Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File:                     EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier:          82bgQsXQdC65GYDFDSy1BopC8X4Y+4RVheYU2q6rVsA=
Subject key identifier:   01:B0:67:D8:59:77:2A:8C:8A:89:DB:8F:AD:A2:A1:5D:7E:56:E5:2E
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer:       /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial:       0D81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number:          0D6D
Signing time:             Sat 10 Oct 2026 18:04:20 +0000
Manifest this update:     Sat 10 Oct 2026 18:04:20 +0000
Manifest next update:     Sat 17 Oct 2026 18:04:20 +0000
Files and hashes:         1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: VmOCJzthrbY/YCyNYcLwwFtP+T9a1JyTM/sE6r13JhE=)
                          2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 18:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3457 (0xd81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
        Validity
            Not Before: Oct 10 18:04:20 2026 GMT
            Not After : Oct 17 18:04:20 2026 GMT
        Subject: CN=6aca7e24-a15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:8c:72:5c:73:15:1a:d8:b5:33:13:1c:c5:
                    2e:ef:a0:e2:54:9a:09:de:29:6f:8c:2d:76:b1:67:
                    b8:c0:9c:b3:e0:6e:3b:6d:68:12:a1:a5:bc:5a:b3:
                    44:06:0c:96:1b:6f:28:43:e9:c6:35:8e:ad:28:ab:
                    68:fa:5f:62:1b:fb:f9:29:7c:2c:51:47:95:ff:8b:
                    0d:df:61:55:ca:47:0d:5e:59:7e:c0:0f:dd:8a:03:
                    dc:61:1c:8b:1a:e6:15:7d:8f:d1:ef:0f:77:90:01:
                    94:bb:13:e5:5b:13:ac:4f:27:11:9e:bd:b9:1f:2b:
                    91:fd:61:5b:e3:6f:c5:68:ef:c2:d8:73:e3:83:7b:
                    c5:b1:26:1e:50:74:6f:43:5f:23:da:6c:f5:10:c7:
                    bd:e3:a2:72:58:93:4c:f2:53:b6:44:8a:12:cb:71:
                    53:aa:75:c9:10:fa:c1:02:74:59:c2:9c:11:e8:ef:
                    82:3b:41:a7:b5:51:bb:80:69:c7:ea:99:53:d4:81:
                    0d:d9:3d:99:17:6d:2d:a0:e8:18:1b:6e:c5:4c:f1:
                    0f:49:3c:1a:a2:ff:f4:8a:da:94:74:9b:bf:87:98:
                    96:e8:51:d2:1c:fc:16:8b:48:cf:b3:77:77:50:46:
                    32:b5:d0:b6:fc:85:90:c2:eb:47:d9:f1:2f:5d:9b:
                    92:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:67:D8:59:77:2A:8C:8A:89:DB:8F:AD:A2:A1:5D:7E:56:E5:2E
            X509v3 Authority Key Identifier:
                keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:ef:72:cc:6a:a3:f4:b8:3a:28:51:26:3c:b8:1e:a5:68:
         02:e1:17:88:47:43:f1:2d:f9:d5:00:88:8f:96:86:72:56:af:
         a4:82:8e:a1:fc:4c:59:4b:95:3a:0c:0f:7d:e1:b4:f6:87:87:
         c1:8c:13:d8:fc:1c:47:21:c8:48:ec:55:12:03:e5:5b:19:c7:
         9a:b8:57:bf:aa:c3:aa:fa:2b:86:37:aa:09:dc:94:ea:85:9c:
         96:51:3b:94:e8:98:80:d8:f5:da:64:60:e8:a8:ec:d1:38:36:
         f7:7c:08:b6:df:50:a0:7e:f7:d8:0e:d6:3e:1b:19:04:8a:5e:
         dc:5e:60:33:7e:02:2b:27:42:64:a7:d5:95:a8:9f:13:94:64:
         16:3c:8f:e2:d4:22:59:ec:28:cd:7a:14:f5:61:ff:bc:e3:fa:
         45:cb:b6:ca:b6:8c:01:2c:ee:4d:01:02:40:cf:45:11:23:42:
         f1:45:f2:ad:a0:8e:b4:ec:cd:64:3a:4c:5a:06:1e:94:df:5c:
         20:89:64:26:ce:0f:3b:e0:0a:2a:b9:43:56:58:0e:17:64:04:
         64:e8:cd:18:38:f7:27:15:e7:d9:1a:72:15:3f:b7:f4:28:86:
         46:c8:22:e6:43:6d:fb:2f:00:72:aa:33:00:7c:7d:aa:60:3e:
         88:d4:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:59:10 2026 by rpki-client