Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          Qji8p4MgrpFVy5GTp1YAObY1J0VMlUhO+t0yUDhqfQw=
Subject key identifier:   BF:AC:4F:2C:97:CC:9C:3A:97:74:53:05:93:D0:A0:D5:89:CA:2B:86
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       119C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          1187
Signing time:             Sat 14 Nov 2026 17:09:05 +0000
Manifest this update:     Sat 14 Nov 2026 17:09:05 +0000
Manifest next update:     Sat 21 Nov 2026 17:09:05 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: 1rgQEMZYyrF5RpnIFW+AbHAkyAxyh9v3YrgZYe84b4w=)
                          2: 119B53BA7C2B11F182BB7F515CA30FBC.roa (hash: KMOAJp7RG30c1CDBFTlRdAixsNQPgZNs8jiXc0sNR3U=)
                          3: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: rrYfJWzJ93+0rNU9rs8ZtQlhXdDY6GsmRPMyGDEt0co=)
                          4: 33F4955E3A3411F1992413829C833773.roa (hash: llScgH/DERZP3O6YHfGF7jLGiuA7wh+xHhl+qdlnh+A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 17:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4508 (0x119c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Nov 14 17:09:05 2026 GMT
            Not After : Nov 21 17:09:05 2026 GMT
        Subject: CN=6af895b1-a5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:0f:e9:a4:45:41:1f:bb:9a:0c:8b:70:a9:
                    83:45:16:2d:3c:0b:c3:9e:dc:3a:02:2d:ed:89:02:
                    49:41:01:22:3e:4d:2b:c0:01:bd:19:89:bb:29:fe:
                    36:83:90:8b:ce:0f:13:aa:d6:2c:6a:5a:d1:9d:6c:
                    82:ce:97:62:7b:05:63:17:fa:df:f2:ad:b3:aa:84:
                    26:d9:f6:92:f8:82:94:49:4e:74:c1:9f:40:66:67:
                    1b:d4:27:c9:39:f7:45:e1:24:92:68:96:b7:33:14:
                    e7:fa:ad:02:f2:55:31:29:c8:78:aa:db:af:d3:9d:
                    78:10:fa:ca:98:8a:eb:97:36:9b:78:92:b6:e8:fd:
                    f3:f8:75:2d:f4:2e:38:9b:ed:e7:aa:4b:d8:b9:fa:
                    b8:1e:92:90:8c:ad:1a:a5:7f:2e:2e:46:08:1a:93:
                    d4:b2:6c:ab:98:4d:85:9f:12:1b:21:e8:7d:3d:1c:
                    66:2b:bf:0c:d7:8d:61:cb:31:87:86:58:11:d6:7e:
                    5f:a8:e4:f8:5a:1e:24:1f:42:45:ba:03:c2:2e:e7:
                    f1:fa:24:5d:88:c7:74:8a:4f:9c:cf:67:d1:ed:f4:
                    d6:42:21:5f:39:6e:07:34:a4:85:b3:0e:ec:c5:03:
                    91:fc:87:30:a6:af:25:9b:26:0b:06:28:05:ca:6d:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AC:4F:2C:97:CC:9C:3A:97:74:53:05:93:D0:A0:D5:89:CA:2B:86
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:e9:3b:3e:4f:76:79:b0:03:83:8e:c3:ac:2e:06:11:86:a0:
         7c:88:95:e9:85:eb:31:35:e8:93:5f:2f:e1:8c:6a:3c:53:ad:
         06:d1:14:48:52:a2:26:3b:1e:7d:01:ff:e5:b8:49:82:0d:3e:
         39:12:9b:f3:a0:57:56:6b:1f:c6:78:d8:49:c1:5d:cf:06:61:
         13:ba:0c:05:a6:f7:41:c2:45:5b:3b:80:b6:a0:18:d9:93:25:
         7e:01:3b:f3:a4:a5:79:e3:ac:19:b8:44:6c:50:55:d2:0b:fa:
         97:21:e0:4d:f9:9f:93:fa:ad:20:33:82:8f:4f:08:a9:8e:c6:
         6b:18:37:2b:36:93:f0:c2:05:12:62:5f:f8:6d:8b:4b:60:bc:
         4f:13:aa:2d:fe:ca:ed:ae:59:f1:74:60:40:66:50:1c:92:b2:
         f2:e2:da:42:99:bc:2f:22:62:de:b2:f8:0c:62:fd:45:47:08:
         a1:c6:03:3b:b0:29:03:c2:9e:a2:fc:ac:cc:f4:ef:a5:86:b3:
         b7:4b:f0:46:5d:17:35:57:db:67:3a:45:8d:e9:f8:42:28:91:
         1c:40:90:27:14:29:28:54:bd:fe:92:d1:07:23:83:46:ee:67:
         c2:f9:2f:b9:cb:1f:3a:4d:f5:c8:2b:5c:ab:e6:f0:23:de:33:
         1c:83:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:49:00 2026 by rpki-client