Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
File:                     E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft (raw, json)
Hash identifier:          DUNFJAltfs2vYtj79PmiHnd6+PnPEZR3XgRor9S8Q+M=
Subject key identifier:   3C:98:32:B5:4C:19:C7:DE:F6:0F:F3:9A:3D:02:8A:6E:8C:97:65:AC
Authority key identifier: 13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4
Certificate issuer:       /CN=A91334F0/serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
Certificate serial:       01A9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
Manifest number:          01A5
Signing time:             Fri 25 Sep 2026 04:11:33 +0000
Manifest this update:     Fri 25 Sep 2026 04:11:33 +0000
Manifest next update:     Fri 02 Oct 2026 04:11:33 +0000
Files and hashes:         1: E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl (hash: RCXQlK6ZesRllylIqS3YD+XMI4DUtLqXdIQpPM1vnsg=)
                          2: 836F847C340011EFA88BE541C4F9AE02.roa (hash: q/inWwagPqsJ9K+IB7d6o4TgPPjDhue6dL8dPifXSPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl
                          rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91334F0, serialNumber=1346F65D629FFF936B0FC4CF127509B682E8E3E4
        Validity
            Not Before: Sep 25 04:11:33 2026 GMT
            Not After : Oct  2 04:11:33 2026 GMT
        Subject: CN=6ab5f475-b812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:2a:5d:ae:f7:cb:ec:9a:66:72:c3:19:b0:
                    6b:9c:80:4d:d5:2d:59:a9:1f:8a:72:c6:5d:2c:5b:
                    57:33:14:01:55:ed:c5:40:58:08:dd:14:6d:18:97:
                    11:6a:59:93:cd:4f:b2:47:e6:62:79:f0:ad:83:97:
                    5e:3e:d9:0f:3a:3b:90:76:60:4c:4a:f5:1a:96:4c:
                    38:10:3d:29:21:00:f7:4a:fc:bf:be:83:05:14:02:
                    cf:30:46:d3:fc:89:aa:26:46:c5:c3:bf:7d:49:25:
                    6e:db:0c:33:64:bc:16:71:7a:a9:01:6d:0a:8a:af:
                    ab:d8:b3:e5:57:2f:0a:a7:49:6a:cc:76:77:c1:fe:
                    59:c7:f0:a3:9b:69:a6:aa:d4:dd:4a:d5:29:63:d0:
                    d2:28:4d:b0:16:ea:9c:1d:d5:05:1a:e7:c7:ab:84:
                    09:2a:83:61:57:95:fd:99:32:62:55:94:56:a0:d6:
                    ae:fe:d3:a6:73:88:3f:13:5b:9a:93:88:aa:18:80:
                    7d:97:52:4f:68:c5:af:44:6b:73:f9:1e:7b:76:40:
                    d6:75:a6:67:1c:30:e4:37:fa:85:a7:45:1d:22:2d:
                    4a:35:e6:5f:a6:53:14:26:f2:00:fc:7d:31:b4:65:
                    e4:57:28:67:76:94:fe:ad:d3:f7:e6:77:87:65:59:
                    e0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:32:B5:4C:19:C7:DE:F6:0F:F3:9A:3D:02:8A:6E:8C:97:65:AC
            X509v3 Authority Key Identifier:
                keyid:13:46:F6:5D:62:9F:FF:93:6B:0F:C4:CF:12:75:09:B6:82:E8:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91334F0/0D46CBE8340011EF94779540C4F9AE02/E0b2XWKf_5NrD8TPEnUJtoLo4-Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d8:ae:3e:88:c1:48:9a:c6:0c:aa:64:61:20:7e:02:54:2f:
         cc:65:8f:e4:dc:46:e8:42:ca:a5:62:5c:9b:87:ee:51:c3:c6:
         91:25:20:84:9d:f5:dc:22:54:30:bb:dc:4a:14:9f:4f:2b:b0:
         cd:60:e6:d9:2a:0f:8f:27:3d:45:c6:8b:1e:2e:56:e8:19:2d:
         71:1b:16:90:64:43:7e:76:e5:c1:ba:44:4a:9c:0c:53:b8:18:
         90:3c:92:f1:ce:26:d3:e1:7d:0a:9b:34:0d:c7:0f:47:67:84:
         d5:fc:c1:16:cf:0d:71:9c:7d:5e:c9:8b:fb:ad:44:3c:09:09:
         b1:40:0a:58:e5:e2:20:78:cd:b2:fb:8e:f4:07:a6:c8:da:68:
         6c:8f:cf:96:4c:b1:9b:cd:8e:d0:73:bb:11:ce:59:37:b0:83:
         10:5d:da:de:59:a2:42:b0:a9:16:dc:92:f0:5e:f8:cb:6c:50:
         f4:23:fc:57:f1:c2:af:6b:31:92:4f:42:40:4d:f8:6e:6e:03:
         df:73:da:d7:83:da:fd:f0:d3:54:cb:c3:b8:59:3f:68:c7:fb:
         bb:88:fd:bb:b1:49:17:c8:a7:c2:bd:6b:44:7a:95:b5:45:b8:
         10:31:a9:e6:bf:3a:13:d3:41:05:cd:da:ed:e2:98:fa:3a:17:
         33:43:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:20:39 2026 by rpki-client