Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          Qkz0qwZndF0RhgD0GG4ZszG6KYXF5YNWXrcZBUOqTeo=
Subject key identifier:   9E:6E:41:92:4A:FF:A1:46:50:7D:0E:DE:0C:0D:C7:92:A6:25:7B:82
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          0292
Signing time:             Mon 21 Sep 2026 01:46:49 +0000
Manifest this update:     Mon 21 Sep 2026 01:46:48 +0000
Manifest next update:     Mon 28 Sep 2026 01:46:48 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: 49jdkXkmSb7j5scWjF8dGup9a1SXR4HPfYfMeqiiaNA=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: YpkLELI+RfMgGSNxlJJxGUE0f/y0YL4bJPjpf69tlbs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC, serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
        Validity
            Not Before: Sep 21 01:46:48 2026 GMT
            Not After : Sep 28 01:46:48 2026 GMT
        Subject: CN=6ab08c89-679d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:9c:55:03:ff:34:cf:92:ce:9c:1d:18:55:
                    a4:34:1a:d9:f0:37:32:68:d9:a0:5c:56:da:d3:8f:
                    a2:5a:a5:15:3a:89:11:4c:bb:11:32:5e:6d:34:d6:
                    aa:01:ee:4b:8f:0b:a7:f4:93:36:10:0e:3a:e6:39:
                    95:51:35:b7:5e:43:0d:ad:e9:e6:21:52:7d:ab:c7:
                    e9:81:fd:7e:25:06:47:71:74:9e:e3:47:3a:e7:b4:
                    b4:32:5e:54:19:3b:98:60:20:60:c1:a0:56:e8:9a:
                    e2:9d:aa:cf:4f:a0:60:85:2f:b5:b4:85:50:3b:c4:
                    de:d5:66:68:71:9b:d9:b0:64:1b:64:e1:fb:f1:af:
                    72:49:6c:d2:9d:6c:bd:c2:b9:5c:97:77:c9:1d:e3:
                    ce:26:c0:b1:56:ea:7c:ed:cc:7e:cb:ac:9b:3e:7f:
                    34:13:9d:f6:a6:46:90:8c:67:e6:5c:64:94:06:17:
                    9d:53:06:de:43:14:5a:18:48:8c:8b:31:0b:b7:c3:
                    cd:20:a2:47:b9:6e:cd:6d:58:43:7c:f3:1d:f2:19:
                    45:09:f2:9c:0a:8f:6a:c8:d1:b9:f7:5c:9c:96:12:
                    df:b3:91:ea:fb:5c:6e:be:62:45:6e:7d:59:9f:09:
                    55:0b:c2:18:6a:d1:c3:20:8a:7b:6f:c9:0d:ed:22:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:41:92:4A:FF:A1:46:50:7D:0E:DE:0C:0D:C7:92:A6:25:7B:82
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:55:6b:93:a0:1b:c6:e5:43:a2:09:a1:19:98:43:f9:6e:33:
         52:76:45:85:27:e5:38:be:56:4e:5f:70:6b:1d:e7:e2:b0:6b:
         50:a6:24:6d:70:f3:72:bd:f4:61:9e:ab:2a:c2:da:e2:32:f5:
         ee:4f:04:9b:f1:97:4b:80:c8:1d:c4:0e:dc:68:b1:d7:3e:ee:
         b3:97:06:7f:1f:7f:db:7a:c6:c9:7d:97:6a:87:4a:f1:04:11:
         1a:d0:99:99:f3:ee:f4:f3:a7:2f:0f:91:f8:92:56:f7:27:75:
         20:71:f6:e5:2b:50:b4:fe:3c:60:ce:db:87:10:6c:5d:8e:17:
         f2:82:cb:1a:c7:14:f7:53:c2:3b:cf:75:19:92:a6:46:3c:90:
         75:d5:1d:de:ee:73:20:38:c9:a2:20:ec:f4:4e:19:c6:99:5d:
         e4:21:00:63:c6:50:ba:ba:dd:60:22:f0:31:59:6a:0d:c3:f8:
         da:f9:28:84:42:74:50:fa:74:fb:c4:7e:90:0d:c8:9b:02:42:
         d7:ab:86:b1:6a:21:45:51:22:d4:84:1f:6b:bc:d3:74:e3:fe:
         da:c5:ea:70:6f:5d:c5:9d:09:ae:48:ca:77:c6:b0:eb:6c:2c:
         91:8b:99:01:99:12:a2:c5:f7:90:65:e0:12:12:b1:04:c2:99:
         b5:33:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:21:23 2026 by rpki-client