Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File:                     EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier:          Uny51C7LDRNFXEFLA/0SkhzPZn7IpYm679LmkOLdj5c=
Subject key identifier:   E1:B5:60:11:3A:F1:8F:DB:71:CB:D0:13:34:F5:83:F4:6D:85:53:C2
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       0207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number:          084C
Signing time:             Sat 26 Sep 2026 22:44:09 +0000
Manifest this update:     Sat 26 Sep 2026 22:44:08 +0000
Manifest next update:     Sat 03 Oct 2026 22:44:08 +0000
Files and hashes:         1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: zJ/IEESnivemzmFlhFTgCnCR6LxE2BCHgUzCo3DYEB4=)
                          2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: 5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 Oct 2026 22:44:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Sep 26 22:44:08 2026 GMT
            Not After : Oct  3 22:44:08 2026 GMT
        Subject: CN=6ab84ab8-210e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:a6:cc:6e:51:34:ab:20:be:44:72:2e:6f:
                    eb:0d:18:53:81:80:2c:1c:11:d1:13:19:9c:e8:3d:
                    ba:6b:16:83:20:cd:5a:2f:10:fc:db:bd:bf:d2:80:
                    bd:66:1c:3b:c4:6e:33:d9:88:70:57:55:8c:38:c8:
                    9c:01:68:fa:5a:5b:ae:da:f9:31:d4:63:5e:d8:b6:
                    2e:24:a9:77:1a:5b:d7:70:51:84:6a:cb:c7:22:65:
                    53:1e:11:44:7d:b8:2f:c8:ac:e0:9d:3f:88:6b:b1:
                    48:89:ca:41:49:4e:27:65:ec:81:d5:a8:57:ee:19:
                    8c:91:ba:42:25:39:f5:48:88:a4:86:87:58:d8:cd:
                    7d:33:72:64:6b:32:89:f3:5f:18:b4:a3:8b:b5:c3:
                    e7:be:31:43:1b:dc:8b:22:d2:af:6d:f1:5f:c6:79:
                    10:4a:50:ab:5c:93:09:51:ed:8b:04:a3:42:e0:65:
                    8d:df:a4:5c:76:dc:05:64:e4:41:a7:72:ff:99:96:
                    89:c4:a6:cb:17:3b:5e:e2:f1:9a:fa:2c:07:48:5a:
                    c1:55:a8:34:74:c9:e6:09:90:b8:65:7b:b1:52:9e:
                    19:e0:d8:5a:46:8d:cb:ac:e2:7e:57:ee:57:d2:2b:
                    80:0c:f6:b4:f4:86:66:c0:05:d0:c2:58:0b:c0:18:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:60:11:3A:F1:8F:DB:71:CB:D0:13:34:F5:83:F4:6D:85:53:C2
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:6b:66:4d:2b:87:11:b1:0c:59:d2:ca:98:4c:74:83:9e:66:
         a1:a5:20:6b:19:dc:c0:38:8a:a4:3e:79:06:5c:8d:33:de:9a:
         de:88:f3:47:24:99:ad:41:92:9f:dd:c1:e7:c0:25:b4:39:a9:
         ba:e4:5c:6d:f1:60:0b:42:d5:9c:f5:f8:9d:91:3b:10:1e:2a:
         23:c5:03:83:be:be:fe:0a:26:17:47:11:a7:3d:15:70:ae:36:
         76:d0:2c:0d:49:fa:26:e6:ec:08:9d:d3:b3:d4:4b:ed:78:af:
         9c:1a:8c:d9:b9:a2:59:b5:fc:31:1d:75:ee:ef:21:a2:c5:c4:
         7e:8c:04:5e:75:ec:2b:b7:7e:86:06:d2:59:c9:5f:8a:cf:64:
         8d:a0:46:06:6f:0c:4b:f2:95:41:f8:03:6c:b6:38:a6:3f:85:
         51:55:4a:65:19:5b:8b:63:d4:0b:af:75:76:3d:ad:68:c3:f4:
         52:d2:6c:c8:0d:51:7a:b2:9f:a8:d6:45:a8:55:72:bf:3b:8d:
         eb:c4:58:9c:af:4d:0a:7a:cd:aa:f8:cf:48:8f:c3:ae:76:f3:
         80:61:45:af:d9:97:9d:38:51:c3:c0:43:95:dd:58:32:c9:5b:
         73:7b:c1:80:7d:e5:47:cd:c8:af:99:5f:5f:20:83:55:eb:30:
         b0:3d:f7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:12:35 2026 by rpki-client