Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          zgpyQsqqgkYkOg5oyNNJ8s07V8SlyGqbzHxNdMdN8Gk=
Subject key identifier:   32:48:5E:D2:7A:E1:E7:96:0B:55:DC:52:D5:E9:1A:8E:08:6D:BD:28
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          117D
Signing time:             Wed 28 Oct 2026 17:18:07 +0000
Manifest this update:     Wed 28 Oct 2026 17:18:07 +0000
Manifest next update:     Wed 04 Nov 2026 17:18:07 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: qwqccl2UNI3is/NmMeiHVKKZ922yl20pCWuoHHjkgyQ=)
                          2: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: rrYfJWzJ93+0rNU9rs8ZtQlhXdDY6GsmRPMyGDEt0co=)
                          3: 33F4955E3A3411F1992413829C833773.roa (hash: llScgH/DERZP3O6YHfGF7jLGiuA7wh+xHhl+qdlnh+A=)
                          4: 119B53BA7C2B11F182BB7F515CA30FBC.roa (hash: Mr1FD25aFAgVJHv2hQSYzc14gyYsI3zGy2m0LXVcbAo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 17:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4497 (0x1191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: Oct 28 17:18:07 2026 GMT
            Not After : Nov  4 17:18:07 2026 GMT
        Subject: CN=6ae22e4f-6766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:f7:b3:2d:0c:cb:05:3b:16:be:4d:ef:6d:
                    99:d5:41:e6:ab:fe:25:87:0e:8c:cc:51:4d:87:e3:
                    ea:48:a1:33:32:94:2d:06:c8:3e:36:65:08:1f:c5:
                    ba:f0:45:80:a2:6a:52:0f:dd:dd:b8:2a:4e:26:10:
                    c1:27:44:c6:62:00:ab:ff:ed:a0:26:77:ec:e1:43:
                    d6:46:32:da:55:de:57:13:3f:49:df:82:e1:04:02:
                    2c:1f:a6:6a:00:15:a2:4d:7a:19:05:2d:fb:fd:92:
                    f3:21:aa:d8:f3:27:2d:ab:0c:95:f3:14:06:94:e3:
                    d0:8b:35:9e:c4:c5:98:3a:fb:5c:9d:fd:69:4a:a3:
                    c2:37:38:a7:7e:8f:9a:6f:7e:63:68:29:20:e1:18:
                    41:92:1f:cd:73:1b:4e:1e:e9:c5:e0:0c:18:cc:5c:
                    33:cd:13:e6:25:24:9c:ca:fe:ea:75:2b:fa:ef:80:
                    34:54:6b:af:98:22:79:82:35:be:4d:b7:c8:78:20:
                    f1:fa:6f:5e:01:e4:9c:68:7b:90:68:f3:d3:52:41:
                    31:09:b7:46:14:f0:64:d2:ec:82:1a:98:9b:34:be:
                    5d:c3:f4:94:3b:15:0d:d3:3b:fb:3b:f6:cd:88:80:
                    8f:94:0e:1a:6a:a5:03:00:94:a3:53:85:12:5b:0c:
                    63:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:5E:D2:7A:E1:E7:96:0B:55:DC:52:D5:E9:1A:8E:08:6D:BD:28
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f1:b3:7d:c2:36:90:71:c4:55:09:83:6c:70:53:7e:ff:e8:
         83:6f:4e:00:31:06:d0:d0:af:cc:29:58:e5:2d:ab:74:61:71:
         10:01:4f:a8:05:ec:86:78:9d:6f:58:52:a2:8c:01:f3:97:ff:
         03:1f:e0:d7:e0:1e:14:28:9c:5d:bb:ca:7e:1a:54:a9:28:b9:
         76:3f:2b:ed:88:47:f4:87:18:05:bf:ea:46:d7:7c:5a:66:0d:
         a3:40:67:9c:43:ef:2e:e8:5b:ce:a1:f8:e5:7c:fc:43:0c:82:
         26:e4:61:a4:75:b5:70:db:b0:77:56:28:e1:7a:4a:cd:ba:1f:
         c2:ee:e4:cb:de:32:74:2a:9a:20:b2:fc:4d:97:d5:7a:26:f5:
         11:50:76:14:f2:fa:96:e5:0e:e2:d2:23:c0:a3:bf:b9:25:2d:
         c1:3a:01:8b:bc:ea:ec:91:e7:b9:4f:31:76:3c:79:ff:a1:50:
         30:96:7c:dc:ba:51:20:7b:63:bb:c2:5e:85:c3:00:a5:b5:c1:
         66:b8:33:ca:77:74:89:c4:62:b7:76:0f:4e:21:73:97:ae:c1:
         b0:09:e1:c4:a9:84:75:88:94:d8:60:6c:05:04:ae:5a:0b:3a:
         d8:9d:73:a2:56:8c:3c:85:c5:6a:d4:3c:0e:de:a9:67:58:8b:
         ba:aa:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:29:35 2026 by rpki-client