Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
File:                     EAslNUZkaB2quQXO_0pNp0nE64o.mft (raw, json)
Hash identifier:          E94o5HstSrwkNi7l3giIWA0gfbFzxPSCI+FZxrrW4XA=
Subject key identifier:   D8:AE:55:64:31:3C:17:54:32:AE:DD:C0:EC:E1:73:FB:F7:B8:69:8F
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Certificate issuer:       /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
Manifest number:          EC
Signing time:             Sun 11 Oct 2026 07:08:32 +0000
Manifest this update:     Sun 11 Oct 2026 07:08:32 +0000
Manifest next update:     Sun 18 Oct 2026 07:08:32 +0000
Files and hashes:         1: EAslNUZkaB2quQXO_0pNp0nE64o.crl (hash: HB0AinFXHdXjZaIkC2Stcbr9bIZgEYRjw3CvvQBfubk=)
                          2: 8B9109C06B8911F0A0F62851C4F9AE02.roa (hash: 82nHeS7CHoySaZHAiJzF0tyiNyUQq6elNqL8KAqq8/k=)
                          3: 4DA7A7766C6611F0883DC646C4F9AE02.roa (hash: eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 07:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
        Validity
            Not Before: Oct 11 07:08:32 2026 GMT
            Not After : Oct 18 07:08:32 2026 GMT
        Subject: CN=6acb35f0-94bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:79:6c:2b:67:9b:ca:5c:1e:9c:7f:cc:92:
                    4a:91:5c:f2:1d:b1:57:cc:39:d5:30:c2:5a:ef:f7:
                    69:b1:46:cb:a7:f5:80:05:cc:19:31:5d:d4:66:ad:
                    21:4c:e5:be:f2:bd:fb:27:b3:45:4c:21:d8:73:d7:
                    13:25:c4:d5:10:22:59:a6:fe:e2:fe:85:ab:cf:e6:
                    4d:68:4d:71:3d:7a:35:77:40:6e:9a:49:1d:d8:7d:
                    43:64:b9:c1:ad:80:e9:76:da:ca:59:82:d1:00:5e:
                    35:5c:25:70:8f:6e:d4:e8:85:51:52:d3:72:73:5c:
                    3a:bb:28:37:48:b9:74:41:83:cb:1e:ce:b3:2d:13:
                    da:dd:47:d0:fe:76:b4:8b:b9:ac:c7:5f:28:c7:97:
                    7f:59:e6:8e:63:1e:ae:5d:f3:e8:29:91:a8:3c:5f:
                    29:f7:d3:57:62:98:a4:a1:5d:c0:20:85:d0:64:7c:
                    14:8b:fd:aa:76:bb:8e:01:e2:0d:21:44:33:f0:0a:
                    f7:00:ad:42:f0:69:ed:8b:30:87:60:2c:13:30:a4:
                    26:2d:ef:8d:6c:f7:8e:ac:a9:64:69:fc:59:41:4e:
                    db:95:58:ea:31:c5:22:2d:4d:39:fb:07:d4:b5:6a:
                    ad:f3:97:0b:ef:4d:94:42:bb:7d:56:9c:57:30:58:
                    0b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:AE:55:64:31:3C:17:54:32:AE:DD:C0:EC:E1:73:FB:F7:B8:69:8F
            X509v3 Authority Key Identifier:
                keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d8:26:60:6c:96:84:ce:83:4a:63:65:64:86:ce:74:46:a1:
         9a:1e:3e:f6:c8:d7:95:b1:4e:4a:1b:fe:e4:b3:58:75:78:24:
         10:31:78:d6:05:55:62:93:03:93:6b:ec:7f:b8:e4:2b:38:23:
         b7:51:4a:6d:22:e6:09:c0:dc:b2:55:63:2b:bf:f0:d3:a9:e3:
         22:69:59:dd:f9:64:fc:96:b7:52:5e:29:54:31:d9:98:85:45:
         ec:75:32:ee:ce:40:9f:29:f6:2d:1a:46:57:68:b5:d2:b7:a7:
         57:bc:c5:71:ac:63:d2:c8:36:a1:74:b9:b8:e3:31:61:bc:04:
         6c:b5:a9:28:56:bc:38:67:a3:c4:fa:45:24:63:67:66:20:b6:
         b1:d9:69:94:22:99:4d:8d:41:55:f4:df:b4:09:99:df:76:00:
         94:ea:a9:74:b7:db:de:87:2e:38:8f:6f:bd:cf:2b:11:35:ee:
         b7:98:9f:98:1b:6a:8b:61:4e:db:90:36:c7:24:f1:3e:b7:e0:
         5f:79:a6:1a:3c:d6:81:b6:4f:27:f8:1d:95:e2:4f:51:17:51:
         ea:3b:f7:f8:5d:d8:61:16:c2:a3:6d:b9:1a:44:de:b9:ef:8a:
         95:ee:87:36:09:cb:ac:33:a8:7d:e4:4f:cb:af:09:18:21:3c:
         77:80:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:51:08 2026 by rpki-client