Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
File:                     8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json)
Hash identifier:          +xMOMEQMG6USxrZf5J+jyWPpoAaAvvc+fQ8VpcHz/jI=
Subject key identifier:   3A:F2:92:66:EA:91:9A:35:B6:B9:FF:72:F9:F6:61:A7:E7:37:51:7F
Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1
Certificate issuer:       /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
Manifest number:          0159
Signing time:             Mon 21 Sep 2026 05:07:39 +0000
Manifest this update:     Mon 21 Sep 2026 05:07:39 +0000
Manifest next update:     Mon 28 Sep 2026 05:07:39 +0000
Files and hashes:         1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: c81B0KtmSY/QqyF/HfhKeJ2lUGhKxXTtNhw7HxbwB1M=)
                          2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: uOIwGBtnkiFkTWiwV37tpuSWY4L6Fnh3Dr2QZu/SFEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl
                          rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 05:07:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1
        Validity
            Not Before: Sep 21 05:07:39 2026 GMT
            Not After : Sep 28 05:07:39 2026 GMT
        Subject: CN=6ab0bb9b-15ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:75:71:b4:27:9e:1c:84:6d:0d:1a:0d:0e:
                    e5:53:5b:d4:94:7f:d4:c9:97:c5:04:6f:c9:0c:e7:
                    a9:4e:72:78:fd:1e:0a:47:1f:ef:7d:2b:97:12:67:
                    d1:b5:9e:c9:60:07:df:f2:10:4b:b8:c3:b6:f4:8c:
                    d2:4f:0d:20:93:29:69:73:18:91:85:21:1f:a0:f5:
                    0f:7e:94:4c:74:1c:fe:4e:08:a1:7b:06:42:b9:03:
                    72:20:ee:b2:09:29:65:ad:43:df:a1:8e:98:35:5c:
                    cf:d4:87:e5:3d:3a:2d:e4:cf:ac:ed:9c:b3:92:52:
                    d8:3f:b6:b3:b5:07:c9:a7:68:1f:04:e7:c9:fe:c0:
                    bd:40:f5:75:57:b3:65:71:78:07:6b:a7:8c:d4:f6:
                    d8:06:2b:68:d2:e7:aa:ea:2f:f0:ac:fa:f6:f8:b6:
                    8f:69:8f:e4:ac:7d:60:fb:a4:c5:31:7f:ca:87:07:
                    5a:c7:21:48:07:55:30:49:6f:7c:60:0c:55:b2:de:
                    1d:41:c1:5f:85:b4:f9:49:fd:fb:6a:b8:c5:cc:9c:
                    1a:22:13:40:4c:77:8c:1b:dd:9a:8a:c1:57:b9:b0:
                    8f:95:eb:e6:ac:88:47:89:7b:87:b2:02:8f:e9:21:
                    64:4d:6c:11:43:92:1b:d0:8c:9c:5f:ec:9a:34:07:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:92:66:EA:91:9A:35:B6:B9:FF:72:F9:F6:61:A7:E7:37:51:7F
            X509v3 Authority Key Identifier:
                keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:8f:f5:95:46:12:a5:57:10:2c:63:d6:c3:13:81:51:bd:2d:
         62:40:5f:50:89:c6:d1:54:4f:1a:2f:b8:b2:0e:a6:99:c0:1f:
         69:e9:3d:02:c7:30:37:c9:1a:51:72:97:15:46:2d:fa:3a:f8:
         94:84:d9:e2:5c:b9:9f:d1:86:05:d0:b9:48:81:7c:81:50:8d:
         d5:d9:31:ca:a3:4f:20:a9:7f:f2:b8:59:40:8c:9f:97:bc:e1:
         17:47:5f:b3:4b:e3:02:4e:01:21:62:41:bf:a7:62:7a:35:99:
         30:ee:3c:0b:68:f8:63:86:71:68:56:37:e9:27:56:6d:c0:71:
         dd:0a:7c:4b:d2:2f:62:24:33:47:2c:8c:ee:9f:99:d0:f5:94:
         c9:98:1c:3a:5b:f1:ea:cd:18:92:e9:4b:79:49:b3:b6:79:2c:
         ee:9c:3f:a7:6e:24:3f:f8:5d:54:31:c4:76:78:35:b1:c2:92:
         08:6b:54:8f:39:8f:63:bd:79:4c:da:96:8e:4e:88:5d:85:d5:
         49:80:50:cc:29:37:01:b6:d9:a2:73:ea:dd:cb:c8:c7:e0:03:
         cc:d2:8e:04:2e:f9:5e:7c:cd:13:e0:ee:48:15:af:f7:f9:48:
         24:43:46:d9:36:5a:f2:93:fd:72:02:f9:ea:7e:62:4f:39:28:
         06:b8:cf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:15:36 2026 by rpki-client