Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
File:                     ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json)
Hash identifier:          OJfLKyZu+ElyGa4QuW0cf4jHMEJaKf883Iquo2RgJp4=
Subject key identifier:   D6:06:D0:50:0E:E6:F8:3E:27:9C:24:97:56:74:14:19:0B:2B:E0:5D
Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78
Certificate issuer:       /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
Manifest number:          0149
Signing time:             Mon 31 Aug 2026 05:47:34 +0000
Manifest this update:     Mon 31 Aug 2026 05:47:33 +0000
Manifest next update:     Mon 07 Sep 2026 05:47:33 +0000
Files and hashes:         1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: kbTvIdYh3f//yIvp1yWREGMeVH0xuluAyVq0N4HpeOQ=)
                          2: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: j5AEAb8kY5M3sbYrBrlhwU1t8O30/erdyML6Xz5HVZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl
                          rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 05:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78
        Validity
            Not Before: Aug 31 05:47:33 2026 GMT
            Not After : Sep  7 05:47:33 2026 GMT
        Subject: CN=6a951575-2cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:24:dd:26:f8:13:ab:27:61:04:9a:d7:2b:08:
                    30:0e:8b:38:49:2d:83:d6:d0:8e:5b:ce:7a:61:25:
                    63:1d:0f:ca:96:e3:65:75:b1:2c:61:4b:c9:aa:31:
                    b1:7d:9a:e1:40:9f:5c:71:71:33:0c:e0:cf:7c:a9:
                    82:f0:e0:c3:0e:af:fc:eb:0d:96:0f:1b:db:37:2f:
                    dd:99:a4:97:e3:9e:bb:13:97:ca:fb:c1:de:87:b1:
                    46:d7:9a:84:be:e9:b4:ac:fd:57:29:14:bf:38:0c:
                    e5:46:92:c8:12:e7:b9:2f:f1:3f:95:74:58:38:42:
                    52:4e:ca:58:e8:f4:0f:24:78:0d:9f:3f:9e:64:61:
                    07:c5:dd:00:25:fc:5c:1a:1d:65:f2:32:63:67:65:
                    ca:18:6a:80:cc:7c:3a:cb:5c:56:82:67:46:dc:9e:
                    c7:a6:d1:38:4b:fe:9a:77:83:ec:bc:d4:ad:2d:73:
                    ea:fb:d7:81:bd:b2:aa:94:c0:c0:46:e3:2f:03:ca:
                    ab:4f:2b:1c:b5:16:50:a8:51:71:6f:29:12:3b:ce:
                    91:1b:28:8a:0d:c4:a1:63:16:24:b8:cd:e6:08:5a:
                    30:8e:55:87:97:6c:8a:19:13:12:58:d6:31:e6:57:
                    56:ff:5e:1c:2e:8c:59:bf:54:58:c2:54:1f:c8:b0:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:D0:50:0E:E6:F8:3E:27:9C:24:97:56:74:14:19:0B:2B:E0:5D
            X509v3 Authority Key Identifier:
                keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:75:50:78:b9:3a:84:9d:23:62:07:64:80:dd:93:13:b9:
         66:5c:ff:99:2c:0c:35:7e:3d:d0:8f:e9:ee:9d:3d:67:e4:a7:
         5d:f0:cc:31:0c:4a:6c:c1:c8:d9:a6:e8:d7:46:e9:c1:ee:06:
         c4:fd:f2:6a:88:f1:b3:e5:9b:a3:81:b6:d6:5f:86:7c:95:ae:
         2c:e3:9e:29:9b:c2:e2:70:49:e2:f4:2e:39:1c:94:fb:01:c4:
         a7:68:fa:51:d6:ff:0f:2a:84:72:7a:3d:c2:87:3b:48:5b:a3:
         84:7c:e7:db:c4:5f:dc:2d:15:b8:fa:f3:99:fa:0a:d7:f1:86:
         56:6c:42:cd:10:75:12:c2:b0:9a:58:a2:dc:bb:81:1c:f0:63:
         6c:d5:c1:94:83:36:8d:63:3b:b4:a3:b1:f3:ec:b3:ba:cf:4b:
         d3:fb:53:3a:c3:35:bb:30:c4:be:8e:62:61:2f:64:9e:c8:d3:
         30:0c:d7:9a:87:0d:1e:84:90:85:fb:69:45:09:35:32:29:a9:
         24:d7:44:fb:dc:96:e2:93:34:eb:90:f3:c7:80:de:89:06:44:
         22:b5:cf:5a:41:61:76:12:38:d5:60:2c:c9:b0:99:65:06:99:
         07:f4:b5:aa:00:a5:36:e2:39:4b:7c:cc:a7:e8:53:5d:41:fb:
         41:60:80:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:43 2026 by rpki-client