Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
File:                     e14ORHE1uxchraYfZdx1yV9U2wI.mft (raw, json)
Hash identifier:          dlxsGN5/e9CLCjbPYt4ymVwm87I8zmY7nbrOZ3VYGv8=
Subject key identifier:   88:C6:7A:96:5F:54:50:E0:45:58:9F:28:2B:1E:1A:F7:2A:F3:A0:AE
Authority key identifier: 7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02
Certificate issuer:       /CN=A91D8226/serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
Manifest number:          014D
Signing time:             Wed 23 Sep 2026 05:07:01 +0000
Manifest this update:     Wed 23 Sep 2026 05:07:01 +0000
Manifest next update:     Wed 30 Sep 2026 05:07:01 +0000
Files and hashes:         1: e14ORHE1uxchraYfZdx1yV9U2wI.crl (hash: 6tGvIZVufXhyXmJJyZISoJ9C+cIFjQhegJWa/rJuKDo=)
                          2: E4086C08BC2311EF9A445084C4F9AE02.roa (hash: 6ZyZnZmAF97haszVj91u3jxud/OaN9dw5BN62nVOUS8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8226, serialNumber=7B5E0E447135BB1721ADA61F65DC75C95F54DB02
        Validity
            Not Before: Sep 23 05:07:01 2026 GMT
            Not After : Sep 30 05:07:01 2026 GMT
        Subject: CN=6ab35e75-3ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:42:aa:0f:9a:a5:e1:56:9d:a6:a7:b9:2b:7b:
                    9e:f5:3b:49:d0:91:97:2e:80:75:ad:aa:1e:9f:29:
                    4e:08:74:c5:a9:d7:c3:7a:ef:63:17:33:d0:ba:e0:
                    06:f7:22:5c:b0:ac:f7:1b:c6:84:f1:90:5a:8e:b6:
                    0b:e6:65:92:01:7d:4c:df:47:3b:de:66:b3:fb:c1:
                    52:75:6a:ec:68:df:e9:27:b0:2a:8e:11:c0:9e:e2:
                    f7:62:fd:d1:2d:11:3f:6c:62:69:d1:a2:0e:54:06:
                    60:f7:4a:9a:44:f4:5b:b2:ce:de:71:ed:12:a1:13:
                    fe:19:64:2f:f0:b7:72:d9:68:d9:b8:c1:0f:c9:e0:
                    f7:6e:a8:5f:2e:00:07:5d:90:62:2b:b1:dc:46:69:
                    57:07:75:b1:10:d8:ae:b3:5c:c6:e4:ae:82:21:89:
                    ef:5e:4e:bf:ba:e5:8b:87:42:f9:3d:aa:58:4c:33:
                    f3:b2:75:f3:3a:dd:c7:38:84:7a:b9:e6:84:29:46:
                    58:ea:04:41:ab:e3:8e:bc:4f:c9:a9:9f:0f:06:1e:
                    a2:4c:77:e0:c3:3f:ad:13:2f:59:dc:bb:05:3a:25:
                    03:75:7d:32:73:e8:af:01:37:5c:eb:b7:ba:f9:2c:
                    2d:41:0b:b3:fb:33:b5:39:08:c5:16:76:11:5b:a9:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C6:7A:96:5F:54:50:E0:45:58:9F:28:2B:1E:1A:F7:2A:F3:A0:AE
            X509v3 Authority Key Identifier:
                keyid:7B:5E:0E:44:71:35:BB:17:21:AD:A6:1F:65:DC:75:C9:5F:54:DB:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e14ORHE1uxchraYfZdx1yV9U2wI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8226/EC4DF314BC1F11EFAADA745FC4F9AE02/e14ORHE1uxchraYfZdx1yV9U2wI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c6:da:6a:81:8c:22:d9:9d:bf:d6:9e:2b:35:e6:f5:4c:26:
         c2:cc:20:f5:8e:85:85:88:ec:14:b0:7e:74:d6:cc:c7:cc:8d:
         a4:67:5b:fc:71:3d:99:05:e1:2d:0d:71:44:b7:60:49:97:b6:
         4e:26:13:04:89:50:4b:b4:20:49:3e:48:ee:88:9f:71:0c:51:
         cd:74:da:1a:0a:be:aa:0d:8a:6a:02:8c:54:7f:eb:30:2e:9d:
         ae:23:8f:66:98:ff:2a:6a:3c:4b:c8:2d:fd:fa:17:16:6b:10:
         88:44:60:40:bf:2f:48:c2:aa:c4:c5:3a:e0:f3:f1:0b:02:61:
         4d:df:21:b2:ab:3b:7b:bb:60:39:31:4e:36:7f:2f:5f:18:7f:
         37:05:51:58:79:34:bf:71:b8:84:f8:82:62:53:2d:90:79:9e:
         e8:82:ab:be:da:ca:c7:ff:cd:0f:99:c6:f5:c4:21:d8:6a:10:
         6a:1e:c3:da:48:e4:cc:8b:93:89:cc:69:d6:6e:d1:46:47:bf:
         90:54:37:dc:0e:73:de:1c:87:29:88:e7:c9:29:d8:0f:25:87:
         a8:ad:68:03:0a:ca:16:68:7d:6a:36:41:05:7a:94:52:54:7e:
         d4:7d:94:c2:8d:5a:b0:5e:ab:e8:a2:69:06:40:36:2a:9a:3a:
         8f:e1:3f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:57:48 2026 by rpki-client