Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
File:                     Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json)
Hash identifier:          vf1f7s4UhFkMoJT7r0Pg/N1M8EwBGmL30joJ8cWdv9s=
Subject key identifier:   0B:04:C0:46:F4:40:1E:35:0A:56:59:1E:ED:CB:03:42:18:03:E9:72
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       0255
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
Manifest number:          0250
Signing time:             Sat 19 Sep 2026 02:24:40 +0000
Manifest this update:     Sat 19 Sep 2026 02:24:39 +0000
Manifest next update:     Sat 26 Sep 2026 02:24:39 +0000
Files and hashes:         1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: fKDk++mKexdXmvXBfplejIeRiPxD7jlgkG3Xy4TWjx4=)
                          2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: nUtwryVyj8sVBMqfuQoCtx4EMPsCKsSvNHDaWPCCOzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Sep 19 02:24:39 2026 GMT
            Not After : Sep 26 02:24:39 2026 GMT
        Subject: CN=6aadf268-cb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:c9:8c:5b:6e:37:6e:38:90:fa:ab:b6:ef:
                    5a:1c:6d:ef:95:be:df:f2:17:69:46:ea:ca:73:f7:
                    d6:de:0f:b0:c2:5f:fb:dd:66:32:c8:bf:29:73:d3:
                    b0:b2:06:68:ee:cd:b2:c7:0c:b2:92:39:72:be:d7:
                    bb:8d:fe:e3:62:39:39:ea:61:15:d0:ba:2a:96:a4:
                    a9:dc:67:3c:a1:fa:49:6f:01:d3:43:24:25:af:4e:
                    e3:59:13:a4:43:0c:75:2f:5c:42:74:b6:8e:e1:49:
                    0c:00:6a:fc:c2:14:e3:ef:b3:0d:01:ac:8b:95:8a:
                    c1:89:c0:9b:a7:1d:21:f8:7f:ae:a4:f2:6b:bd:a5:
                    c0:a6:86:89:24:47:6c:36:55:23:c2:ac:75:c4:00:
                    20:4c:d7:43:2b:b8:03:84:e8:70:34:04:f8:46:03:
                    6b:be:8c:9e:7b:25:64:64:38:ab:c5:44:0b:07:fb:
                    5b:58:4f:50:ba:16:7c:64:42:3c:5c:85:7a:c5:50:
                    cb:0e:fe:4f:9e:5d:dd:39:18:15:1f:81:ce:7a:b9:
                    39:2c:ea:22:06:8f:4a:c4:d2:78:17:39:0b:ab:cb:
                    1a:2c:cc:ce:75:3f:d3:7c:29:5a:1a:4b:d7:23:ca:
                    c7:bd:d4:fb:12:89:74:02:0b:9f:66:96:67:37:de:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:04:C0:46:F4:40:1E:35:0A:56:59:1E:ED:CB:03:42:18:03:E9:72
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a1:da:64:b6:77:9b:d5:a0:10:f5:bf:b0:f7:8b:90:32:b0:
         27:f9:4d:ce:8a:a9:6b:3c:8d:e3:cb:d8:ce:9f:d1:2b:b3:14:
         11:70:25:76:b5:60:93:52:53:1c:62:22:28:66:ea:5b:4e:69:
         c5:8e:21:a5:fc:dd:0b:64:67:54:ad:aa:98:b7:a8:20:67:18:
         01:87:87:e7:42:89:b7:69:f9:61:b2:a4:55:05:cc:50:cb:8b:
         38:90:da:ed:a7:52:22:a7:47:59:d0:44:c1:c5:7c:6b:fe:41:
         cc:1b:b2:97:36:c5:05:60:b5:a0:dc:65:2d:6e:51:80:10:57:
         f6:0b:ec:83:60:52:82:b9:70:9c:5f:b3:08:2d:db:d5:83:c0:
         6d:e1:1c:8b:4a:f6:97:53:ed:9c:16:91:a0:c0:c3:ff:c1:ef:
         a5:ca:a0:c3:14:3c:02:0f:21:ef:6f:53:53:b5:63:85:be:69:
         24:ab:aa:c7:98:ad:dd:e4:95:e4:7a:1a:2d:3c:02:82:80:aa:
         87:b5:5d:23:05:28:98:88:d3:ad:97:aa:f7:1c:d1:73:1b:d4:
         ba:96:3d:40:da:dc:ec:3d:5b:2e:23:7c:27:c8:04:52:0e:6a:
         69:25:db:9f:07:9b:90:a3:dd:62:91:07:84:d2:cc:31:a7:1a:
         9e:83:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:35:19 2026 by rpki-client