Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
File:                     EDki63fZQHF8gZ4oyWZGKUgLvOU.mft (raw, json)
Hash identifier:          oZ2wCcqHdgTuvg9+SB2I/zM0nCPL6JadepIOzkNhSeQ=
Subject key identifier:   45:38:09:B5:98:A6:02:51:D9:6D:2A:10:70:E6:5A:19:93:85:C6:B9
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       0126
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
Manifest number:          0121
Signing time:             Sat 05 Sep 2026 05:35:58 +0000
Manifest this update:     Sat 05 Sep 2026 05:35:58 +0000
Manifest next update:     Sat 12 Sep 2026 05:35:58 +0000
Files and hashes:         1: EDki63fZQHF8gZ4oyWZGKUgLvOU.crl (hash: rJ/LcoqeAcRZXNwAytqOQZWLnY2fk+TFZZdc4jeDV8I=)
                          2: 17D98518FD6911EFA889E84DC4F9AE02.roa (hash: NFFJXgXuoaxMrml8Oh8vxaW8xrfeeiE5Wfe+px5WY+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 05:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Sep  5 05:35:58 2026 GMT
            Not After : Sep 12 05:35:58 2026 GMT
        Subject: CN=6a9baa3e-0a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:92:62:d0:13:03:5f:41:a1:71:31:15:33:72:
                    55:c8:f7:5f:f3:0d:e4:1b:bf:a2:48:41:e7:d8:10:
                    1b:9e:d8:41:c3:1a:44:66:d7:9b:43:ea:90:4e:75:
                    3c:13:4e:bd:50:51:cd:4d:75:d9:22:d5:5c:46:68:
                    f3:6c:3a:5b:d4:ae:45:5c:e8:2c:94:2c:c1:90:5f:
                    48:23:af:95:8f:15:31:cd:87:a0:a4:c4:b7:0f:a4:
                    85:8a:a3:7b:94:fb:10:11:6a:f3:63:18:ae:97:9a:
                    29:eb:9b:20:a2:5c:25:13:2e:32:ec:96:ed:3c:c1:
                    02:b7:8a:90:f7:a9:15:8b:9b:be:1d:fa:81:16:06:
                    9f:f3:d8:bd:04:53:7d:f3:41:33:88:21:9e:ca:a0:
                    2e:53:31:da:b1:e4:cf:66:4b:c9:2b:0e:4a:0e:66:
                    e6:5c:be:93:83:1c:4f:ab:88:08:7f:c1:80:29:09:
                    6e:83:8b:1f:87:12:55:0c:bd:93:14:a5:ca:06:56:
                    d3:3e:6f:05:ec:65:ea:e1:22:a2:5d:61:0a:06:37:
                    b7:a5:ca:8a:c4:22:e5:92:86:27:85:22:52:25:1e:
                    b3:b0:d1:7c:75:f6:02:af:e3:51:b7:38:ca:0f:73:
                    03:30:9b:13:8c:f2:e8:91:7f:30:77:c7:ad:ac:eb:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:38:09:B5:98:A6:02:51:D9:6D:2A:10:70:E6:5A:19:93:85:C6:B9
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4b:cf:8d:4c:4d:f2:55:c2:79:2c:1f:dd:ad:e1:f8:91:f1:
         4a:52:67:77:12:f0:4a:e9:49:b0:36:c4:d1:3e:4c:ac:0a:4d:
         7c:0e:b9:01:21:d0:f1:5c:e0:1d:7e:bb:df:06:6f:5d:bb:be:
         05:dc:ce:b1:55:19:19:02:d8:63:08:b3:38:01:0f:6e:79:52:
         67:d8:8c:b0:ed:d2:d8:86:12:13:fa:d4:4e:cc:08:2c:78:b2:
         97:ff:40:78:71:56:53:58:f8:e4:c8:5c:b3:8a:04:b9:be:f2:
         76:8c:23:1d:f8:a9:d6:4e:e6:41:e6:80:a9:da:22:f0:72:1a:
         72:78:61:09:1f:d6:b0:28:d1:6c:50:b4:05:7c:68:97:11:b9:
         10:2b:53:91:26:62:f6:fd:35:8a:b3:a0:44:63:40:a9:3e:3b:
         7b:00:12:5c:94:ed:ff:1e:94:15:9c:8d:bd:4f:e4:e0:7a:9e:
         3f:9b:15:32:bf:ca:65:ef:aa:f2:5c:fa:b2:20:8d:88:a9:e2:
         4a:5c:b9:79:bd:69:68:80:ad:5c:4f:ab:38:16:c3:59:bc:c3:
         01:7d:1b:6d:7e:c2:2e:da:35:c4:64:41:10:99:b7:10:ca:51:
         f1:e2:95:ec:f7:9e:2e:b6:07:32:4f:20:8c:ab:1e:f7:36:9b:
         9e:fb:70:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:59:36 2026 by rpki-client