Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier:          IgjtIdG2Xtkw2x83rEYjx82wIEi23RBqSVJr1ggwUWQ=
Subject key identifier:   20:2E:B5:51:2D:48:76:0F:1D:20:19:10:AB:F0:EC:BF:79:A5:B2:2F
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer:       /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number:          01DD
Signing time:             Thu 01 Oct 2026 04:30:56 +0000
Manifest this update:     Thu 01 Oct 2026 04:30:56 +0000
Manifest next update:     Thu 08 Oct 2026 04:30:56 +0000
Files and hashes:         1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: Rp/wGsfWv9hoy5bypt/8DQt3yd4qiROqVCugf8zupsg=)
                          2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
                          rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 04:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Validity
            Not Before: Oct  1 04:30:56 2026 GMT
            Not After : Oct  8 04:30:56 2026 GMT
        Subject: CN=6abde200-f25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c0:03:6d:3b:fc:c2:1c:30:86:dd:0b:dd:cf:
                    d3:6b:1c:68:ed:16:7a:6c:ef:37:11:dd:ed:50:4e:
                    6a:06:a5:27:13:d2:17:63:a0:c3:24:af:12:25:4d:
                    0e:76:89:72:6f:8e:fb:ef:be:93:f5:54:76:e7:b9:
                    54:08:52:a9:ca:27:50:f9:71:69:e0:36:04:bb:83:
                    38:87:99:78:89:23:1c:fb:60:4f:4a:a4:e4:6f:ed:
                    41:ee:e5:ab:2b:8a:11:d3:1b:d6:2c:48:ee:a5:35:
                    43:25:91:7d:da:91:1d:94:a0:f0:20:ca:d3:07:e7:
                    fd:4c:c3:63:ef:3b:ea:27:2c:77:0d:af:2e:d1:2d:
                    97:68:4a:fb:e8:86:6a:d9:f3:b2:7a:92:20:d6:ba:
                    51:c4:a3:d7:14:0b:00:31:0a:2d:eb:93:75:21:5d:
                    a4:38:32:61:14:62:aa:ab:39:c8:9c:c4:bf:b6:58:
                    e7:1b:0c:ff:3f:9d:71:26:84:d4:d3:48:79:3a:93:
                    b1:fc:af:70:96:cb:bd:9b:fc:47:26:62:4d:50:fc:
                    1f:72:31:8e:b5:ad:93:d9:f2:38:7b:9c:11:f4:55:
                    d2:c1:2b:a8:d2:d9:2d:1a:81:c2:4a:b7:f9:a7:9a:
                    df:9d:9c:40:1e:1f:2d:57:93:fa:04:3a:46:37:11:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2E:B5:51:2D:48:76:0F:1D:20:19:10:AB:F0:EC:BF:79:A5:B2:2F
            X509v3 Authority Key Identifier:
                keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:eb:67:a0:63:77:b9:b3:ef:7a:a5:a1:ec:32:5e:e0:46:
         fa:44:1c:24:2c:47:b3:87:30:99:3f:19:ac:5e:6a:b4:bb:4d:
         90:6d:b3:b4:ce:f6:7b:a8:cc:c0:6f:65:99:b4:28:46:b3:48:
         64:00:0d:9c:e5:05:18:ce:e3:f9:fd:7a:0c:89:f9:3e:53:dc:
         b0:4d:70:9b:ad:47:02:b6:75:07:fb:e8:3e:a5:ec:06:01:f5:
         a1:3f:02:51:6f:12:0b:32:31:6e:b3:a8:da:4d:dd:05:c1:81:
         20:89:9e:87:d9:bd:da:18:14:46:8e:e0:e8:98:96:e3:6a:7f:
         9c:05:97:e0:7e:bf:da:6f:f8:3d:95:12:f1:fc:18:f9:87:1a:
         88:b8:ca:a6:3f:84:93:9c:f5:cd:8d:8c:90:69:2a:46:50:fc:
         34:90:e7:2f:61:70:33:0e:9b:02:19:7e:23:a7:be:df:f6:98:
         16:2b:5b:f8:91:61:43:16:d5:06:77:04:8f:35:0e:1f:aa:6a:
         07:ac:9d:9a:1e:93:11:08:c1:43:c6:ef:98:14:20:97:ac:13:
         93:a5:fb:0b:46:45:0f:76:3d:b9:fb:d9:9f:f5:cd:f7:8b:99:
         c6:e0:5e:29:bf:8f:18:01:8e:ee:d7:c9:91:20:c0:e2:82:b7:
         61:e7:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 21:45:56 2026 by rpki-client