Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          GsOUEJpM/8Ztjwich6hqUUh4RKgqpAjGY63PaiQuw7s=
Subject key identifier:   E8:7E:01:0E:F1:6B:07:B4:8E:F0:CE:6F:D3:3F:20:61:9A:D5:60:30
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       04CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          0449
Signing time:             Wed 23 Sep 2026 00:06:05 +0000
Manifest this update:     Wed 23 Sep 2026 00:06:04 +0000
Manifest next update:     Wed 30 Sep 2026 00:06:04 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: Z+iTuNmSdNkE7NXn+6Boed8u3/JpCu7GbUc9peEYYO8=)
                          2: E2F3761026F711F1AF0DDFE09A833773.roa (hash: 9mAX4kjHaAPlJxVFKJY1GttpyULtZu2j1Zdo2ye7gQk=)
                          3: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: +3hQasWjCag/cMHiyoXiUBni3g6BDychTfyDRlqefpQ=)
                          4: 7CCE329266F711EF86880681C4F9AE02.roa (hash: aF3QJ0sOT0ZgMnSTdugaLAaBNbh1tfWZzQ4lccA0DY8=)
                          5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: d4fCzVRQrmt7gVdT0BQOi8hkz5v4FssHLuEAHna+Ml0=)
                          6: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: XxQo+QUj305IFxYiaDtWvhGfLyZQFcnSLCPDjpERk64=)
                          7: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: kd/9spe/o+bDbPVrkIMRDzSqrdnOeEarp6SCzpAAFBA=)
                          8: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: TavBer1uC8d5wuGGEXEnQan18tz5toD/VuJdhW827CY=)
                          9: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: qzfl+Dr8Jhg7AA1ZKFSwkFzl0gx3OGghCATWZeWsNuQ=)
                          10: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: RaDvqbQpfLLb/dtrakTSbpiJKcS+OXOV5EoJAMjCew4=)
                          11: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: dmNt7Pa0p+rlb/NRYgL66whyumuc4SkL/FOCyj/7zDU=)
                          12: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: iM0nSeXUrRmjFQctzMvPvZvPKZ9mt4uMDeOC6/UQnj4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Sep 23 00:06:04 2026 GMT
            Not After : Sep 30 00:06:04 2026 GMT
        Subject: CN=6ab317ed-2e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:cf:22:a7:b5:ff:34:b6:da:5a:65:19:db:
                    f8:d8:1d:a1:07:35:34:e5:10:1d:d7:93:c1:40:18:
                    b7:e3:9c:08:5b:42:91:f0:99:26:3a:28:b2:58:f6:
                    fd:de:46:d1:06:6b:41:16:21:94:06:f7:ff:9f:7a:
                    91:5f:04:5c:31:61:11:6a:00:2c:76:1d:31:f5:5c:
                    97:2e:fb:d4:2f:3f:3d:de:f4:61:92:2e:a4:c4:71:
                    02:18:d6:06:8e:59:d0:4d:03:b1:e5:5e:58:0c:0f:
                    a4:18:29:38:54:c2:6a:b3:1f:ba:0f:56:05:a4:42:
                    9c:9a:23:45:a4:16:42:4e:11:fa:94:51:48:fd:59:
                    7a:3a:74:7c:40:5b:f6:63:7f:c6:5a:6e:e0:74:1f:
                    45:ed:6f:1e:c3:42:78:c2:10:43:40:ba:36:fc:47:
                    d2:e6:69:70:72:bd:58:2a:a3:61:bf:90:f1:04:89:
                    ea:82:7a:7f:30:24:d5:d7:54:8d:5b:1e:2f:93:7b:
                    09:cd:c3:16:41:f8:d8:7e:c9:ad:66:c4:ce:70:74:
                    b0:31:e2:ae:89:a7:8e:4e:9a:e5:b3:ee:a9:00:06:
                    36:5a:40:37:29:92:08:9d:f6:2b:3e:67:2c:2c:50:
                    60:35:04:b9:70:6e:ca:67:dc:49:85:e3:2a:74:e7:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7E:01:0E:F1:6B:07:B4:8E:F0:CE:6F:D3:3F:20:61:9A:D5:60:30
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:65:17:ca:13:cb:c2:62:50:e0:6f:d5:d4:cc:0b:4d:10:07:
         9e:74:e7:6d:3f:93:03:d0:7b:3d:8a:92:9d:67:8f:5c:b0:bd:
         ec:81:1d:be:af:10:e0:5b:8a:6f:8c:17:41:64:b0:e4:90:1b:
         f7:86:29:19:b8:fd:fd:a1:6f:ad:64:1a:91:24:b1:33:fa:ab:
         9c:3b:f3:c0:ab:d2:c3:f8:89:24:61:8f:28:20:f5:b5:a9:9f:
         a2:8d:5d:28:f5:1f:d5:74:76:08:5d:fe:1b:b3:dc:45:78:00:
         00:de:d5:18:22:86:49:07:03:65:df:28:41:04:ef:04:fa:16:
         cf:8e:43:fa:ae:92:dd:c1:e6:85:39:5d:ea:b7:c9:ad:ad:1d:
         a5:69:16:19:c0:77:18:87:80:e2:30:46:0a:75:be:c2:21:bb:
         34:63:10:58:03:81:4b:ec:7b:0c:9b:e7:13:bf:6f:ba:c2:8a:
         ef:1f:02:2e:af:c5:f5:75:77:23:af:fd:07:db:71:20:8f:4f:
         0d:b8:6f:13:e4:9f:1c:09:a0:95:15:17:af:d9:fe:db:15:c9:
         68:d7:1a:23:2f:3f:95:9b:be:0e:55:39:32:b1:69:45:d6:97:
         c1:e2:89:8b:ca:a1:2f:9e:81:6f:f6:08:e1:29:77:d0:f7:3f:
         b6:75:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:48:20 2026 by rpki-client