Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File:                     EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier:          Xm+p7NKrpThPObZqxBCzkE0AymA074HejGk/Ckc1dgY=
Subject key identifier:   FC:17:EA:16:B1:81:E7:43:3E:B3:3B:CF:26:DD:9C:56:BB:3E:62:F6
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer:       /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial:       3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number:          3A
Signing time:             Wed 23 Sep 2026 08:17:33 +0000
Manifest this update:     Wed 23 Sep 2026 08:17:33 +0000
Manifest next update:     Wed 30 Sep 2026 08:17:33 +0000
Files and hashes:         1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: Wjl5ypi9osDO2Rr9lecC3rrasGzzZ02SFrB2KXhcvUg=)
                          2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
        Validity
            Not Before: Sep 23 08:17:33 2026 GMT
            Not After : Sep 30 08:17:33 2026 GMT
        Subject: CN=6ab38b1d-09ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:30:39:26:cf:1f:16:a0:ee:da:1b:f6:a6:
                    f8:23:05:66:50:43:12:b1:30:97:54:14:1f:28:73:
                    bc:16:08:f4:e1:d9:a3:f3:b9:95:f8:7e:32:73:f6:
                    77:b4:89:b4:94:cd:05:0e:37:e8:ab:d8:0e:fe:f0:
                    ab:f9:57:7d:3a:3f:f9:ce:c9:fe:57:25:ab:a9:91:
                    e0:63:36:b8:a0:90:58:63:8b:58:18:cf:e4:b6:69:
                    f1:c0:db:b4:6b:6c:5c:2b:03:84:c6:7f:46:c6:0e:
                    f7:b6:65:9b:f5:00:3f:94:f2:a2:22:b2:12:8b:a2:
                    53:37:aa:20:b5:8d:3c:ae:1a:bc:d4:cc:0f:aa:9b:
                    5a:6d:e6:9a:b8:69:46:f0:c7:b3:58:d9:8e:28:2d:
                    42:5e:a2:ce:99:8a:d7:d2:f5:e7:53:30:0a:2f:fd:
                    f3:a4:25:00:40:5c:88:e0:71:d4:65:15:71:05:db:
                    ff:28:a2:b0:40:87:96:db:cf:b1:08:0b:03:e0:5d:
                    21:8b:48:8f:ec:34:5f:58:39:e5:87:81:61:71:b7:
                    e0:3c:59:0f:dc:54:11:b2:d3:e7:2b:79:7b:69:8d:
                    fe:13:a0:8d:5c:38:8c:75:47:8e:5f:82:c4:ab:71:
                    4c:7b:9b:4b:d7:c9:c8:ea:41:07:2c:a4:6d:f0:0b:
                    9b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:17:EA:16:B1:81:E7:43:3E:B3:3B:CF:26:DD:9C:56:BB:3E:62:F6
            X509v3 Authority Key Identifier:
                keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:41:9c:b3:69:ea:99:73:0a:13:e9:e8:6c:9a:e8:a8:bb:
         f3:80:7c:1e:1b:cb:34:c4:7a:07:33:10:fe:8d:58:e9:f6:1e:
         0c:86:96:43:b8:30:eb:af:98:95:86:fc:24:2b:3e:3f:18:c4:
         bd:54:20:63:cc:f5:c6:07:8c:1c:69:4f:7e:b7:2c:d4:2d:71:
         46:e5:9e:77:90:5a:0c:46:09:7d:e1:f4:68:d2:4c:c3:da:52:
         28:38:e3:e2:da:0f:19:09:46:c0:6b:60:75:65:95:c8:75:0f:
         59:af:c2:8a:58:3a:16:50:1f:f2:50:bf:3d:48:e1:23:f8:17:
         5d:09:b7:6a:23:3d:95:85:8d:04:66:0a:7a:3a:e4:d9:2b:33:
         49:c6:56:2d:be:1c:6f:4d:d5:cb:cc:aa:c9:f3:b9:a1:23:70:
         1f:a1:74:1d:91:a5:0c:e5:a8:10:af:5c:bc:fb:2f:87:61:cd:
         2e:0e:a2:f4:c2:20:af:ec:e8:4c:84:16:1f:32:ba:0b:25:e2:
         01:2b:01:af:ad:61:50:2e:87:af:0a:61:46:22:d2:c5:fc:3c:
         a5:7b:1b:d4:6d:19:c1:85:9c:b5:42:29:b1:ab:c8:b7:7e:64:
         0b:32:b0:b1:2f:61:47:16:45:a0:5d:a3:82:1e:41:41:23:45:
         a5:6b:85:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:50:40 2026 by rpki-client