Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
File:                     EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft (raw, json)
Hash identifier:          HT+87Wx6iEgwiNjJmfoxOJ4BwkVKlo53ywOfGRMaLNc=
Subject key identifier:   F1:C9:74:7F:DB:76:54:E2:1B:00:CD:28:5D:59:D6:54:C8:03:BC:6A
Authority key identifier: 11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2
Certificate issuer:       /CN=A91CE814/serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
Certificate serial:       01A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
Manifest number:          01A0
Signing time:             Fri 09 Oct 2026 04:50:37 +0000
Manifest this update:     Fri 09 Oct 2026 04:50:36 +0000
Manifest next update:     Fri 16 Oct 2026 04:50:36 +0000
Files and hashes:         1: EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl (hash: SMWDeQY7YJFYeUgczMSlfS/u9OhnkVKpgMZN0U/GbFc=)
                          2: CA8007604A3011EFB101441AC4F9AE02.roa (hash: wpEukBumTxmT4e2pU7Nv0zr8HBN5v6g/VuuPyeiJSDU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl
                          rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 04:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE814, serialNumber=118D9BDE31754F9854CB554740A299F137E241E2
        Validity
            Not Before: Oct  9 04:50:36 2026 GMT
            Not After : Oct 16 04:50:36 2026 GMT
        Subject: CN=6ac8729c-7aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ac:5e:b6:57:ca:88:cc:a5:9e:a9:4d:aa:0d:
                    98:ba:8d:99:4c:8b:fb:b2:08:0d:82:71:b9:7e:e4:
                    66:d6:fd:51:da:01:ed:0d:07:12:30:97:e9:57:bd:
                    7a:71:8f:d7:da:c8:1c:c8:7e:f9:fc:23:62:fd:3f:
                    a8:f1:ac:8d:7c:7c:96:ba:85:9b:4b:8a:78:21:8c:
                    83:af:a2:72:5c:cc:37:bf:a3:7d:cd:35:c6:4c:b8:
                    1f:7f:4b:bc:bc:92:b3:04:12:07:fb:92:c0:46:31:
                    14:ca:5a:50:fd:93:55:4f:5d:9c:4c:60:e1:49:58:
                    2d:17:21:eb:f3:c1:ea:42:cf:a6:3a:a6:57:77:fa:
                    af:81:c3:61:ec:e1:06:02:f0:04:14:d7:16:47:15:
                    43:78:c6:a1:f6:46:31:86:1d:48:ff:eb:9c:1b:9a:
                    c9:cc:9d:bf:98:33:71:5b:fe:f3:76:52:67:4d:8b:
                    68:31:07:59:28:69:62:ec:87:42:33:14:32:0f:99:
                    e5:75:ad:d4:33:13:16:c9:34:6e:74:10:cc:50:1e:
                    b7:bd:27:40:8c:91:72:6a:73:4c:49:39:cd:02:8e:
                    8f:43:f4:40:39:4a:36:57:65:66:50:47:b8:3b:f4:
                    f0:d0:73:0f:df:46:1c:34:3c:73:c6:7b:f4:bf:f8:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C9:74:7F:DB:76:54:E2:1B:00:CD:28:5D:59:D6:54:C8:03:BC:6A
            X509v3 Authority Key Identifier:
                keyid:11:8D:9B:DE:31:75:4F:98:54:CB:55:47:40:A2:99:F1:37:E2:41:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE814/8C57F15A4A3011EFA8307719C4F9AE02/EY2b3jF1T5hUy1VHQKKZ8TfiQeI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:9a:ec:0a:20:d8:cc:28:11:c1:ca:cb:d4:cb:ab:fa:0e:
         98:e1:ca:f8:c7:51:a6:bc:63:d4:7f:77:67:df:27:a3:9a:f4:
         31:54:5c:6d:80:90:fd:b0:24:ee:16:bd:38:a0:c9:ce:70:b1:
         2b:52:50:18:dd:d9:10:55:fc:1e:1e:c6:8a:1d:7e:f6:e9:7c:
         c9:84:5e:3c:bc:9c:6d:6c:ef:f1:3f:1c:03:9e:f8:17:ff:f2:
         62:0a:1a:2e:a3:c8:43:6f:71:4d:d8:86:29:fa:07:2b:3d:55:
         38:5e:5a:b2:16:a7:d6:32:b9:13:de:f7:f5:49:2f:0c:59:a8:
         f0:66:41:ba:e0:65:e3:5d:86:2d:55:07:8c:39:0c:9a:05:e8:
         6a:a7:85:87:e5:9f:bd:14:18:b3:f3:e8:5d:82:a3:34:14:dc:
         b9:54:9e:d5:af:b0:f8:40:98:a8:85:54:22:de:ec:7d:5e:a1:
         6b:93:33:37:4d:8f:4e:93:56:92:08:ac:a3:98:ed:8c:75:d2:
         83:e2:fe:32:fa:3f:af:1a:34:40:a4:e8:37:7d:eb:86:4f:52:
         d0:ef:68:c1:ad:1c:8d:f5:72:7b:95:b6:35:bc:2e:ce:b4:b7:
         ca:d2:e9:c2:dc:91:d8:48:f6:2c:b0:77:b3:f1:9d:f4:aa:c1:
         c3:3a:5d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:19:54 2026 by rpki-client