Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File:                     EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier:          Bhdzi6/+XHb52d2Yjl5/FyB56EzUs1eutWI199opLXQ=
Subject key identifier:   25:13:F8:AF:BA:AC:B0:3D:2B:33:9B:5B:8E:E6:44:13:37:E1:CF:AC
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number:          0147
Signing time:             Mon 05 Oct 2026 05:52:10 +0000
Manifest this update:     Mon 05 Oct 2026 05:52:10 +0000
Manifest next update:     Mon 12 Oct 2026 05:52:10 +0000
Files and hashes:         1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: b1U7aPXdytLo3dfaU/SBT/wZ5FxXlo24o6ydWi/Y700=)
                          2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: LzFnSgF5fJeJl/6hW+un70CZDkl9rjX22N/j2ZoEE/Q=)
                          3: eIH-eqtNmzRsaVseA8sDI9Ax5Eg.asa (hash: gB26gWronVyK4YGZR98D2E84niq/R+nx4F6Fm7a2DIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Oct  5 05:52:10 2026 GMT
            Not After : Oct 12 05:52:10 2026 GMT
        Subject: CN=6ac33b0a-3f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:e9:37:ec:6e:76:c4:90:33:a0:14:bf:4c:
                    0f:dd:31:39:66:ba:50:fd:2c:1e:60:08:8b:09:65:
                    4b:c8:19:0d:67:ac:19:34:ff:c3:7e:77:a7:0d:6f:
                    9b:d1:50:3d:d6:d0:63:3b:bd:fa:9b:22:99:e8:96:
                    9c:cf:65:bd:50:50:d7:e1:f7:69:ba:50:45:0a:01:
                    6a:5b:4a:35:cb:6e:ad:5a:f3:bd:c5:0c:9b:74:eb:
                    bd:82:4b:90:73:29:e8:64:3f:0c:26:88:68:28:ae:
                    69:1b:d0:bc:62:96:0e:07:5b:17:83:7a:74:1e:64:
                    9e:5c:8f:07:97:ee:a5:41:2a:7e:09:9e:75:f7:cc:
                    b3:33:24:17:a5:ab:d5:ca:95:3a:66:30:19:ab:68:
                    a9:fe:97:7f:88:bf:e5:82:96:59:03:bc:80:e7:2d:
                    45:23:47:c2:16:7c:f2:e5:2f:8e:f6:3a:9d:82:11:
                    22:35:89:bc:cd:61:f7:56:41:30:42:50:5f:ce:2d:
                    4e:76:33:91:5b:c4:c9:40:b5:97:d4:54:a6:b5:db:
                    f6:80:76:3d:df:6c:60:15:4c:56:11:e9:f7:98:38:
                    84:30:44:fb:f1:e8:0d:ae:de:38:d2:fd:32:fe:02:
                    c4:09:15:bf:31:7d:f8:0d:81:fb:1e:4a:d4:66:ce:
                    58:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:13:F8:AF:BA:AC:B0:3D:2B:33:9B:5B:8E:E6:44:13:37:E1:CF:AC
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:58:a8:fb:a4:d5:93:97:a7:99:82:46:aa:09:cc:95:fb:6b:
         0a:5e:a9:c5:3a:77:71:eb:22:fe:d1:42:40:7c:5f:09:21:36:
         b5:c5:bb:b7:39:06:fd:96:18:d4:b5:ae:4c:a9:98:9e:42:d1:
         05:f7:85:79:2b:da:db:73:13:7a:c0:ee:23:fd:48:20:4a:db:
         46:5c:ad:a2:75:85:c4:68:24:41:dd:74:a0:b2:44:e6:18:3e:
         78:c5:f3:ef:b3:a2:52:1c:18:49:19:36:0c:38:1d:af:f6:c4:
         cc:35:67:49:3c:90:9b:1b:31:31:f1:8e:d9:99:3a:e1:7e:d8:
         64:88:08:f0:6b:88:21:58:91:17:29:96:d8:33:eb:55:d4:c8:
         6a:ac:84:38:8c:0c:a7:dc:7b:24:ee:b4:f1:00:33:2b:43:27:
         1f:9b:b4:8c:a4:a3:72:8d:4e:42:09:d3:ae:8b:d9:54:18:60:
         04:82:cf:87:69:37:88:61:29:c8:77:90:22:be:2a:c4:4e:c1:
         1e:94:56:ce:8b:67:d4:e5:f1:24:a4:a7:7a:18:ed:cc:e5:0d:
         fd:9f:90:db:72:66:b5:b3:95:88:b3:15:da:1d:4e:b5:7f:14:
         ac:a5:ab:a0:5c:be:03:c6:40:f8:43:32:07:2d:75:2a:84:ee:
         c5:87:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:27:40 2026 by rpki-client