Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
File:                     EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft (raw, json)
Hash identifier:          vKRINNqLOoURqVUXQTGgr8jds1ab7Gg0kgw/ako2NLc=
Subject key identifier:   C4:04:82:AF:0F:0D:A4:A8:B9:A0:FD:90:3E:44:67:AF:99:5B:29:EC
Authority key identifier: 11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44
Certificate issuer:       /CN=A91FD4A1/serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544
Certificate serial:       02D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
Manifest number:          02CD
Signing time:             Mon 21 Sep 2026 01:12:40 +0000
Manifest this update:     Mon 21 Sep 2026 01:12:39 +0000
Manifest next update:     Mon 28 Sep 2026 01:12:39 +0000
Files and hashes:         1: EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl (hash: ksJCtJPlhuVVmO3sLQKw0oCsggzdubjdNnDTN9uzZpY=)
                          2: 16E990CA6B0411ED849E0957C4F9AE02.roa (hash: 5Y3Gh8SZNPXmXnI9agUdsXUTOgsdD8G7cfIibLyVAxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 01:12:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 724 (0x2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4A1, serialNumber=1196CDDFDA3EBDC5ADA8FFC5BCB384912147D544
        Validity
            Not Before: Sep 21 01:12:39 2026 GMT
            Not After : Sep 28 01:12:39 2026 GMT
        Subject: CN=6ab08487-823a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:4a:5b:5d:da:11:57:9f:c9:2b:bb:54:f3:
                    01:27:cd:02:53:04:a5:9e:1d:03:44:b6:12:73:30:
                    2d:04:49:eb:07:b2:ed:81:96:ac:4b:f5:ea:da:8a:
                    12:b5:3c:54:17:a3:74:e6:40:e0:c7:80:9b:96:95:
                    95:0e:a3:37:77:98:f9:d8:0e:44:6f:ac:e9:a5:9d:
                    9f:41:e0:b3:ec:40:99:59:bd:97:56:9b:ac:24:df:
                    8f:7c:c3:a7:e7:6e:0d:34:25:de:cb:12:74:64:dd:
                    d5:56:28:19:03:f9:99:e0:8c:a0:09:c8:34:35:ed:
                    43:28:8f:73:b6:ef:96:2a:4a:60:4d:6d:f6:16:d9:
                    c0:91:70:a4:ff:db:da:5f:78:b5:56:c7:47:94:06:
                    35:c4:7c:1b:fb:0c:e8:04:cf:d0:c3:d5:aa:b6:a8:
                    3e:c8:0b:6f:05:76:61:0b:20:76:87:54:c1:e1:4b:
                    e5:a7:97:8a:16:b6:3a:bd:d5:39:cb:2a:e0:5a:2d:
                    90:3d:9b:ef:3b:0f:75:63:1a:ed:82:2b:ab:e9:a3:
                    e1:0e:d1:a2:70:f9:f2:cd:60:04:82:90:fd:8f:7d:
                    f4:56:35:6a:c3:60:41:58:a0:3b:cb:08:35:74:3a:
                    48:d7:35:49:91:d5:b4:ac:06:f2:b4:bf:18:97:3f:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:04:82:AF:0F:0D:A4:A8:B9:A0:FD:90:3E:44:67:AF:99:5B:29:EC
            X509v3 Authority Key Identifier:
