Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
File:                     -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json)
Hash identifier:          ebq38o3vdFKN7XwPWQ/3rPJTmpATQgjB3y0qiJhgMLE=
Subject key identifier:   31:6C:EC:B5:95:96:3E:F1:60:8E:12:22:33:5F:B2:6F:97:3A:16:A2
Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20
Certificate issuer:       /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820
Certificate serial:       0229
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
Manifest number:          0222
Signing time:             Sun 27 Sep 2026 03:12:59 +0000
Manifest this update:     Sun 27 Sep 2026 03:12:59 +0000
Manifest next update:     Sun 04 Oct 2026 03:12:59 +0000
Files and hashes:         1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: PSVlH9xVTy5CwwWZeUAN0J+rVT86LD6ZvTj+sc3Z+xk=)
                          2: VSN5GqE1ltgJwx7RS3cxUNDcO8A.asa (hash: 4NhPMM06aQACEB7ezDJRQrzNEtgGn+jyY3EkFIetkxw=)
                          3: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: wgZY6CZu4QF64tBtckX4XM82ZwiMInYJliPcrt7Ct0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl
                          rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 03:12:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820
        Validity
            Not Before: Sep 27 03:12:59 2026 GMT
            Not After : Oct  4 03:12:59 2026 GMT
        Subject: CN=6ab889bb-4df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:cc:ad:41:6e:63:6b:34:b8:1f:3b:3b:f4:
                    aa:22:57:f8:96:eb:37:c4:c2:a8:5e:e2:c9:ab:80:
                    8e:09:e2:38:8a:ba:c4:70:71:4d:23:3e:cb:07:c0:
                    e5:af:53:26:5f:df:40:2c:d7:43:ed:93:15:65:bc:
                    3e:7f:5f:fa:24:fa:9e:ab:a1:c3:40:4b:ef:16:96:
                    77:ad:2d:09:45:00:e7:cb:12:ec:cc:a5:e0:1e:54:
                    8f:c1:63:02:ac:ba:2d:f2:9f:f1:86:52:da:e7:58:
                    f2:fa:2a:c6:ad:4e:eb:70:75:80:06:63:13:ad:72:
                    22:62:51:67:9d:5c:7b:18:ed:67:e3:df:b5:55:df:
                    52:74:8d:1d:a0:a9:21:5c:ba:3e:4a:bd:a7:16:93:
                    7d:9e:48:b4:37:6c:47:c4:ae:df:5b:69:fe:65:e3:
                    e6:94:b0:f7:57:13:a4:24:51:31:26:70:21:fb:fc:
                    c2:e4:77:d6:4e:5d:72:1f:68:be:45:1c:85:52:53:
                    c4:61:f6:f0:1c:56:ef:2a:12:e8:74:d2:fe:17:56:
                    c8:4d:19:f4:43:db:1b:c4:d3:fe:bf:77:6b:97:74:
                    04:85:53:27:94:56:d9:85:a3:2d:81:f5:85:25:e9:
                    48:8c:23:3b:57:0f:49:6b:e8:ff:03:83:5f:5e:9d:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:EC:B5:95:96:3E:F1:60:8E:12:22:33:5F:B2:6F:97:3A:16:A2
            X509v3 Authority Key Identifier:
                keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:77:17:f8:35:81:47:b7:46:47:bc:79:2c:f5:57:4f:bf:
         93:0a:86:68:0b:cb:ef:6b:6e:6e:2d:07:79:ca:4f:3c:b9:63:
         67:fa:0f:27:4e:0b:3d:5e:0e:f2:d0:e0:f7:99:0c:f1:8a:6c:
         00:79:f7:aa:68:da:94:73:b5:90:6f:4f:94:d6:b6:89:03:bd:
         2c:53:7c:f1:5e:78:5f:0f:5b:d2:7f:36:e0:40:be:9a:ab:11:
         2a:70:19:a0:79:b6:b5:3e:86:e5:2e:b4:f9:66:1a:d3:a0:83:
         c3:40:b5:1f:68:fe:df:60:95:39:c7:b4:5d:d6:df:23:a7:34:
         17:0c:08:b0:fe:d7:e3:3b:7d:5a:88:99:aa:0f:16:71:2d:53:
         76:15:0a:97:15:16:d1:c4:7b:e9:d4:be:89:ef:5d:ba:c9:1e:
         d3:cc:7e:b4:e4:19:53:93:a7:da:7d:e2:3c:7c:2d:ab:53:de:
         c4:8e:3b:0c:29:dc:4a:81:b7:d8:71:1b:38:1d:16:c9:0b:39:
         64:5b:fb:fb:3d:fb:5b:cc:0e:70:ae:55:74:c8:69:c5:d8:b7:
         98:95:09:7b:e2:2d:27:3b:19:51:c1:39:c9:d8:e3:1c:44:01:
         cd:d9:f9:97:57:a0:43:82:c1:23:fb:27:03:a1:47:19:7e:86:
         bc:04:f7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:33:37 2026 by rpki-client