Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File:                     EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier:          1T2kATzC0RjKab4mab9w9yaCC+9iMeYDlOq28AMlSpE=
Subject key identifier:   55:C8:FB:2C:02:5F:43:43:0D:3A:AA:0B:47:52:DF:5B:9F:CA:54:E0
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer:       /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial:       0D7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number:          0D68
Signing time:             Wed 30 Sep 2026 18:14:36 +0000
Manifest this update:     Wed 30 Sep 2026 18:14:35 +0000
Manifest next update:     Wed 07 Oct 2026 18:14:35 +0000
Files and hashes:         1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: b6tcw6+g2zRX0NKQH0eFJjxXV3cs7D3KXtF4IeEjeS0=)
                          2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 07 Oct 2026 18:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3452 (0xd7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
        Validity
            Not Before: Sep 30 18:14:35 2026 GMT
            Not After : Oct  7 18:14:35 2026 GMT
        Subject: CN=6abd518c-f777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:ab:c7:e4:fd:1b:c8:ae:a6:2e:24:3a:f8:
                    11:05:5f:61:ad:00:64:9a:e6:49:26:cf:88:db:95:
                    ad:c3:24:c5:30:f9:aa:83:25:6e:8e:12:58:82:8d:
                    4e:6f:e8:04:78:d7:48:b5:cc:88:f9:8b:de:40:b2:
                    19:70:29:4c:c9:0e:d8:d1:d4:44:18:d8:bf:6a:f6:
                    17:48:99:97:56:b4:7a:47:15:6b:58:42:4b:74:54:
                    fa:4a:6f:cb:91:b3:92:72:b0:01:71:7c:4c:c0:2d:
                    99:94:36:f7:fb:48:e6:fe:86:62:59:41:66:f8:31:
                    7b:1a:b1:9d:28:5a:a3:04:0e:1d:15:14:35:48:87:
                    5c:4c:1d:d5:58:ad:dd:b7:fd:1e:e0:45:72:20:60:
                    5d:8c:16:c7:3c:58:0c:29:5f:3b:2a:83:f8:65:94:
                    d7:69:4f:c8:e3:dc:76:1f:e6:77:5e:6f:36:76:0f:
                    a4:34:4c:b7:bd:18:7f:64:5d:67:61:b3:10:0a:e0:
                    91:b7:bb:1e:d1:b2:d1:c9:ee:25:fb:f9:ae:90:a3:
                    89:c3:28:db:f0:f2:d6:ec:2d:a7:ac:6d:4a:6b:85:
                    c2:43:d7:ff:be:db:6f:a7:75:7c:3f:2d:ae:12:6e:
                    da:ee:26:56:01:93:9b:ac:4c:33:39:f0:89:db:2e:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C8:FB:2C:02:5F:43:43:0D:3A:AA:0B:47:52:DF:5B:9F:CA:54:E0
            X509v3 Authority Key Identifier:
                keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:be:64:7a:77:66:49:88:c4:13:a7:56:b5:d6:33:1a:38:e7:
         a0:34:88:a7:e0:02:42:24:64:8e:e1:c2:a3:8a:20:f9:ff:6f:
         e9:98:dd:36:db:d3:ad:84:02:55:8c:b2:03:d8:48:a3:13:97:
         68:b3:65:21:dd:15:ac:45:1d:d5:8d:43:78:7b:7d:01:61:16:
         72:10:f9:aa:4f:69:54:77:51:b8:96:17:9a:42:e1:2a:05:8c:
         cc:33:91:a2:4a:5b:4b:37:2b:d8:e2:50:a0:c0:3c:ce:3e:e7:
         66:b2:aa:af:3b:10:46:ad:43:f3:70:77:a6:16:06:98:40:8c:
         c7:6f:ca:40:b6:95:b1:35:5e:92:86:3c:6c:28:6e:78:5a:55:
         05:94:3b:df:09:f8:24:1d:1c:43:32:78:4a:d1:3e:a7:4b:bb:
         8e:80:bf:f0:b7:5c:6d:5e:79:be:e5:09:4b:6d:e4:00:d2:21:
         5f:fa:98:ea:66:2b:e1:67:3c:7e:c1:30:19:b9:48:ae:d2:42:
         26:2f:13:a9:8d:1d:c4:00:13:93:78:05:01:41:29:58:02:97:
         5d:58:14:e7:7a:9c:92:8d:80:7b:83:f9:cf:9a:d5:72:44:f6:
         21:d9:7c:b5:fd:92:29:8a:66:5a:fd:74:f0:06:ca:be:7d:7d:
         fd:6f:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:40:25 2026 by rpki-client