Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File:                     eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier:          0DV46G64sC4eCR+HVxV3VMuI9x5xWfHoM3+x2NbRO/k=
Subject key identifier:   B1:E0:9E:80:DF:E2:91:7D:33:B2:CB:C0:58:3E:4C:17:33:43:62:16
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer:       /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial:       0251
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number:          0247
Signing time:             Sat 03 Oct 2026 03:06:25 +0000
Manifest this update:     Sat 03 Oct 2026 03:06:24 +0000
Manifest next update:     Sat 10 Oct 2026 03:06:24 +0000
Files and hashes:         1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: k5cAi7yZVSRDi3l0xzNXt18ZKvKa938BY9e97Ro5Do8=)
                          2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: 6NW9Jnkv/VPSSaYMAlZB50nbZ3QmC4KywMsZ2YAiBbU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
                          rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
        Validity
            Not Before: Oct  3 03:06:24 2026 GMT
            Not After : Oct 10 03:06:24 2026 GMT
        Subject: CN=6ac07130-f3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:88:b7:d6:47:bb:1f:d7:5b:0e:41:7e:8e:
                    3b:63:d3:b6:62:d8:7b:60:a7:d7:1d:d0:c2:32:df:
                    30:4e:6b:c2:10:57:c1:bc:02:ac:8f:d9:1f:43:0f:
                    cb:a8:94:52:b9:32:ba:b2:b1:30:52:12:9a:6c:c8:
                    f9:b6:0a:b9:8d:87:08:fa:64:c0:05:9b:30:8e:6d:
                    45:d7:bb:6b:49:ef:3f:13:7f:e3:db:f3:96:d2:0a:
                    cd:2b:92:5a:b8:16:4e:f9:ed:ef:8b:de:ca:53:3b:
                    d3:a0:74:dc:6e:df:ac:49:22:03:fa:97:42:76:52:
                    cd:ed:a1:44:40:ca:5d:28:c2:37:9a:b4:bf:41:d6:
                    16:b7:71:3b:d4:05:f6:a9:80:42:9d:cd:00:d2:22:
                    31:f6:06:30:9b:26:1a:5f:0c:08:0c:0c:63:c9:42:
                    b1:7f:c4:8b:33:91:81:70:0e:d8:51:bc:66:18:68:
                    39:7a:30:35:3b:52:2c:05:8d:13:c8:a8:42:0b:b4:
                    dd:0b:0a:33:52:1c:dd:53:75:89:24:64:3c:80:46:
                    0f:fb:93:af:f1:39:22:46:84:6a:0c:72:00:15:d6:
                    48:6d:76:1e:15:f7:c7:d3:3f:80:67:ea:2c:72:d4:
                    8b:34:8d:b1:bb:d3:6b:8c:36:28:4f:b8:24:bb:3f:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E0:9E:80:DF:E2:91:7D:33:B2:CB:C0:58:3E:4C:17:33:43:62:16
            X509v3 Authority Key Identifier:
                keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ac:ee:9f:32:26:9b:54:d3:bd:1b:e3:fb:ae:7f:43:82:a9:
         f3:28:fd:f9:9f:05:ec:44:03:53:d3:c5:25:0f:5f:b8:68:fc:
         11:e4:e1:48:2c:39:96:03:08:77:3b:64:57:52:30:c3:24:c9:
         ba:9c:35:e7:3e:6e:c0:bb:cc:6f:c2:30:45:be:c8:26:f7:d2:
         06:5e:60:09:7f:cb:33:20:da:74:d5:ad:70:03:2b:1d:f6:34:
         27:5d:33:01:96:6c:6a:31:be:f1:98:35:fa:94:72:fa:f8:a0:
         66:75:41:47:57:42:40:e6:a5:14:cd:e8:1a:3b:21:51:77:63:
         ea:5b:be:ac:66:94:a6:e7:e9:42:80:46:45:db:d9:bf:cd:28:
         9f:09:58:cd:3f:71:23:a3:11:54:b4:77:6e:a0:a5:36:a1:24:
         9c:34:93:78:d6:52:69:aa:ce:43:13:5b:77:59:de:a5:a7:34:
         55:cf:02:0c:5f:35:c9:7a:a2:fb:b6:1a:9e:31:d5:e4:4f:4a:
         bb:af:88:6e:88:52:65:b6:26:69:aa:13:a3:76:02:0e:9e:87:
         f8:a1:04:b6:68:80:09:77:32:eb:82:b7:ae:8c:d8:db:ef:e4:
         36:a8:88:81:5c:ad:4e:bb:0a:b1:f3:36:07:dd:18:67:92:b2:
         66:28:b3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:39:47 2026 by rpki-client