Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
File:                     S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json)
Hash identifier:          /lt8ZbneZ8QIsWPgcW16o80lAOa8lQId1TzS/IEqcnQ=
Subject key identifier:   2F:5C:58:B5:29:54:2A:13:A3:AA:3C:CD:5D:DA:DC:88:50:B3:8F:9B
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Certificate issuer:       /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial:       0112
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
Manifest number:          010C
Signing time:             Thu 01 Oct 2026 07:19:40 +0000
Manifest this update:     Thu 01 Oct 2026 07:19:39 +0000
Manifest next update:     Thu 08 Oct 2026 07:19:39 +0000
Files and hashes:         1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: DbkdkHqatjnWZShJOEM95k6gIQlQ7eIk5YEqFmg2AlE=)
                          2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: 5PqklnXOa78TkhD4lmCPU1JfpwMl83hteDJwlXKT+r8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 07:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
        Validity
            Not Before: Oct  1 07:19:39 2026 GMT
            Not After : Oct  8 07:19:39 2026 GMT
        Subject: CN=6abe098c-cb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:61:91:b3:66:f4:75:a1:b2:70:cf:d7:b1:ce:
                    46:51:31:9d:44:10:2f:90:f1:93:b3:2b:69:03:2f:
                    25:9a:d1:42:27:93:24:1b:88:8d:29:ac:f3:8b:53:
                    a3:b7:04:fb:d4:bb:8a:db:c7:6f:3f:51:1e:c0:4a:
                    c1:36:6f:dd:29:33:94:98:24:ed:de:ab:c2:4b:c1:
                    ba:e3:7c:1b:92:76:72:b6:79:7a:c9:dc:4a:44:5b:
                    02:9f:d7:90:e4:8c:a9:ff:f5:9d:22:93:d9:f6:ef:
                    d1:da:6f:d8:7f:50:0a:21:95:e9:2c:ed:e6:2a:4a:
                    9a:86:65:f8:33:df:b0:39:ba:09:ee:27:b6:04:93:
                    ef:26:c8:9c:80:a5:ed:57:93:88:a3:87:3a:90:6e:
                    a1:51:1d:00:ef:85:18:3a:14:70:fd:8f:33:ef:51:
                    15:cd:91:c7:1c:e0:1f:c8:b9:7a:ed:e4:f0:a1:9e:
                    62:8a:64:c2:ea:39:0f:43:88:8c:27:92:c5:13:06:
                    ae:48:68:7d:54:8e:e9:b2:d9:76:1b:60:e2:0d:8e:
                    1e:64:b3:01:9b:c4:e2:0b:62:9d:5a:b9:0d:a1:9f:
                    76:65:98:f4:bc:18:14:ed:98:5c:fa:26:62:35:f5:
                    0c:11:80:ff:b7:2c:4c:12:d1:3f:3e:90:95:9c:bc:
                    58:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5C:58:B5:29:54:2A:13:A3:AA:3C:CD:5D:DA:DC:88:50:B3:8F:9B
            X509v3 Authority Key Identifier:
                keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:5b:52:dc:97:08:4b:43:77:64:af:be:c3:b9:1f:fb:68:12:
         14:b0:d4:51:b5:c0:c3:f7:1c:c4:c1:6e:6e:d5:e9:cb:51:6e:
         61:18:6a:d2:ac:d2:3d:3a:19:d9:0d:88:8c:23:18:e9:04:89:
         b3:69:89:e5:1f:fa:3a:01:c5:b4:70:37:68:ba:59:72:06:ac:
         85:bf:be:b8:80:6e:b1:ac:4f:cf:08:ca:2b:1c:e8:42:cf:cb:
         96:12:de:bb:91:4a:36:91:8a:66:6f:e0:4b:23:70:cd:07:52:
         1e:dd:74:13:25:0f:88:65:d2:af:ed:79:49:49:7c:a1:65:15:
         3a:85:b4:37:7e:12:b1:4d:15:96:1d:10:13:22:f4:29:d5:d8:
         8a:ff:dc:f5:32:22:af:f6:d0:8d:6c:6c:de:94:62:20:f6:85:
         6c:4a:d9:1e:bc:18:d4:1f:fb:f4:ec:08:8b:15:ad:17:7d:24:
         8f:8c:1e:5b:7b:14:5e:3f:88:37:2d:5c:43:6f:1c:26:42:a7:
         56:09:e6:db:b7:5f:94:de:f1:5d:02:b1:0a:2a:f1:89:81:19:
         60:6a:ab:15:26:a3:45:46:41:18:01:47:55:04:f2:76:9d:cf:
         61:8b:59:1a:7d:fe:42:47:ee:77:53:23:6f:79:a2:c4:5f:56:
         fa:33:ac:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:34:16 2026 by rpki-client