Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
File:                     EJuU59mz5nnpnGKnotSXoX05lxg.mft (raw, json)
Hash identifier:          4MxnKwRr9OXnlHt//TIOVpcAeF6uPMTYcikE+RlkBAo=
Subject key identifier:   83:DC:DF:01:39:93:BB:53:6F:1B:56:4C:1A:CA:98:3F:1B:CD:53:E8
Authority key identifier: 10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18
Certificate issuer:       /CN=A91AA1F9/serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
Certificate serial:       41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
Manifest number:          40
Signing time:             Sat 17 Oct 2026 09:13:49 +0000
Manifest this update:     Sat 17 Oct 2026 09:13:48 +0000
Manifest next update:     Sat 24 Oct 2026 09:13:48 +0000
Files and hashes:         1: EJuU59mz5nnpnGKnotSXoX05lxg.crl (hash: TnBx2cJ2pg7FP2cE6yafvk1fun+bZ2UeOd2YjJzQl8E=)
                          2: 4A12ECDA687B11F1991CF7FE6647A888.roa (hash: DUotnWkAe6FNoAWorklQvryeqsRSLpu4L9xS7rYPygY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl
                          rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 Oct 2026 09:13:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA1F9, serialNumber=109B94E7D9B3E679E99C62A7A2D497A17D399718
        Validity
            Not Before: Oct 17 09:13:48 2026 GMT
            Not After : Oct 24 09:13:48 2026 GMT
        Subject: CN=6ad33c4c-05b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cc:be:01:cb:2f:9c:e0:bc:fc:99:c0:fa:8b:
                    9d:41:3f:b1:55:ef:b9:0b:d5:37:74:90:ee:00:63:
                    a3:64:b8:3a:20:e7:db:dd:e2:1a:33:45:f0:31:70:
                    b1:40:47:d6:d9:9c:31:69:c8:89:5a:fb:5e:85:c4:
                    ac:8f:bb:9b:dc:bc:3f:83:d8:d3:2b:5a:40:9e:7a:
                    68:61:8a:1d:31:e1:08:e0:31:74:d6:26:c0:1f:8c:
                    cc:ee:0d:84:56:83:bf:db:c2:85:a4:33:1e:7a:ca:
                    b2:74:d5:c1:87:c3:1e:4d:5b:41:d7:a9:02:f2:a8:
                    52:3b:3a:e7:78:a4:3f:27:7f:f5:a1:4e:cb:6e:6b:
                    86:89:b9:80:be:91:8d:a3:5a:c8:a8:1e:91:69:7d:
                    a9:30:80:86:c1:66:04:18:aa:08:a4:7f:10:63:c6:
                    30:b5:b8:9a:bf:31:aa:0e:c4:c5:96:36:ce:0c:3a:
                    e0:b3:63:66:db:dd:56:bc:33:49:2d:b6:19:f8:92:
                    85:41:72:27:78:d1:67:37:94:39:e8:8b:a1:53:11:
                    6d:58:16:39:c5:3c:ae:ba:2c:ac:84:ee:8e:14:83:
                    e6:91:5d:e5:ee:fb:d0:86:58:44:e8:36:35:28:45:
                    4c:d2:44:88:5d:9c:1e:19:13:eb:71:fe:14:25:66:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:DF:01:39:93:BB:53:6F:1B:56:4C:1A:CA:98:3F:1B:CD:53:E8
            X509v3 Authority Key Identifier:
                keyid:10:9B:94:E7:D9:B3:E6:79:E9:9C:62:A7:A2:D4:97:A1:7D:39:97:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJuU59mz5nnpnGKnotSXoX05lxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA1F9/D2D06436687A11F19E7144DB6647A888/EJuU59mz5nnpnGKnotSXoX05lxg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:55:b9:80:a5:89:b2:16:17:72:f1:b3:dd:a2:20:f6:28:a9:
         5c:45:84:3f:42:ca:47:fb:bc:81:74:8e:aa:de:af:5a:2b:a0:
         e2:83:94:32:35:fa:4c:9e:a2:aa:6c:41:1e:d2:52:2e:fc:52:
         c8:83:a5:f0:f7:58:d2:2e:90:97:f0:e4:c9:dd:00:f3:ba:c8:
         3d:dc:77:76:96:d9:94:27:e4:c6:96:3a:36:24:d9:97:97:f9:
         df:26:ce:c1:95:eb:04:3a:26:76:e8:78:8a:b9:f4:25:e2:45:
         b3:f2:0d:f3:91:f7:57:4d:f2:79:ff:99:9b:ce:1b:8c:7c:13:
         a1:8b:bb:15:d9:67:c8:41:62:7a:40:29:2f:48:b3:b7:99:2f:
         41:26:3d:38:96:1c:f5:88:a5:19:fb:ad:7f:78:2b:39:96:77:
         3a:66:55:6e:6a:76:87:69:d5:cd:74:11:62:62:13:60:9c:4d:
         39:1a:5c:c4:be:ac:63:f1:9a:8b:c9:3f:03:a9:e0:1a:2e:ac:
         5d:2d:4d:ef:9c:fe:61:d2:9c:44:18:99:cc:f2:61:1b:fd:80:
         85:f9:2b:d9:21:34:c5:54:3f:f7:38:90:75:dc:61:a2:d5:d9:
         e6:29:24:10:2a:67:b2:e6:0f:76:65:9d:bd:10:05:c2:50:0b:
         59:8a:aa:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 06:45:18 2026 by rpki-client