Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          A3D4qXb9JgGWCnxD+2bUzmJWx6bq+VmRrbM3E6L8C0Y=
Subject key identifier:   A1:14:3E:6E:79:EF:8E:8E:23:98:84:A3:7C:8A:09:26:DA:DA:38:74
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       3676
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          35F0
Signing time:             Thu 24 Sep 2026 14:44:05 +0000
Manifest this update:     Thu 24 Sep 2026 14:44:04 +0000
Manifest next update:     Thu 01 Oct 2026 14:44:04 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: ttutsAoRB6ya88DCZK2QAhiZZp7dJ8wZIiw2woAzdMY=)
                          2: 5E5FD4943A3D11F1BA9A26A3A0833773.roa (hash: rCUqZrcJZyA07SUzbZvxxS85+CCSX/o1McliI97T6bk=)
                          3: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: NU7Dlcl2kMVtOyOhbAdAamXp5yieV6zSpEgLyTHMN/M=)
                          4: A76D24643CB511F196498374B3833773.roa (hash: tFRJQ5zO/yeTMyOaHn1B8AnHGTfQHWXR2rLvePg6QGQ=)
                          5: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: Kis4KziwLx6Pcw5wkg1icOfNypwJih3A0xdK6nqLy9A=)
                          6: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: TfH80oiFXnQDGJ0gRqlTnyf9qcKGgD7m2knsNQRmhrk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13942 (0x3676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Sep 24 14:44:04 2026 GMT
            Not After : Oct  1 14:44:04 2026 GMT
        Subject: CN=6ab53735-a711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:c3:45:ad:3d:d6:05:d3:3e:cf:00:5d:91:
                    cf:df:bb:87:ad:a7:c1:bc:4d:80:09:5b:44:6e:63:
                    a8:1b:95:40:de:62:e1:b2:dd:a1:a1:f6:4f:79:19:
                    5c:bf:3d:72:20:a1:9f:1f:12:39:8f:b4:41:85:ec:
                    ad:32:c9:ab:5d:e4:54:eb:c1:f9:6a:5e:f6:f4:76:
                    4a:a5:27:a3:b0:2f:9b:e5:8c:1c:64:f2:81:41:b5:
                    c0:4f:64:70:9e:fe:4a:3c:f9:1b:c3:18:58:b6:78:
                    fe:30:25:3f:f6:cc:80:09:7f:89:dd:61:75:58:1d:
                    8d:91:b2:0e:af:64:e6:43:d4:01:03:fd:18:33:70:
                    3d:6b:e4:cf:47:29:0e:4d:48:6b:8a:39:ee:66:43:
                    72:cd:b6:57:91:d6:18:03:25:87:3f:7a:bc:19:bf:
                    00:35:80:cc:30:a5:e0:7f:79:ba:f1:b1:53:27:07:
                    eb:b3:e5:31:e8:e8:f6:b7:6e:5d:f7:77:30:42:8f:
                    ca:fc:c1:0d:26:9a:92:d5:40:f0:cb:2a:2f:41:a0:
                    6a:38:85:dc:21:b0:cf:cd:46:36:29:14:90:1d:70:
                    32:1f:35:6a:42:70:ab:f4:2f:80:6f:50:96:bd:c6:
                    c2:b4:4b:f1:6a:17:47:ae:d8:ab:53:0a:3a:6b:b4:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:14:3E:6E:79:EF:8E:8E:23:98:84:A3:7C:8A:09:26:DA:DA:38:74
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b7:1f:4a:c0:d0:8e:cd:6e:a8:63:9b:d7:b1:19:25:1d:5b:
         6d:de:85:3d:26:22:34:ca:5d:a0:f2:dd:5f:30:25:61:76:b9:
         19:ae:48:6c:15:25:a7:ea:11:29:09:99:67:cd:24:af:08:2f:
         5b:e6:6f:3b:c2:c1:79:da:80:88:e7:f6:7e:46:6b:3d:e8:98:
         b2:b1:2d:a2:61:0b:c0:19:6d:d1:4b:cc:e9:92:78:e4:7b:54:
         2b:84:93:14:b9:cc:cb:ec:ab:da:b7:33:95:6c:39:a9:a5:50:
         8b:3b:96:09:8c:74:76:c3:4b:16:48:c1:bb:91:ef:21:1c:5e:
         c7:f7:9b:81:52:f1:3f:b7:f6:f2:76:52:c1:90:93:77:b8:ba:
         fe:8b:d7:75:32:13:82:e5:60:82:cc:5b:cc:e1:63:7e:36:b6:
         41:30:43:05:b8:2e:17:0f:f6:db:ef:40:e3:ee:fb:61:47:c4:
         3d:a7:1b:49:63:4e:34:18:ac:3d:5d:55:43:b6:13:53:8d:02:
         0e:42:23:0b:1d:35:97:36:69:17:e7:83:2b:49:f4:64:78:f0:
         4e:55:5d:4f:bc:dc:c6:ec:41:47:e2:e6:2c:b5:85:09:d4:0f:
         b4:72:a1:07:58:ba:00:11:e3:e7:b9:2e:8c:c7:d6:4e:ee:5a:
         49:0e:13:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:39:17 2026 by rpki-client