Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
File:                     E3NT0OjBRaWAywC8MiIInEBIrlE.mft (raw, json)
Hash identifier:          DZJjew5wYZ1ozmd7eH/+GKK0F6N0h4hi2x9QPdi7JNM=
Subject key identifier:   D0:E2:56:91:8F:96:81:23:15:E0:EF:9F:53:32:D2:FD:01:98:0B:C9
Authority key identifier: 13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51
Certificate issuer:       /CN=A9153490/serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
Certificate serial:       0206
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
Manifest number:          01F8
Signing time:             Tue 27 Oct 2026 03:31:49 +0000
Manifest this update:     Tue 27 Oct 2026 03:31:48 +0000
Manifest next update:     Tue 03 Nov 2026 03:31:48 +0000
Files and hashes:         1: E3NT0OjBRaWAywC8MiIInEBIrlE.crl (hash: LXVkuntS7CbbL5shC50Vf/nFOIA03GotZx5Zb0uRL+A=)
                          2: 1040CDC4EBB411EE9D86095BC4F9AE02.roa (hash: TmPmnCGLgyK9Ap1rfmXl6pOPPj4J1wY9n/QSsrwz+OQ=)
                          3: 0FE13C92EBB411EE9D86095BC4F9AE02.roa (hash: YDCHKzV19Ubj3YzIiUsWRoQfZaKPPY3EdfIFom647Eg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl
                          rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 03:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153490, serialNumber=137353D0E8C145A580CB00BC3222089C4048AE51
        Validity
            Not Before: Oct 27 03:31:48 2026 GMT
            Not After : Nov  3 03:31:48 2026 GMT
        Subject: CN=6ae01b24-3482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:8b:a0:b8:e2:bf:00:ea:ee:35:78:81:b4:
                    f4:48:52:07:7d:e0:8c:12:62:2f:ce:d3:62:53:60:
                    9f:c8:72:af:1a:db:2b:25:58:5e:39:74:7e:c2:ed:
                    00:e1:f6:15:ff:ec:b1:07:74:76:82:fd:fa:f4:49:
                    d1:be:78:09:fa:35:83:39:54:46:0a:a4:06:f1:ef:
                    40:0a:c2:44:24:6d:7b:4a:03:dc:3a:a7:f0:88:0c:
                    25:20:2d:92:88:54:0a:8b:6b:a1:2d:a0:c8:c7:b6:
                    c0:9f:6e:94:01:af:61:72:25:71:0b:5a:6f:96:83:
                    31:7c:ed:3a:c1:c2:03:30:f1:9c:bc:c4:d5:77:9e:
                    bc:f0:ee:6e:de:da:d4:a1:a3:26:85:60:db:3e:3d:
                    b8:29:d2:0d:81:28:19:38:24:db:5f:99:56:4d:8c:
                    35:98:fa:5f:8d:14:7d:a8:db:3e:f6:23:09:5a:63:
                    e5:a0:95:46:0e:ed:2b:c0:30:89:25:89:41:ad:e3:
                    43:f9:34:ec:fc:aa:f9:66:22:90:f5:b9:be:10:fa:
                    aa:9f:e0:e1:a0:94:ad:a9:cc:c0:fb:47:8c:c2:bb:
                    e6:e8:8b:ce:ec:cd:12:b0:fb:79:e0:c7:c9:dd:b8:
                    ea:72:a6:36:51:3d:16:8e:4c:33:fb:6f:80:9d:f2:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E2:56:91:8F:96:81:23:15:E0:EF:9F:53:32:D2:FD:01:98:0B:C9
            X509v3 Authority Key Identifier:
                keyid:13:73:53:D0:E8:C1:45:A5:80:CB:00:BC:32:22:08:9C:40:48:AE:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3NT0OjBRaWAywC8MiIInEBIrlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153490/99198F12D05411EEAF799F16C4F9AE02/E3NT0OjBRaWAywC8MiIInEBIrlE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:15:d7:00:db:36:d9:0f:b1:1a:6c:8a:3a:51:04:15:a3:3d:
         2f:b0:7f:1e:7b:bc:75:4c:16:05:22:0e:04:ec:9e:75:66:5b:
         17:f2:2b:2e:42:cd:56:0f:fb:49:58:25:d1:42:35:e6:0a:08:
         9f:15:61:09:eb:c2:16:4b:ca:37:b1:7c:c3:12:2e:a7:0d:b7:
         02:e9:03:33:27:3a:d4:a4:e5:2f:cd:a2:df:56:18:b4:30:02:
         41:df:40:9f:41:33:0f:bb:bb:07:a8:5b:e6:62:2c:2d:85:5a:
         32:6f:dd:dc:88:b5:73:c3:95:ec:f3:98:27:13:d6:18:45:86:
         e0:33:d7:8b:03:15:2a:1f:9b:24:72:12:e0:cb:df:4a:03:6c:
         0c:7a:b5:cc:5e:17:06:12:0e:c3:68:d1:32:f8:00:19:2e:1f:
         3e:69:25:45:30:c4:e7:aa:de:80:4a:07:e9:91:55:8b:d5:2b:
         cc:e8:d0:84:c9:2c:a9:b2:d3:ba:7e:7f:aa:ec:6d:b6:13:25:
         fe:10:28:a8:52:18:7d:72:37:d3:9c:51:5a:73:e8:cd:d9:15:
         b0:6e:4f:98:ba:ae:66:e5:49:77:58:62:9f:a5:aa:10:6a:75:
         75:df:75:91:73:2b:d1:c6:80:76:83:e2:1e:31:01:18:83:d2:
         29:08:2b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:06:32 2026 by rpki-client