Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
File:                     EhrxRNkD4_iJffD-0gcaFkd17U8.mft (raw, json)
Hash identifier:          6O5d3r7kBs9C60yK0m6KeCF01NTmkWi+dxFt3o+1pO0=
Subject key identifier:   87:0F:3C:80:6C:A3:E5:5B:4B:66:92:CF:12:9D:C7:23:C8:6A:FA:B2
Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F
Certificate issuer:       /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
Certificate serial:       018F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
Manifest number:          0182
Signing time:             Mon 19 Oct 2026 05:25:25 +0000
Manifest this update:     Mon 19 Oct 2026 05:25:24 +0000
Manifest next update:     Mon 26 Oct 2026 05:25:24 +0000
Files and hashes:         1: EhrxRNkD4_iJffD-0gcaFkd17U8.crl (hash: noPxZfTjjmn9wNqRDeVQWHNOFPukLooXTpTR7dFmt6o=)
                          2: E12300F27DE711F1A1F9DA6963A30FBC.roa (hash: HWu++fZJ7qJBpUlP+w3MOqBUVps1PM4BfBzFANQKNlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 05:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
        Validity
            Not Before: Oct 19 05:25:24 2026 GMT
            Not After : Oct 26 05:25:24 2026 GMT
        Subject: CN=6ad5a9c4-cf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:2e:62:3d:34:f9:1b:e1:a4:5e:36:93:17:
                    83:1b:53:17:bf:79:10:b5:ed:f9:1c:88:1a:30:e3:
                    49:9c:25:4b:59:00:fb:6a:a1:65:6c:70:38:59:f1:
                    a5:34:ee:cb:91:0c:8d:88:4e:5c:5e:d5:81:b8:a4:
                    d5:e1:b0:71:15:c2:53:2d:82:55:7b:39:b6:79:f8:
                    f9:f0:55:79:99:95:60:07:d0:3a:c5:9f:60:c8:6d:
                    e3:1c:c3:2c:61:61:68:a3:96:bb:d2:8f:d2:bc:db:
                    d5:75:d4:dc:5b:2d:21:b1:f9:db:96:c5:41:a4:7f:
                    00:63:8c:6f:fe:24:43:4d:12:61:15:50:65:b4:a8:
                    f9:7f:ed:fa:ba:76:3d:ec:63:8e:1c:4d:65:00:7e:
                    cc:a7:3f:f1:06:11:c3:f1:a2:5f:12:d6:7d:f6:3f:
                    6b:7a:63:34:fb:35:9f:a4:9f:21:6c:7d:81:54:af:
                    aa:22:e8:6b:d5:9a:2d:9e:36:b1:62:34:d7:e8:6c:
                    92:c0:d1:3f:d9:e3:2d:24:9a:74:df:2a:af:55:1c:
                    1b:bd:30:ee:b6:34:1b:66:6c:f3:cf:11:71:34:4e:
                    e2:96:e4:48:55:15:7d:ad:10:b4:9e:f5:8c:aa:b4:
                    4d:ee:e6:8b:17:2d:a0:88:e0:c4:9d:9b:14:d7:42:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0F:3C:80:6C:A3:E5:5B:4B:66:92:CF:12:9D:C7:23:C8:6A:FA:B2
            X509v3 Authority Key Identifier:
                keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:59:5a:45:be:b4:45:ca:36:2e:06:69:2c:2b:f1:e7:65:
         e2:ec:16:6b:e6:c0:3a:ae:a0:41:0c:2d:5a:34:10:52:3e:0a:
         2b:b0:ac:c8:c0:98:52:28:a5:f8:d7:34:51:1e:79:98:1b:50:
         fe:ea:1f:57:fe:f5:1b:71:d5:e5:b5:0b:12:14:ab:76:e0:13:
         79:73:b1:55:e9:5a:5f:35:25:7f:18:0d:76:7a:c5:f0:18:d4:
         be:bd:3a:87:dc:cf:80:0c:29:16:47:ec:d0:fb:f9:69:5b:c9:
         31:03:bc:f3:94:04:8f:c8:53:32:c9:17:8e:3e:df:5e:86:96:
         45:65:71:85:f8:8c:07:9e:af:d4:d9:dc:16:4e:08:e5:93:09:
         0e:bb:23:df:7e:7e:4a:c2:ba:87:1b:69:ab:93:20:a1:9d:2b:
         aa:a5:5a:97:9d:21:db:7e:33:87:b8:c8:3c:71:de:d8:28:90:
         5c:ca:59:96:f8:7b:b8:59:cb:4d:5a:9d:fe:68:ac:e0:50:aa:
         8d:59:49:ef:51:8d:37:0c:10:25:f2:a4:fb:0b:cc:21:9d:bc:
         58:2f:66:16:05:14:1e:fd:46:6c:41:10:0c:0f:7f:e7:2a:b4:
         98:29:58:d1:91:8d:15:60:9b:7d:fd:aa:7c:5c:3c:5e:a2:8e:
         58:0e:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:48 2026 by rpki-client