Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File:                     E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier:          FxOm7fCHrdBaR/AL0jKQ257jWFr3jVpLtYa/L8z+bc8=
Subject key identifier:   E9:30:45:EF:15:5E:07:14:7C:EF:F7:A9:D4:8F:BE:60:F9:A9:B4:76
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer:       /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial:       0D89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number:          0D5C
Signing time:             Mon 28 Sep 2026 18:14:30 +0000
Manifest this update:     Mon 28 Sep 2026 18:14:30 +0000
Manifest next update:     Mon 05 Oct 2026 18:14:30 +0000
Files and hashes:         1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: t2FU5SZC/WGMz6PCZwonmt/oB7hMVbY166nCqcTvcg4=)
                          2: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=)
                          3: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=)
                          4: E26173CE050611EAA0470B49C4F9AE02.roa (hash: R7rZtnSJJ0QZFo5Ja/uQYwMCd6fNJf9hdwEvNCJu1OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 18:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3465 (0xd89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
        Validity
            Not Before: Sep 28 18:14:30 2026 GMT
            Not After : Oct  5 18:14:30 2026 GMT
        Subject: CN=6abaae86-2f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:ea:6f:da:45:0f:3f:13:ca:24:22:7e:63:
                    43:0a:d5:27:ac:c8:6f:0d:7e:23:1d:a5:84:31:42:
                    d2:ec:c8:e9:cd:5a:e9:78:e7:03:7e:0c:96:db:bc:
                    64:d8:70:ee:7a:5e:07:d0:35:c2:1d:01:1f:69:f9:
                    1c:63:e3:90:06:89:26:65:f0:76:21:2d:93:5a:3d:
                    f8:3a:69:07:e5:5f:58:af:3c:4b:42:49:a7:62:ae:
                    fe:36:e2:a2:25:c6:c3:dc:49:8d:f1:83:8b:6c:af:
                    08:dc:ed:a1:21:35:8a:bd:d3:8a:f7:03:18:09:01:
                    95:88:c6:0e:f2:0b:7a:5a:52:0e:a8:fe:59:03:b5:
                    ed:1b:f0:68:f3:5c:66:3b:c8:b8:0c:22:69:fb:1d:
                    5a:7e:1e:12:9b:42:f1:07:2a:50:9b:4a:40:af:3a:
                    a3:ba:25:7b:b4:2c:78:29:00:d6:a1:1b:a1:35:43:
                    0e:d9:ef:dd:08:0e:85:01:09:df:95:25:eb:6d:f2:
                    b3:47:b2:40:bf:46:b2:ba:f4:81:93:c7:87:21:d0:
                    c6:5e:52:a9:b3:ff:31:48:f9:dd:d2:7d:3c:af:75:
                    52:00:ec:e0:e9:91:b1:d1:1c:95:19:97:20:66:60:
                    04:bc:80:11:0b:e4:1d:ca:70:22:2a:53:5e:c2:e3:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:45:EF:15:5E:07:14:7C:EF:F7:A9:D4:8F:BE:60:F9:A9:B4:76
            X509v3 Authority Key Identifier:
                keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6c:1a:84:7d:25:22:9e:22:a5:03:8c:4d:e9:e9:cc:41:f9:
         1e:02:02:20:43:38:d7:ef:a3:e9:77:53:9c:3a:0a:e3:a5:35:
         d2:c3:92:78:2c:50:e4:be:51:c6:13:a0:b9:dc:cd:43:1b:e2:
         e2:22:7f:4d:a4:0e:eb:5e:b8:ad:27:13:db:0b:20:54:34:dc:
         cb:a2:72:b2:e2:f9:ba:a1:de:84:67:ba:e7:c9:5d:12:9d:63:
         9c:53:2c:ca:df:b5:6b:2d:36:03:2b:dc:58:d1:91:05:ef:6e:
         62:07:66:94:40:98:1e:1d:b5:74:80:78:b6:38:92:f2:10:94:
         20:74:c4:4c:35:d4:f0:56:21:da:47:67:eb:89:c0:a4:fd:57:
         9a:7f:f5:4e:b6:8f:40:95:7b:04:2f:cc:b6:59:da:3d:da:dd:
         82:14:e9:d5:56:fa:0b:21:d8:50:c0:11:79:a2:84:f6:15:ac:
         59:85:1c:ad:c9:cd:38:b3:16:89:06:fb:d3:8b:3d:57:97:d8:
         70:8e:7c:38:69:56:a4:6f:63:25:d0:e3:04:a4:41:9e:99:ac:
         7b:c7:92:23:47:0d:27:41:f2:5b:87:7d:e9:aa:ae:01:9d:e7:
         ea:5e:b3:f3:38:fe:25:e9:0d:4f:ac:d5:63:06:f6:84:09:96:
         3d:c5:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:50:22 2026 by rpki-client