Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
File:                     EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json)
Hash identifier:          8ziOIkbKNSY5YuH40QkAMDlOF12dNZrcqmguvr4t42g=
Subject key identifier:   E4:69:C5:C0:BF:3F:54:C0:9E:6F:0F:67:4D:36:E5:C5:1C:B1:13:FD
Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA
Certificate issuer:       /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
Manifest number:          0111
Signing time:             Wed 23 Sep 2026 05:47:58 +0000
Manifest this update:     Wed 23 Sep 2026 05:47:58 +0000
Manifest next update:     Wed 30 Sep 2026 05:47:58 +0000
Files and hashes:         1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: vi5AvoAZdvTsRIjDAGT8cxW0EuDMBgFI57fpd6MtDFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl
                          rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA
        Validity
            Not Before: Sep 23 05:47:58 2026 GMT
            Not After : Sep 30 05:47:58 2026 GMT
        Subject: CN=6ab3680e-7878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:b9:7c:9e:35:20:db:5e:44:54:60:a1:b3:
                    e1:d0:1a:ca:85:3d:c3:46:c9:a5:a1:74:16:1d:05:
                    8a:9d:34:d2:b8:42:25:c0:0d:22:cb:b4:00:40:05:
                    fb:f8:6b:de:ac:24:bb:51:86:1c:fa:c5:15:3e:c3:
                    cb:f7:ac:98:b1:7a:2b:65:60:9d:d6:bf:46:e5:80:
                    67:49:5a:29:99:87:5f:95:4b:68:ec:57:01:65:e9:
                    0a:36:6b:54:13:f8:af:7e:f3:f4:c2:a0:4b:15:0a:
                    47:d7:00:47:bb:a1:c2:ac:db:d0:a8:80:8c:8a:09:
                    53:ff:e2:c7:0d:9d:b7:67:72:7e:cf:af:fe:7b:fc:
                    04:c7:0e:73:47:a1:b1:38:0f:bf:f8:19:06:0d:5c:
                    4a:57:83:a8:c7:21:ef:b1:8d:dc:4e:9d:df:36:2e:
                    92:ba:09:05:b1:a5:42:0f:2d:07:5e:83:0e:ab:09:
                    01:56:69:6e:80:26:e1:75:3b:b2:7b:06:59:3d:7b:
                    bc:20:9a:2a:20:ec:fe:69:42:1b:2d:ce:ac:c2:36:
                    36:df:b0:d9:64:76:af:f1:fb:26:44:37:ab:d9:c7:
                    41:02:26:a1:18:ea:28:8d:d8:d5:9e:63:55:c2:ca:
                    21:5e:d7:37:13:8f:d1:b9:4f:6b:58:38:64:f1:a4:
                    3e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:69:C5:C0:BF:3F:54:C0:9E:6F:0F:67:4D:36:E5:C5:1C:B1:13:FD
            X509v3 Authority Key Identifier:
                keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e6:02:e8:02:f8:ce:2b:d3:d3:43:e4:ae:7e:1d:b4:37:00:
         21:d0:e3:9d:a1:6b:a5:c7:73:86:2c:c3:20:db:e3:7d:d2:44:
         25:b7:7e:ef:05:f3:c0:18:7b:f6:63:d3:91:e7:ec:2f:c3:69:
         71:53:53:43:fe:9b:75:4f:79:77:e8:7c:eb:32:93:98:13:00:
         b8:df:8d:ab:a8:74:e0:91:7c:ae:a8:9a:c9:10:60:26:41:79:
         30:10:3f:b9:f6:bb:d2:36:dc:03:2c:05:39:af:c0:48:e4:24:
         99:af:71:a1:ec:b1:13:9d:af:11:49:d2:5a:ea:d3:b7:45:c5:
         50:fd:0a:94:57:12:64:6c:27:32:2e:e6:e0:7a:9f:55:58:13:
         a6:69:59:b2:40:13:24:c8:25:cc:ab:92:32:67:ae:a6:74:a8:
         ee:87:0c:03:36:5d:40:83:56:cc:2f:ff:fa:10:ee:45:44:f9:
         19:0e:ee:3f:91:eb:ef:e6:79:6c:f0:61:66:36:c2:79:bd:db:
         b9:32:c2:34:54:9d:3e:56:ff:53:45:47:1d:da:0e:11:ce:b6:
         0e:9e:99:5e:9f:33:7b:8d:3b:09:7c:fe:c1:68:ca:67:d5:f7:
         b5:71:7b:b9:77:1c:c6:c7:e3:e6:6c:e1:21:23:d7:3f:0f:48:
         4d:77:0e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:38:37 2026 by rpki-client