Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
File:                     eEgGhmLmMK0APXDe2HIXjOg8DEs.mft (raw, json)
Hash identifier:          5SAhdSLmr/N8ElsZ7dy9lvtIsEGThbqpvIbF6j/NWS0=
Subject key identifier:   1C:0F:44:63:66:63:C7:81:6E:06:33:76:F6:95:14:CD:2A:03:96:4B
Authority key identifier: 78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B
Certificate issuer:       /CN=A91C873A/serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
Manifest number:          1B
Signing time:             Mon 21 Sep 2026 08:54:38 +0000
Manifest this update:     Mon 21 Sep 2026 08:54:38 +0000
Manifest next update:     Mon 28 Sep 2026 08:54:38 +0000
Files and hashes:         1: eEgGhmLmMK0APXDe2HIXjOg8DEs.crl (hash: S6qxKXCZf5P1hilXfb2szYDTumA/qWyGFpQCC7d2CBM=)
                          2: B57C128E8F1411F1B4F762993411F970.roa (hash: CyRdafZtYteQkqRhGDaejp5amAP2SU7A6K/gROP8/go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl
                          rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C873A, serialNumber=7848068662E630AD003D70DED872178CE83C0C4B
        Validity
            Not Before: Sep 21 08:54:38 2026 GMT
            Not After : Sep 28 08:54:38 2026 GMT
        Subject: CN=6ab0f0ce-ed1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4f:13:40:28:3e:db:51:e1:b3:dc:e4:50:d5:
                    62:dd:77:0c:0b:d2:13:4b:3c:83:86:e7:26:de:d2:
                    d1:03:f6:6f:10:0d:5b:35:b5:08:77:e7:53:14:de:
                    0c:a2:9c:a8:67:5c:6b:1a:0c:00:2b:46:3b:a7:b3:
                    f8:87:44:7d:4f:70:29:b7:e2:81:38:5e:bf:e4:ea:
                    d5:d2:3c:75:53:38:ce:be:9f:fe:2c:e0:95:72:2c:
                    55:03:e8:d0:a9:7a:43:a6:1d:4b:d1:fb:46:47:90:
                    73:6e:fe:c2:74:6b:cf:30:13:ac:e4:9d:04:46:dc:
                    99:f6:bc:15:54:c4:27:da:93:36:15:a4:df:d9:e5:
                    12:a4:f4:c0:c4:ed:88:d4:97:dd:f8:63:20:ec:af:
                    07:38:a0:e3:49:45:7f:e2:40:65:26:34:b7:1f:58:
                    ad:b4:2b:88:7b:37:b9:38:23:bc:9a:b2:35:10:1c:
                    f3:7b:1e:df:17:d4:06:dc:be:e4:ea:c6:04:45:f3:
                    ef:5a:2b:ac:3b:0b:0a:70:95:a9:cc:b6:93:90:b7:
                    08:65:2b:6c:d9:af:85:64:49:20:1a:cb:8e:73:fe:
                    d1:c4:63:e3:6e:ae:8d:56:ea:65:4e:fd:8b:82:12:
                    3d:be:7c:5d:85:ce:a9:8d:00:e2:1b:ac:56:32:6c:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0F:44:63:66:63:C7:81:6E:06:33:76:F6:95:14:CD:2A:03:96:4B
            X509v3 Authority Key Identifier:
                keyid:78:48:06:86:62:E6:30:AD:00:3D:70:DE:D8:72:17:8C:E8:3C:0C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEgGhmLmMK0APXDe2HIXjOg8DEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3C1F57FC8F1411F1AAFCC9463411F970/eEgGhmLmMK0APXDe2HIXjOg8DEs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2e:0a:73:74:f2:4f:51:7d:6c:01:9a:3f:a7:b1:58:53:71:
         53:02:a0:81:c1:c2:07:bb:3d:85:a4:94:66:57:7c:a0:61:15:
         99:e1:db:23:5d:5b:d0:3a:be:ab:f6:58:4a:c6:90:36:3d:6a:
         2d:c5:79:c4:9a:a4:2b:a7:de:85:90:f1:43:e5:4c:8a:f9:d5:
         c2:f6:2a:bc:38:13:c8:02:af:e1:f9:7f:d3:68:e6:cc:74:33:
         c7:9e:00:5c:05:37:f0:b2:c0:78:9d:bc:48:e6:65:a0:fd:ad:
         ee:f7:31:dc:8a:4f:37:94:1c:05:e2:ca:b4:96:5e:89:bc:27:
         9e:cf:ad:17:0f:e4:e8:42:c6:70:27:3d:77:25:e1:16:d9:74:
         06:a4:b3:60:b4:48:74:95:4e:72:c1:97:d6:bb:7b:2b:0b:cb:
         cb:b4:64:05:15:e4:7e:99:1a:f0:c6:e6:b3:b3:9a:34:94:d5:
         ac:b6:a0:89:b9:83:cd:0d:b6:1c:34:65:d4:10:1f:de:07:46:
         5b:91:a5:e3:24:d4:45:c8:2d:94:25:9e:b4:0f:31:f3:0a:00:
         ef:e0:f3:1c:e1:3c:e9:82:5d:c9:9e:2b:62:fe:0e:42:00:32:
         5d:a3:9a:64:3d:87:78:b0:4c:37:ef:8b:22:f9:3b:6c:57:df:
         5f:1d:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:56:21 2026 by rpki-client