Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File:                     e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier:          P8oFZ41/S8YMXCHd0LlborEMUZaOLoQKBo2tGIHpNS0=
Subject key identifier:   EB:9F:E6:87:16:C1:C1:62:F5:F0:AE:56:85:9E:88:43:86:EA:F3:F9
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0DD5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number:          0DAD
Signing time:             Sun 20 Sep 2026 17:54:37 +0000
Manifest this update:     Sun 20 Sep 2026 17:54:36 +0000
Manifest next update:     Sun 27 Sep 2026 17:54:36 +0000
Files and hashes:         1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: CpsQXH4g07snpRCuqR/mV0qvaB4GcG8JagjeD6bo8t0=)
                          2: B70BB8BA0BEE11F1B88CA9ED363D8C67.roa (hash: gV/ga6pNiDEaMqYwxdpiqSmurLeCeq3zgA8Tgp7bxMk=)
                          3: C9A309F60BEE11F1B8168AEE363D8C67.roa (hash: iChi/qFc6Xw/AVMPU0nsV/Vuxz3VAje7MWNsU7y29RI=)
                          4: D5FC2548F12211F0893A96874F6F56BC.roa (hash: DV3D2ua6Pzkyk7Fv2P62LJuR1RPZf+ZsaSUj29nvkgY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Sep 2026 17:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Sep 20 17:54:36 2026 GMT
            Not After : Sep 27 17:54:36 2026 GMT
        Subject: CN=6ab01ddd-29b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:7b:2a:82:64:32:05:54:7f:85:7b:26:7f:
                    e0:d7:78:88:89:6a:cb:e5:d1:c4:e8:14:64:9e:8a:
                    8f:b1:4f:09:6e:9c:71:6f:9e:21:27:7f:4a:06:f3:
                    c5:26:e7:66:ac:b1:8c:a5:b5:39:e0:85:e0:ee:02:
                    f1:f3:12:2a:d2:08:4e:f5:3e:42:3c:a1:ea:8f:96:
                    51:1c:d8:b4:2a:17:34:df:0d:c2:a0:4a:e0:d5:1f:
                    b0:51:ee:d0:81:90:d7:82:20:ae:59:3b:4f:1f:af:
                    26:cb:2a:04:c8:4e:03:61:62:0b:db:dc:47:71:86:
                    0d:ec:e9:fb:e5:06:1a:88:41:9b:a2:45:77:2b:a9:
                    67:86:2f:7e:12:8c:12:03:0f:70:38:60:c6:0b:25:
                    c0:84:b8:14:3e:0c:8e:6f:6e:70:42:1c:0a:ab:56:
                    3a:d2:cb:5e:52:74:a6:67:d2:37:e9:52:2d:2e:39:
                    5a:86:ee:70:bc:9c:38:1c:7a:06:16:ca:2d:97:fa:
                    34:93:0b:9e:4f:b9:c5:37:6f:66:af:eb:34:0c:29:
                    65:88:fb:88:7d:47:3f:88:bf:71:56:9a:4e:aa:55:
                    4a:d5:aa:4d:bf:35:f2:18:df:e9:f1:07:7b:fb:32:
                    b0:62:28:17:fe:12:04:cb:70:cc:41:22:61:39:10:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:E6:87:16:C1:C1:62:F5:F0:AE:56:85:9E:88:43:86:EA:F3:F9
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:08:4f:cf:bc:c9:89:a3:f8:97:7c:61:c3:34:86:d2:d2:
         85:2f:3d:5d:55:c4:66:24:4b:26:64:52:06:a5:54:4f:28:3d:
         6f:9e:d4:fe:f2:6e:ab:90:80:5c:3c:19:41:62:9e:4d:e0:13:
         06:33:43:87:1c:41:18:c9:cd:ed:ea:6e:05:5f:7a:39:c6:5a:
         48:a2:27:24:91:c2:41:21:5a:71:9d:e2:71:59:7f:4b:2e:35:
         da:93:57:12:39:2c:9d:84:a9:a7:8c:f5:25:e0:14:18:16:ac:
         2b:33:a5:8b:73:0d:63:15:27:85:70:e8:35:6a:a1:ba:56:b6:
         0b:bf:63:2d:a2:45:02:ec:6d:92:b2:08:16:55:12:ca:11:74:
         4d:5f:83:26:86:f9:18:39:69:fc:81:d5:6f:e1:3d:c9:31:87:
         22:62:f6:1a:15:35:d2:c1:ff:e0:81:4e:16:62:1e:ff:58:4a:
         c6:50:82:3b:29:ad:6e:92:ce:15:b8:d6:14:84:2e:b7:10:9b:
         ed:1d:52:d6:71:72:98:f4:d9:11:cf:93:10:4a:13:04:70:43:
         c3:f6:70:02:91:fe:bd:79:77:17:4b:8d:2c:02:64:ef:9c:ef:
         d5:d4:72:56:1c:62:0a:b5:b7:c8:d7:a2:4d:88:e1:5d:94:81:
         eb:a9:d0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:13:46 2026 by rpki-client