                keyid:11:96:CD:DF:DA:3E:BD:C5:AD:A8:FF:C5:BC:B3:84:91:21:47:D5:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EZbN39o-vcWtqP_FvLOEkSFH1UQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4A1/62B423BA6B0111ED9A30F155C4F9AE02/EZbN39o-vcWtqP_FvLOEkSFH1UQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:8d:2d:de:73:10:67:9a:c1:48:04:7a:65:cd:1a:9f:22:
         38:a1:5d:e2:97:9d:23:7a:70:bf:e4:43:18:a8:4a:53:6d:60:
         81:c7:9b:80:07:98:82:d2:a7:38:bf:0d:43:a4:cb:db:8b:8c:
         92:73:e8:b2:82:9c:0a:e2:4f:77:67:9d:29:c5:56:29:4c:c8:
         2a:77:b5:ca:f4:d8:6e:1b:23:6d:9f:ec:d9:fd:67:26:4b:37:
         09:1b:30:29:cc:88:de:2d:72:7e:b2:37:74:db:da:1c:8b:42:
         d2:a2:6f:58:58:c7:39:76:31:d1:a2:26:ea:b5:fc:41:1e:0a:
         17:e5:30:b8:3a:a6:58:1b:29:85:4d:4c:90:47:c4:eb:e3:cc:
         f0:39:52:bc:4c:75:1d:ab:80:88:7c:bc:34:7b:5b:8e:98:78:
         05:7e:31:3e:50:3b:94:24:c1:f3:26:de:eb:d6:b4:29:4e:d8:
         54:01:c2:18:3e:5f:5b:76:1e:02:5c:3c:43:b2:3b:30:fa:a2:
         f2:1c:96:c4:b0:65:62:bd:e2:10:38:67:d5:41:e9:50:31:ac:
         e0:67:d9:f4:35:77:b3:91:17:5f:b5:bb:93:63:b5:de:b5:31:
         5f:6e:cd:98:d5:0c:55:13:70:4b:2c:ef:d0:69:a4:d1:fe:94:
         6e:4e:68:df
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ0QTExMTAvBgNVBAUTKDExOTZDRERGREEzRUJEQzVBREE4RkZDNUJDQjM4NDkx
MjE0N0Q1NDQwHhcNMjYwOTIxMDExMjM5WhcNMjYwOTI4MDExMjM5WjAYMRYwFAYD
VQQDEw02YWIwODQ4Ny04MjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmg5KW13aEVefySu7VPMBJ80CUwSlnh0DRLYSczAtBEnrB7LtgZasS/Xq2ooS
tTxUF6N05kDgx4CblpWVDqM3d5j52A5Eb6zppZ2fQeCz7ECZWb2XVpusJN+PfMOn
524NNCXeyxJ0ZN3VVigZA/mZ4IygCcg0Ne1DKI9ztu+WKkpgTW32FtnAkXCk/9va
X3i1VsdHlAY1xHwb+wzoBM/Qw9Wqtqg+yAtvBXZhCyB2h1TB4Uvlp5eKFrY6vdU5
yyrgWi2QPZvvOw91Yxrtgiur6aPhDtGicPnyzWAEgpD9j330VjVqw2BBWKA7ywg1
dDpI1zVJkdW0rAbytL8Ylz+LPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQEgq8P
DaSouaD9kD5EZ6+ZWynsMB8GA1UdIwQYMBaAFBGWzd/aPr3Fraj/xbyzhJEhR9VE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDRBMS82MkI0MjNCQTZC
MDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZjV3RxUF9GdkxPRWtTRkgx
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VaYk4zOW8tdmNXdHFQX0Z2TE9Fa1NGSDFVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDRBMS82MkI0MjNCQTZCMDExMUVEOUEzMEYxNTVDNEY5QUUwMi9FWmJOMzlvLXZj
V3RxUF9GdkxPRWtTRkgxVVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAnpKNLd5zEGeawUgEemXNGp8iOKFd4pedI3pwv+RDGKhKU21ggcebgAeYgtKn
OL8NQ6TL24uMknPosoKcCuJPd2edKcVWKUzIKne1yvTYbhsjbZ/s2f1nJks3CRsw
KcyI3i1yfrI3dNvaHItC0qJvWFjHOXYx0aIm6rX8QR4KF+UwuDqmWBsphU1MkEfE
6+PM8DlSvEx1HauAiHy8NHtbjph4BX4xPlA7lCTB8ybe69a0KU7YVAHCGD5fW3Ye
Alw8Q7I7MPqi8hyWxLBlYr3iEDhn1UHpUDGs4GfZ9DV3s5EXX7W7k2O13rUxX27N
mNUMVRNwSyzv0Gmk0f6Ubk5o3w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:51 2026 by rpki-client