8:a5:a4:89:e2:c1:83:45:98:c7:94:10:
         7c:de:6e:ca:36:28:0b:44:29:2b:8d:96:a9:6b:c9:c9:29:a4:
         ce:b9:d6:4c:60:09:11:ce:b1:bb:54:50:79:74:46:09:84:e2:
         4f:e6:b3:c7:9e:39:b8:9c:ab:b5:f9:da:c8:2f:33:44:90:4f:
         5c:3c:c0:18:cb:b4:c7:08:f1:00:24:70:bb:85:02:8d:46:2d:
         51:c7:1c:c5:9f:33:7e:f7:c8:54:de:d5:f6:0c:b6:5a:a0:24:
         c8:dc:80:df:10:0b:57:31:6b:1a:06:91:ef:06:4b:a3:7c:ca:
         48:83:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:58:26 2026 by rpki-client