Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
File:                     ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json)
Hash identifier:          FX2zHrXZGlqcRDA7hwKBx0cKt6zbOipG7NXeTfB85W4=
Subject key identifier:   47:1E:4B:41:B6:94:29:B7:35:F3:24:0E:0A:F4:3F:BB:35:CB:FE:2F
Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
Certificate issuer:       /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Certificate serial:       0972
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
Manifest number:          0968
Signing time:             Thu 08 Oct 2026 20:13:57 +0000
Manifest this update:     Thu 08 Oct 2026 20:13:56 +0000
Manifest next update:     Thu 15 Oct 2026 20:13:56 +0000
Files and hashes:         1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: 19cXK/zJniW2aXmGrAbRLmCPdAWz3wuwngcFKwTpG3U=)
                          2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: XhJImk0f3rdjl6tuslw+Eu9p0gwLpm2LdQJmPczKSfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
                          rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 20:13:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418 (0x972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
        Validity
            Not Before: Oct  8 20:13:56 2026 GMT
            Not After : Oct 15 20:13:56 2026 GMT
        Subject: CN=6ac7f985-f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:c0:d7:2b:6c:6b:07:b8:4d:77:e5:76:29:
                    40:d3:ec:e2:f1:b9:7c:c0:98:48:dd:02:66:9d:8a:
                    a1:17:f0:28:c1:22:76:e9:e6:a7:29:27:39:42:f6:
                    81:6b:6b:6f:10:4e:67:55:84:df:9a:aa:58:f0:b9:
                    0e:a0:e0:60:29:5f:a5:17:37:12:d2:a5:4b:f0:71:
                    fa:0b:fb:6a:ba:1c:3b:1e:49:a2:96:c0:9d:ad:1d:
                    e7:49:ec:9c:95:f6:3e:c8:16:bb:ee:e7:54:58:b8:
                    fd:0c:89:f1:97:43:f5:a7:4e:c9:d7:4c:fb:8e:9b:
                    97:ab:2f:37:c2:f4:6f:fd:18:c5:45:fb:19:8b:fa:
                    16:5f:4d:68:fc:82:51:9d:8d:25:77:33:8b:76:a8:
                    c8:2b:fa:51:3a:18:e3:e3:b2:3c:2e:df:6a:6f:c1:
                    20:f3:95:f8:75:c1:c4:cc:b6:8f:c7:19:73:5b:1e:
                    4b:b2:3f:91:15:f2:b6:50:e3:b6:4b:d5:05:8b:03:
                    44:6b:f0:68:85:08:0b:0e:66:97:fe:9f:44:33:60:
                    20:aa:da:6a:68:4c:09:c2:ff:a7:cf:bd:1d:8a:52:
                    a7:93:f5:cf:a3:85:ec:81:1f:d8:c6:d2:1c:ae:9b:
                    22:22:12:71:69:22:e7:fa:a5:a6:f7:54:8b:07:cd:
                    92:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:4B:41:B6:94:29:B7:35:F3:24:0E:0A:F4:3F:BB:35:CB:FE:2F
            X509v3 Authority Key Identifier:
                keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:d5:a9:9a:71:ff:e9:b4:45:5c:ad:30:42:61:65:9a:03:
         7c:fe:fd:29:70:a9:da:5d:08:b2:51:64:db:0e:fd:62:af:b7:
         ad:fd:56:0f:ac:1d:ba:68:ee:da:06:91:bb:3d:f4:34:b5:8b:
         3a:30:bd:6e:d4:22:12:7f:2b:a6:a4:cb:63:f7:a5:9c:67:55:
         ae:e9:b1:5c:74:c0:75:e0:5d:59:61:80:77:04:01:cd:d8:50:
         53:36:54:52:53:1d:b1:5c:10:4c:c5:08:01:c6:b3:bd:7e:b7:
         05:c4:72:56:d7:08:77:52:9b:fb:28:de:c4:95:dc:d2:df:5f:
         9a:3a:e9:4d:bb:9f:16:db:0e:24:db:ea:8d:60:1a:ad:bc:11:
         2b:0d:06:db:cd:7f:5e:aa:35:1c:35:3a:de:7b:e9:03:d5:7c:
         46:40:07:16:74:39:38:3b:eb:ba:3f:1b:84:49:df:bd:63:35:
         15:6d:6b:eb:9d:25:3e:ff:a8:ca:89:ce:82:da:f5:f5:8f:9c:
         6b:c1:41:52:f3:cf:06:69:66:6f:7e:8e:a4:df:62:ca:e7:a6:
         5a:04:31:cc:a5:8a:75:1b:fd:de:2f:ab:99:5d:68:c6:b4:5d:
         a2:1c:be:50:89:5e:b0:92:72:55:06:2e:c7:84:0e:1d:a2:48:
         d5:88:38:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:54:11 2026 by rpki-client