Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
File:                     IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft (raw, json)
Hash identifier:          e43AoUJZQHvgQfv3j96o+fr/jMx0+UTB0SidDVr15s0=
Subject key identifier:   01:1B:DE:91:AB:46:B4:9B:21:B4:5C:7D:DF:EB:4C:4C:9C:CF:47:88
Authority key identifier: 20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17
Certificate issuer:       /CN=A912905D/serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
Certificate serial:       02CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
Manifest number:          02C0
Signing time:             Thu 29 Oct 2026 01:55:47 +0000
Manifest this update:     Thu 29 Oct 2026 01:55:46 +0000
Manifest next update:     Thu 05 Nov 2026 01:55:46 +0000
Files and hashes:         1: IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl (hash: 53nbtpcDpy9edahuQyvlGT8U3yAQd6PT+ec7tBXGrVw=)
                          2: SdX95TlC1Lr51eFQH3-UwnM7ByQ.asa (hash: N6mlVMJ+GuqxRdKaS9hP75eWe+/snkjj54gL1Yphwjg=)
                          3: CE9A4D70D6EA11ED8F0C322EC4F9AE02.roa (hash: aKMlcoKPOK4sVWlP0NCeOszEtBXOmIcZnqYHH1capVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl
                          rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 05 Nov 2026 01:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912905D, serialNumber=2041A548216FF014894B79CC9FD77311BC7CA317
        Validity
            Not Before: Oct 29 01:55:46 2026 GMT
            Not After : Nov  5 01:55:46 2026 GMT
        Subject: CN=6ae2a7a3-57e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:b7:20:d4:03:f2:01:72:d4:dd:69:e2:64:
                    45:a2:f5:99:b9:fe:69:c9:6b:ea:67:57:1b:28:a7:
                    ba:51:db:34:0d:16:40:4a:13:ec:8b:68:ec:f7:1f:
                    ee:18:59:5e:d0:03:b4:4f:24:d2:ac:e6:5b:7c:7d:
                    da:8e:5f:9d:76:55:60:8a:6b:80:7d:fc:67:8e:af:
                    ce:4c:ec:e5:07:7e:88:4b:28:ee:be:02:f2:16:ab:
                    dc:41:21:42:00:49:0c:25:d6:b9:8c:ce:6b:8a:0d:
                    7c:f7:4a:42:51:de:30:80:ea:bc:43:dd:60:10:c8:
                    2c:7a:bc:da:5c:81:da:e9:7c:20:f1:88:67:45:6f:
                    bd:1c:b9:71:9d:9d:89:e1:17:1f:9d:93:b7:9f:03:
                    21:6d:2f:da:f9:db:88:d1:18:69:1f:42:43:40:f1:
                    28:99:44:ea:53:b9:49:dd:ee:50:02:12:d3:8d:1c:
                    08:b4:9c:10:0b:91:c1:54:95:49:eb:52:55:b0:7d:
                    91:73:ca:d0:ac:6a:e3:28:cc:64:67:a7:ee:67:9f:
                    bb:85:07:c5:3c:1d:75:27:2c:dd:fa:fe:75:3e:4b:
                    b1:01:e6:c3:5a:42:fe:eb:6a:7f:6c:81:a4:15:e8:
                    76:d9:fe:15:e6:fe:a5:6b:9b:6d:8b:41:76:e8:04:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1B:DE:91:AB:46:B4:9B:21:B4:5C:7D:DF:EB:4C:4C:9C:CF:47:88
            X509v3 Authority Key Identifier:
                keyid:20:41:A5:48:21:6F:F0:14:89:4B:79:CC:9F:D7:73:11:BC:7C:A3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IEGlSCFv8BSJS3nMn9dzEbx8oxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912905D/34BF9908AC3D11EDBD4D135EC4F9AE02/IEGlSCFv8BSJS3nMn9dzEbx8oxc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:07:e0:b9:83:7a:fb:ba:9a:5b:ec:b9:ac:32:a4:7f:01:
         15:c4:42:d1:2b:7c:20:20:86:38:d0:62:48:b0:00:8e:dc:63:
         90:47:9c:e5:f4:2c:40:7d:dd:34:7b:ce:75:f1:06:74:4a:6c:
         75:f6:79:ba:84:34:56:d2:a2:6e:c5:eb:88:b3:a3:e9:cb:31:
         5b:3b:53:60:50:33:0c:34:70:30:e6:ac:5c:e0:13:70:af:d2:
         03:a1:69:62:06:71:c7:de:11:1d:55:19:24:8c:98:f3:20:b7:
         13:53:83:59:f6:25:00:bc:2e:58:dc:72:29:5b:13:29:21:c1:
         4d:c8:f4:63:81:1e:c4:2b:42:66:06:1c:05:27:f0:6f:f0:56:
         23:60:af:cc:68:d2:2b:33:30:fa:54:2c:1e:4f:5b:fe:e0:22:
         74:a2:c6:7f:38:dc:cf:0f:9f:62:5a:db:ed:07:22:59:04:7d:
         a1:04:44:ee:b9:29:17:b6:c9:5e:9f:52:60:4f:23:06:c9:96:
         d9:db:a7:65:e6:cb:6d:f1:67:f4:b9:64:8c:b7:14:2e:7a:7f:
         1d:fd:05:86:26:91:7c:3e:18:9d:47:c7:6e:69:aa:62:75:ed:
         d3:ae:e7:40:22:1b:be:5c:9d:5b:2c:07:e8:29:35:97:ce:80:
         42:85:89:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:36 2026 by rpki-client