Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          +hTdi8Fltb9Drwo6n79xFn2VjTj1dktYxDkecUpH1lw=
Subject key identifier:   7A:78:11:47:65:CF:FE:39:E9:B3:FC:09:4C:7A:4C:5B:D7:2D:4A:20
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          68
Signing time:             Mon 21 Sep 2026 08:02:07 +0000
Manifest this update:     Mon 21 Sep 2026 08:02:06 +0000
Manifest next update:     Mon 28 Sep 2026 08:02:06 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: 8Hc4+sJtSamrAWa0KKagn7LoWuzCRZ5hpfkwT4w5npY=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: Sep 21 08:02:06 2026 GMT
            Not After : Sep 28 08:02:06 2026 GMT
        Subject: CN=6ab0e47f-4c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:c0:56:59:ab:72:e1:07:40:c9:c4:4c:08:
                    9d:99:d9:68:ac:6c:a7:70:ac:c7:e0:72:68:29:17:
                    64:37:b2:95:1e:a8:11:ac:c6:f0:fa:fa:85:09:1a:
                    7b:03:18:2d:19:ab:c4:cc:ce:f1:65:43:f3:4a:a7:
                    8c:29:d8:e8:7a:2d:eb:38:e3:b1:1a:ee:c4:59:d2:
                    04:a0:08:5b:61:20:f0:e4:62:4a:e9:39:45:81:e5:
                    c2:af:34:7b:0f:dc:5d:ff:e3:54:ea:15:bc:fd:6c:
                    6f:01:92:0a:69:50:0d:ce:97:37:0a:15:da:fb:24:
                    66:ad:ae:2f:1d:e7:51:24:31:5e:0c:5d:60:8e:53:
                    46:8c:13:b6:69:66:87:53:69:e6:2f:1d:5b:db:9c:
                    f8:25:b5:53:6e:02:a9:f6:40:eb:01:70:a7:fc:b5:
                    5c:a2:21:dd:85:6b:43:d5:f6:82:31:c6:1c:90:7a:
                    62:53:f2:37:dc:29:91:58:b5:b7:aa:48:78:0b:44:
                    f0:a8:59:b6:14:86:6c:34:a0:89:b7:cc:6f:9d:70:
                    34:72:38:17:37:81:3b:b9:cf:b1:89:12:2e:6e:a9:
                    c1:8a:98:a9:4e:65:b1:11:d7:a4:65:41:0a:2d:5e:
                    db:46:28:cb:fa:0a:6b:75:12:4f:0a:1b:21:7e:3b:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:11:47:65:CF:FE:39:E9:B3:FC:09:4C:7A:4C:5B:D7:2D:4A:20
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:6a:50:a3:7a:d9:d6:e7:5a:87:0b:82:a5:e5:6c:0f:5b:
         fb:b0:ce:9f:84:05:66:6e:b3:91:2a:c5:7b:01:83:84:fa:aa:
         c1:e0:54:75:f5:f7:33:53:ed:39:7f:17:67:f6:6b:da:4f:00:
         72:e6:5e:5a:e3:de:9a:d4:82:57:a2:6f:e1:c9:da:b0:11:0e:
         eb:de:aa:38:76:f4:32:25:88:ed:a4:fb:49:9a:e8:ff:c9:8f:
         e6:10:d9:79:67:7d:ce:93:6b:a5:91:91:ca:94:54:1d:b1:66:
         28:06:79:56:0f:1f:ca:a4:35:50:a9:2a:cb:a1:a9:33:47:4c:
         86:3d:5a:42:f2:75:9b:a8:5e:c6:dd:d4:62:90:9c:08:37:78:
         f2:9f:e3:c3:04:6c:67:40:ec:5a:93:3c:31:33:5d:41:1f:a7:
         3c:cc:a2:3c:b7:69:43:bc:80:a3:a8:db:a0:39:75:01:f2:52:
         d2:aa:0b:77:6c:15:d1:0b:7d:bf:54:91:35:33:87:2d:c8:a7:
         d4:dd:00:55:8b:3b:ff:b3:44:37:f9:4f:ba:94:5f:74:e7:62:
         0d:fb:e6:5f:7b:ab:a4:7a:b7:ac:98:a1:0f:57:c7:aa:d3:f7:
         a2:7e:41:5e:46:ac:bb:73:62:66:27:3b:ce:ed:a8:dd:aa:7c:
         8b:d5:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:49 2026 by rpki-client