Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File:                     0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier:          6Cv2UsTNPitlxtQNXbjljane6NuyPrS03+460ESXSwQ=
Subject key identifier:   62:17:63:FB:48:4D:3E:8F:A9:ED:4E:8B:3C:C0:EC:3B:8A:AD:D9:66
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer:       /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number:          0269
Signing time:             Mon 27 Jul 2026 03:37:46 +0000
Manifest this update:     Mon 27 Jul 2026 03:37:45 +0000
Manifest next update:     Mon 03 Aug 2026 03:37:45 +0000
Files and hashes:         1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: zRDg/1Z/ySFnrbBF+meSHzbmar6Xs7t6N2urA3htJV8=)
                          2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: Tnjt2fGEhLyDlPP5wmN279sZk46aIOs3pcrgnxrQla0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
        Validity
            Not Before: Jul 27 03:37:45 2026 GMT
            Not After : Aug  3 03:37:45 2026 GMT
        Subject: CN=6a66d289-ed89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:70:35:3f:cc:77:7d:de:67:42:fb:96:5d:
                    05:df:be:b3:cc:ee:0e:ed:4e:6d:f9:d3:d9:48:6d:
                    ee:4f:10:db:89:9a:4a:c3:60:af:49:9b:36:7d:e0:
                    3d:98:53:c6:10:84:b1:02:a8:92:8d:20:44:0c:57:
                    52:72:2b:40:6a:23:ab:40:82:33:29:b6:ca:57:db:
                    9c:58:b9:c0:86:8e:49:f2:db:a4:1e:4c:97:60:28:
                    fc:f5:08:ca:eb:64:2a:08:00:7e:c0:7f:ed:1b:5e:
                    ac:ab:29:0e:c9:c4:64:50:0b:76:b7:1d:cd:94:18:
                    f7:0a:49:9a:8a:1d:ba:b8:18:b8:82:a7:42:67:5f:
                    01:32:3f:6b:a7:6e:98:78:47:13:22:d5:21:e1:fd:
                    74:2d:af:83:b6:13:65:94:95:fd:09:df:d9:1e:ea:
                    cf:36:3d:b3:e8:45:2c:f3:a1:7a:66:32:83:3d:30:
                    cd:9c:97:7f:3b:87:a7:43:07:11:ec:d6:15:e5:dd:
                    d4:57:c0:51:ca:f7:13:16:30:51:b7:7f:f2:bf:67:
                    3c:e1:33:41:4e:52:ac:04:81:2d:f8:63:7e:d6:81:
                    51:ef:0e:e7:6f:28:87:a8:c3:6c:30:6f:7b:ff:be:
                    f9:53:17:ed:c2:27:03:86:78:78:b3:52:db:58:88:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:17:63:FB:48:4D:3E:8F:A9:ED:4E:8B:3C:C0:EC:3B:8A:AD:D9:66
            X509v3 Authority Key Identifier:
                keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:5e:46:fc:73:33:eb:44:5f:5f:fb:4c:ff:24:ba:80:85:
         fc:47:14:05:77:12:03:b5:d5:b2:31:bf:c0:59:43:99:ca:80:
         73:09:71:c3:80:43:8c:04:d4:a2:00:a4:95:2b:74:17:44:74:
         c8:0d:f8:eb:53:56:13:1f:13:35:c8:2b:18:28:75:a5:90:c0:
         2f:26:2a:fa:08:f0:7e:8f:49:a7:27:ea:51:40:ac:60:0b:77:
         c3:cc:02:45:6a:77:2b:93:3f:d2:54:2f:36:3b:fe:d7:99:6f:
         00:14:c4:3b:80:b2:46:39:eb:92:d8:51:a1:fd:ee:80:5f:8e:
         3a:5a:3d:bf:48:67:d1:06:9a:c3:af:6c:b3:b6:eb:e0:08:02:
         3c:0e:57:3e:07:98:d7:d7:9d:3c:9c:0d:03:00:f6:23:19:b4:
         50:2f:e2:8c:c9:a9:b4:7d:09:6c:f8:44:d6:cd:02:0a:91:d4:
         4b:ed:01:aa:ae:b8:c2:f0:e8:70:35:28:16:cc:8b:ff:25:35:
         a5:07:b2:16:e2:0f:4f:a7:43:a0:70:a4:45:f5:53:82:39:ef:
         0d:3e:5d:e9:a7:33:f1:cd:ba:3f:49:4a:ce:9a:ce:a6:6f:d1:
         64:79:f4:0e:e6:41:36:15:72:a3:ef:24:13:14:19:a5:7d:ac:
         a7:80:04:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:15 2026 by rpki-client