Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File:                     E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier:          PgekEWeCWJ6bDGR5BVByokwZkX7X1O7m8HrWwmHcX6s=
Subject key identifier:   21:CF:1C:E7:61:0E:25:00:40:35:7C:61:BD:AC:23:1D:F9:02:4E:1A
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer:       /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial:       25FE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number:          25FE
Signing time:             Tue 22 Sep 2026 14:46:14 +0000
Manifest this update:     Tue 22 Sep 2026 14:46:13 +0000
Manifest next update:     Tue 29 Sep 2026 14:46:13 +0000
Files and hashes:         1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: gXRq2dLCRWMmQXU7OYG7mMlCgfJL7rw+/bSfU8TJPqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9726 (0x25fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
        Validity
            Not Before: Sep 22 14:46:13 2026 GMT
            Not After : Sep 29 14:46:13 2026 GMT
        Subject: CN=6ab294b6-7629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:0e:2b:ec:3e:56:51:9e:e5:39:2b:21:b6:
                    38:e3:31:43:dc:66:70:9f:7e:fc:c1:85:7a:4a:81:
                    bb:bf:ba:3d:74:36:d5:1b:0f:13:a0:3d:cd:cc:b7:
                    74:88:50:55:4b:ad:f6:ca:7a:9c:ce:68:c3:3a:a0:
                    9b:5b:74:32:2d:59:e1:7e:2d:cd:ee:e2:f9:16:3e:
                    ec:ba:a4:ca:6e:60:ae:d5:da:cd:5a:bc:0f:b9:2c:
                    c1:c0:c8:73:33:3f:19:f8:02:73:d2:84:18:1e:f9:
                    51:93:4e:47:91:69:95:4b:f2:ec:41:70:0a:f5:ae:
                    ec:ea:20:46:70:66:10:ba:76:69:af:a2:56:aa:ce:
                    19:c4:ac:9c:85:59:1c:ae:d4:90:bc:3c:97:79:4d:
                    9c:ce:30:d5:8c:1f:82:ac:ea:a4:cf:65:68:31:9a:
                    74:67:a3:6d:b0:be:e8:11:1f:f6:1f:a3:b7:ef:4e:
                    68:a0:33:19:ed:34:04:ae:fa:48:bb:dd:b8:4e:28:
                    41:7b:60:d1:6a:78:a1:55:ce:d4:bd:1d:45:80:9c:
                    20:95:92:ed:78:86:36:52:3b:7e:cf:43:91:9e:4c:
                    1e:da:2f:29:c3:c3:3c:5a:7a:d6:ea:a1:5e:10:2a:
                    f3:0d:13:ee:75:39:66:65:1a:09:75:55:d2:48:f9:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:1C:E7:61:0E:25:00:40:35:7C:61:BD:AC:23:1D:F9:02:4E:1A
            X509v3 Authority Key Identifier:
                keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:7e:67:91:be:89:5c:60:d0:cd:ac:27:2b:75:03:bd:a4:
         60:11:10:9e:40:be:00:c2:e2:b6:52:7f:ea:ae:7a:78:52:f6:
         49:db:dc:c6:05:ca:34:95:72:ed:c1:5c:e2:53:b2:c0:0f:9e:
         0a:b2:d9:f5:1d:80:2e:eb:2d:f7:98:46:5a:b8:2c:54:ad:ba:
         c2:40:a5:0f:28:de:66:3d:76:3f:fe:f3:5d:96:8c:7b:08:17:
         2f:b3:59:be:f2:20:a8:7b:ac:2f:b9:d2:15:93:90:6f:49:5c:
         de:68:a0:a8:ff:ec:6b:3e:c8:81:56:9e:30:6f:a5:f6:0b:48:
         c4:56:58:0f:d6:b0:35:a0:ba:01:96:96:03:42:73:e7:c9:ce:
         3d:a7:e5:b0:f3:a9:3d:95:ab:99:65:05:1a:cb:3a:29:c8:4b:
         18:dc:29:d4:6e:66:0d:d2:09:40:20:3d:fd:ac:e1:ce:2e:5e:
         40:8d:17:11:2c:15:3e:f6:95:7b:d1:dd:53:f4:2b:5d:8b:49:
         4a:56:bc:bd:f3:ff:6f:3e:46:c1:ab:d9:f9:ac:1d:bc:4a:c7:
         60:55:80:37:8e:37:3e:18:01:35:43:df:8a:2f:e7:e3:81:50:
         cc:e4:f0:a5:6b:51:d5:c0:40:8d:04:b1:a2:35:29:0d:31:6f:
         71:cd:fe:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:48:29 2026 by rpki-client