Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          j68o7PnUwtMBnDqb08S/2AtQZP71Lm9+TMgBD2lpSJE=
Subject key identifier:   3B:77:B8:0F:3A:86:1A:BE:62:30:AA:71:F0:88:3A:B0:51:B1:1B:F5
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0285
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          0279
Signing time:             Sat 03 Oct 2026 02:38:09 +0000
Manifest this update:     Sat 03 Oct 2026 02:38:08 +0000
Manifest next update:     Sat 10 Oct 2026 02:38:08 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: pl399ZQJfb4E5GmXQFpiOU/qx2rId1rK2DqlSngGycg=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: pL7TsTQ2Nm3m6VOrPtjdoQ/AUSEeALli0uk6St9i4To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Oct  3 02:38:08 2026 GMT
            Not After : Oct 10 02:38:08 2026 GMT
        Subject: CN=6ac06a91-5882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:7e:ca:bc:91:db:bf:20:cf:66:54:90:56:
                    80:10:d3:68:3a:c5:f7:2b:f6:a6:aa:c1:f5:e0:2b:
                    51:ec:0d:2f:7b:63:ba:40:7a:bb:40:c1:93:d6:ec:
                    52:77:ea:85:48:38:64:02:ae:e6:c0:85:65:40:af:
                    3d:0c:cf:8f:13:04:db:47:21:fb:12:a7:5f:98:a3:
                    c6:bd:bf:b1:27:37:55:57:b3:16:1a:a1:3b:32:43:
                    9b:ef:67:b1:e2:39:81:cb:81:11:be:a6:fa:18:df:
                    1f:c9:ed:aa:34:a8:80:76:9e:44:a7:a9:09:1d:12:
                    c6:6f:58:7e:c6:83:02:1c:8c:81:9d:5b:7c:61:63:
                    b6:f6:6c:5e:cc:0f:8b:00:04:07:25:ab:18:10:8d:
                    83:d0:22:f4:57:1f:94:3e:8f:42:b0:b9:bd:33:54:
                    1a:3d:a6:7c:25:b5:4a:e0:b2:4c:2e:db:45:94:5d:
                    9b:1d:ca:45:b1:94:9d:61:a0:b0:a2:68:1a:8f:67:
                    eb:f1:4a:67:f4:9f:d6:24:c3:03:64:56:60:17:62:
                    7c:b3:68:2e:4d:f1:54:92:88:76:b5:54:4e:83:2a:
                    72:e3:b6:55:58:3b:90:1e:2a:db:34:8f:a2:e8:6d:
                    64:87:16:4c:ae:ad:f4:3e:e2:34:70:07:f5:53:a5:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:77:B8:0F:3A:86:1A:BE:62:30:AA:71:F0:88:3A:B0:51:B1:1B:F5
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:42:e8:c0:e5:ed:5a:a8:6f:52:d7:fe:fd:14:3e:01:23:e3:
         fb:19:4a:c2:f4:74:22:62:b4:27:6b:00:1f:32:7f:64:a4:b8:
         56:8c:81:f0:24:68:75:33:e7:d1:11:e1:0a:51:67:25:19:ad:
         de:6f:a5:d2:55:88:8f:d0:ff:65:77:99:58:3a:43:67:50:2c:
         10:aa:b5:9c:ea:bd:8f:72:7b:25:53:42:84:61:55:d2:9b:f3:
         91:17:16:2e:5d:16:0b:a4:33:6a:b2:e3:0f:27:b1:f8:64:70:
         d0:78:94:33:ce:d9:c6:d4:32:6d:de:e5:4b:8b:12:68:9e:8a:
         28:b3:a1:25:aa:56:f8:3b:52:aa:8f:45:1f:e8:d3:c5:5d:eb:
         7b:eb:85:20:b1:5d:86:15:cf:dd:59:38:99:27:5c:38:a4:d8:
         e2:27:48:a6:61:60:8e:1f:9c:1c:e4:16:05:7c:e2:c1:d0:ce:
         9b:39:ad:4d:66:ca:f4:47:11:40:ab:7a:a5:b3:6c:c0:8b:bc:
         ea:5e:6e:c7:d0:46:71:13:4b:dc:8b:1b:fc:12:30:1b:d1:dc:
         aa:85:9e:bb:8d:e5:ef:af:e1:ad:b3:46:f7:87:8b:3e:ea:d7:
         21:20:11:78:96:ce:82:d6:26:88:f2:bc:93:45:3a:16:a8:13:
         28:0d:75:c1
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYxOTAxMTAvBgNVBAUTKDdCM0E2QkRFRDJGN0I0QzA1ODQ1NjhDMDY0QUI4MDM0
MzI4NzIzQTAwHhcNMjYxMDAzMDIzODA4WhcNMjYxMDEwMDIzODA4WjAYMRYwFAYD
VQQDEw02YWMwNmE5MS01ODgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAra5+yryR278gz2ZUkFaAENNoOsX3K/amqsH14CtR7A0ve2O6QHq7QMGT1uxS
d+qFSDhkAq7mwIVlQK89DM+PEwTbRyH7EqdfmKPGvb+xJzdVV7MWGqE7MkOb72ex
4jmBy4ERvqb6GN8fye2qNKiAdp5Ep6kJHRLGb1h+xoMCHIyBnVt8YWO29mxezA+L
AAQHJasYEI2D0CL0Vx+UPo9CsLm9M1QaPaZ8JbVK4LJMLttFlF2bHcpFsZSdYaCw
omgaj2fr8Upn9J/WJMMDZFZgF2J8s2guTfFUkoh2tVROgypy47ZVWDuQHirbNI+i
6G1khxZMrq30PuI0cAf1U6WahQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDt3uA86
hhq+YjCqcfCIOrBRsRv1MB8GA1UdIwQYMBaAFHs6a97S97TAWEVowGSrgDQyhyOg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjE5MC8wQkIzOTY1MjA0
OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RNQllSV2pBWkt1QU5ES0hJ
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V6cHIzdEwzdE1CWVJXakFaS3VBTkRLSEk2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjE5MC8wQkIzOTY1MjA0OTYxMUVFQkQzMUVEMzBDNEY5QUUwMi9lenByM3RMM3RN
QllSV2pBWkt1QU5ES0hJNkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAxELowOXtWqhvUtf+/RQ+ASPj+xlKwvR0ImK0J2sAHzJ/ZKS4VoyB8CRodTPn
0RHhClFnJRmt3m+l0lWIj9D/ZXeZWDpDZ1AsEKq1nOq9j3J7JVNChGFV0pvzkRcW
Ll0WC6QzarLjDyex+GRw0HiUM87ZxtQybd7lS4sSaJ6KKLOhJapW+DtSqo9FH+jT
xV3re+uFILFdhhXP3Vk4mSdcOKTY4idIpmFgjh+cHOQWBXziwdDOmzmtTWbK9EcR
QKt6pbNswIu86l5ux9BGcRNL3Isb/BIwG9HcqoWeu43l76/hrbNG94eLPurXISAR
eJbOgtYmiPK8k0U6FqgTKA11wQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:25:30 2026 by rpki-client