Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
File:                     ieNpO3EjaLD6zmuk5GeXCK85OLU.mft (raw, json)
Hash identifier:          BX7MCqLvncvjzwKa8WWbwTuye+VBdyvoj4uhO6uYveQ=
Subject key identifier:   6E:6C:7C:55:32:46:02:E6:AE:F0:17:A3:91:9D:00:C1:4A:14:06:89
Authority key identifier: 89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5
Certificate issuer:       /CN=A911EA03/serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
Manifest number:          66
Signing time:             Tue 29 Sep 2026 08:40:46 +0000
Manifest this update:     Tue 29 Sep 2026 08:40:45 +0000
Manifest next update:     Tue 06 Oct 2026 08:40:45 +0000
Files and hashes:         1: ieNpO3EjaLD6zmuk5GeXCK85OLU.crl (hash: vPZBtUCRwDeIWRVyjmO0kpTxUVvfm0eMJn5I0Clxq+g=)
                          2: FD1CE81824DC11F1AC9E21B6AD833773.roa (hash: aKiZx9bAHTnqGJOBAfW2TQZBMx8LZSsNmHEuGV9buHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl
                          rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 Oct 2026 08:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA03, serialNumber=89E3693B712368B0FACE6BA4E4679708AF3938B5
        Validity
            Not Before: Sep 29 08:40:45 2026 GMT
            Not After : Oct  6 08:40:45 2026 GMT
        Subject: CN=6abb798e-7df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:d5:52:6a:80:84:45:26:7e:13:0e:28:43:
                    ed:b8:a7:51:1c:17:d9:93:5a:11:80:81:e3:8e:45:
                    d7:41:01:d2:78:88:c1:bf:6d:79:75:c0:c1:3c:43:
                    50:00:9c:d9:cd:d2:4f:87:39:7a:a6:f5:02:07:6c:
                    d5:a8:dc:24:f4:d9:9b:ee:69:14:7e:23:7b:9d:09:
                    f8:9c:e4:42:c7:ae:b9:60:6c:67:be:63:04:01:6d:
                    65:8f:c6:1f:74:9c:c4:1d:bf:4c:a0:9b:43:ab:55:
                    32:9f:65:9a:b6:93:91:6f:09:7e:79:f4:87:2f:09:
                    b9:64:61:e3:92:1b:cb:1b:23:71:7d:94:93:99:94:
                    65:6f:6c:ea:3f:c6:b2:8b:24:83:ae:b6:5b:e8:d7:
                    4d:fc:69:2f:4f:16:1b:31:75:e5:2b:a1:13:6e:a0:
                    fd:74:07:79:dc:54:bf:35:7f:32:b2:55:79:ac:b6:
                    73:8f:76:4e:5a:c1:88:d4:04:56:3e:0e:69:df:0a:
                    11:70:cb:49:c3:45:c0:c6:78:1b:db:fa:72:8d:dc:
                    b7:5b:b8:3f:16:07:07:fa:b4:97:ea:0b:40:88:21:
                    32:de:ef:ce:62:17:38:13:25:10:fb:f3:e5:f5:fd:
                    33:ed:6e:52:db:ca:35:1c:05:70:f5:b7:27:79:97:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:6C:7C:55:32:46:02:E6:AE:F0:17:A3:91:9D:00:C1:4A:14:06:89
            X509v3 Authority Key Identifier:
                keyid:89:E3:69:3B:71:23:68:B0:FA:CE:6B:A4:E4:67:97:08:AF:39:38:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ieNpO3EjaLD6zmuk5GeXCK85OLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA03/AE709A0C24DC11F1AAF5B34AAD833773/ieNpO3EjaLD6zmuk5GeXCK85OLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:70:b3:e7:14:ac:a4:40:6f:16:3e:5e:09:1f:fd:fb:02:03:
         3a:43:2e:ef:99:b4:a1:f2:10:e5:dd:3d:85:9e:a7:9f:99:1a:
         02:a3:95:75:b7:1c:ca:5c:f8:af:38:69:36:85:61:53:9d:f0:
         b3:2f:af:6d:59:15:5f:32:57:82:c9:b5:9c:a9:fe:63:fd:eb:
         d9:30:10:90:a1:43:3d:57:e4:99:59:6d:20:b5:4f:e0:ea:f6:
         ed:e6:68:9c:ab:b6:e5:bf:3e:56:9f:2e:db:5e:24:0d:15:2c:
         21:f9:fd:80:a7:a7:73:ab:a7:1f:07:4e:cb:fc:6e:19:eb:08:
         79:85:53:04:69:36:a0:f2:bc:b5:47:3d:8f:ee:02:98:c3:df:
         16:51:a0:96:67:33:94:ec:b2:c3:88:11:4f:49:9c:b9:1d:e4:
         a4:53:21:26:e9:3b:57:9f:3e:dd:5c:e0:c5:86:8b:47:03:39:
         6e:91:76:53:f4:15:cf:0a:1d:fb:ad:f9:86:e6:be:a1:2f:f1:
         68:0d:95:b0:80:28:1c:c0:0e:1b:7e:a2:ba:8a:88:37:bf:44:
         3a:81:36:cb:ec:7d:c8:96:15:46:88:00:6f:84:df:0d:dd:de:
         eb:78:44:a8:9b:82:64:73:1b:cc:9f:db:f2:6f:24:d9:4e:c0:
         c7:11:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:11:20 2026 by rpki-client