Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File:                     enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier:          FMBK7psAudOxmUbJ467Sq1N8AemyozvOrUuBs9JqWT8=
Subject key identifier:   7F:E4:79:B8:B9:03:43:3E:19:74:F8:8A:E9:B8:E4:34:FE:47:D4:EB
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       0109
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number:          0100
Signing time:             Mon 21 Sep 2026 06:14:43 +0000
Manifest this update:     Mon 21 Sep 2026 06:14:43 +0000
Manifest next update:     Mon 28 Sep 2026 06:14:43 +0000
Files and hashes:         1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: hUUxMXb3jygFQ1r/3MvkIBc+XuHYjpUdSAZEibj+6TA=)
                          2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
                          3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:14:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Sep 21 06:14:43 2026 GMT
            Not After : Sep 28 06:14:43 2026 GMT
        Subject: CN=6ab0cb53-6b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:02:4b:cb:8c:5a:b2:ec:73:d9:25:39:4e:
                    31:47:c4:dd:49:2d:ca:40:b6:a0:82:f7:43:cf:3f:
                    76:3f:61:43:ed:b3:72:64:a2:c6:1f:20:8d:db:a9:
                    0c:a5:ca:af:4b:69:73:b4:1d:72:0b:8d:c4:ec:18:
                    a7:aa:92:14:34:63:c5:21:f1:7e:56:b3:7c:dc:06:
                    16:59:d6:aa:96:ed:f1:72:1c:68:ef:97:19:5a:87:
                    75:b7:b9:b9:39:d6:6b:87:ea:cf:fe:1a:53:db:10:
                    2c:66:be:cd:4b:6e:fd:a3:9c:a2:e4:5e:ac:78:82:
                    dd:b1:a8:f4:a2:38:e0:c7:f5:c7:59:ec:f7:61:ed:
                    48:d0:0f:b0:a4:08:72:fd:61:34:8c:f9:fc:f0:52:
                    84:47:38:61:db:93:b8:0d:d3:4d:dd:48:6b:a4:ac:
                    2c:6e:32:17:02:85:40:de:74:3e:18:6b:73:e1:62:
                    bb:0d:ce:d1:71:97:6e:a7:e1:f1:33:cf:d0:57:ae:
                    51:f7:4c:45:69:e8:43:9e:ff:80:b6:09:a6:df:3e:
                    70:e5:a4:6e:a2:e3:95:0c:a4:5f:67:93:5e:5d:99:
                    f2:10:2e:77:0d:51:fe:06:70:27:c8:20:b6:7c:2e:
                    98:ca:d7:e7:d1:85:cd:c3:50:43:74:00:f3:d5:70:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E4:79:B8:B9:03:43:3E:19:74:F8:8A:E9:B8:E4:34:FE:47:D4:EB
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:97:81:f6:b5:fc:85:a2:ab:64:a5:8d:f0:c0:2b:54:68:e3:
         32:47:f1:fb:b3:05:8a:92:74:c4:51:3a:68:06:e5:8e:53:23:
         cb:2d:c4:56:29:38:8c:11:79:c6:8a:3c:00:31:1b:61:c2:86:
         93:ab:bc:a3:5b:0e:a8:f8:84:1a:89:1e:30:27:99:b5:29:40:
         b0:96:70:b6:7c:d1:e9:ec:3e:9e:53:f1:0c:e2:ec:04:ca:fb:
         16:ff:ea:ba:93:c8:ee:68:7e:fd:43:e8:a2:3d:f1:a3:0a:41:
         f0:41:fe:06:87:46:ba:05:36:ad:02:e3:8d:c7:aa:31:f5:83:
         f6:32:ab:8b:77:84:74:95:0e:01:66:70:c0:99:ab:05:07:ab:
         0f:5e:7e:c5:30:fe:93:ec:d3:e4:95:59:5d:6e:25:a2:7b:a3:
         b6:64:fd:a9:d8:fd:3d:05:27:0b:5c:e0:74:1d:90:bc:24:ca:
         5f:96:07:22:ac:a6:7a:ac:a3:c1:fb:bb:ca:b0:72:64:82:1a:
         50:81:7a:1f:0a:75:ee:66:e8:e8:fc:2b:da:a3:d2:b1:d8:af:
         5f:e9:7c:82:f5:e8:c0:56:98:82:e9:33:d2:c4:33:33:8a:47:
         e0:ca:3b:19:a3:e7:f4:81:47:f6:4e:39:40:07:79:9e:fc:90:
         20:0f:0c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:48:22 2026 by rpki-client