Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File:                     ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier:          yXb+06EbLGNPGrcLp+F0a6kJLYs7vVMZAi2L87voVhk=
Subject key identifier:   D5:EC:BE:9C:2E:B8:70:F1:BD:5C:9D:55:7E:76:E2:54:D2:C4:DD:1E
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer:       /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial:       0365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number:          035F
Signing time:             Wed 07 Oct 2026 01:02:11 +0000
Manifest this update:     Wed 07 Oct 2026 01:02:11 +0000
Manifest next update:     Wed 14 Oct 2026 01:02:11 +0000
Files and hashes:         1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: N9sexXUXCsXkOMevR0OxR4x/tutqz8NQfBgYH2dKaxU=)
                          2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: kTT7eEgt9uaGhMCIrcNR40b0329psOBKWZcG/FsxbWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
                          rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 01:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869 (0x365)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
        Validity
            Not Before: Oct  7 01:02:11 2026 GMT
            Not After : Oct 14 01:02:11 2026 GMT
        Subject: CN=6ac59a13-569c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:d9:c3:ad:bc:d9:2d:99:7c:ab:35:86:85:
                    21:e0:0e:de:9e:3b:c6:e0:b8:02:2e:38:26:1d:f8:
                    17:6d:81:29:ba:f8:a4:43:63:1e:7d:d2:62:33:5e:
                    0c:18:9f:11:8a:95:c5:14:86:a2:69:fb:89:d5:2a:
                    a5:e0:07:56:1b:55:9d:26:4a:d8:c8:cc:25:f6:df:
                    4d:63:38:f6:9d:4a:ad:8a:d4:de:84:b7:70:8e:5c:
                    bd:63:f6:95:9d:71:c6:5d:ae:6b:e4:17:ac:56:92:
                    38:ab:5c:bf:e1:91:e5:00:cd:2a:12:e5:90:30:06:
                    98:29:15:2c:7a:81:d5:97:2b:38:ec:ef:e8:ce:5e:
                    47:29:69:05:88:33:62:48:57:6b:ad:ec:d0:db:17:
                    5a:74:94:74:77:fc:2b:d7:c0:00:23:e2:cc:4c:57:
                    90:85:4d:11:87:21:8b:f9:60:14:ed:ba:15:75:78:
                    bc:b3:1e:89:67:2c:49:45:46:48:0e:b4:b8:2f:54:
                    c8:cb:ce:4b:ca:7d:c2:51:b0:f2:e2:10:d8:80:ba:
                    a9:df:ea:72:2c:b3:e5:7a:9d:e6:58:d5:84:e0:b9:
                    01:26:d4:d1:32:42:d8:bb:77:95:91:96:ff:7a:83:
                    11:8d:8e:1b:17:27:ef:71:39:fc:fa:81:f6:36:81:
                    23:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EC:BE:9C:2E:B8:70:F1:BD:5C:9D:55:7E:76:E2:54:D2:C4:DD:1E
            X509v3 Authority Key Identifier:
                keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:90:1b:b7:3d:c8:81:b3:86:22:1a:de:fe:24:1b:01:15:c8:
         ff:a8:1c:cd:0c:d0:83:dc:6d:bb:74:00:6f:27:2b:f9:fc:b0:
         59:2b:5b:e0:05:35:61:e8:c6:3e:63:17:14:2e:b6:f7:19:5a:
         2b:fe:48:6f:84:7d:95:e9:b9:1f:3b:2a:e5:c2:02:7c:4e:7c:
         42:1b:50:2f:17:ed:de:e0:82:68:32:d1:40:fa:d9:80:0c:19:
         ff:e9:96:9b:e3:70:28:27:f0:79:60:da:6d:4e:96:ff:ea:97:
         a6:2b:3d:6d:9b:16:75:c7:f1:60:aa:b1:b9:1b:21:74:73:fb:
         2f:a3:80:a3:11:f5:26:84:74:a7:85:17:92:1e:d4:51:7e:66:
         17:8e:b1:79:ce:d1:ca:34:d1:8a:a9:b4:c8:44:38:f8:63:5e:
         89:84:27:9f:13:92:f0:66:dc:65:d8:9b:d3:9f:f8:a6:a3:28:
         48:e7:a9:5c:26:47:ea:d9:00:6a:8b:a3:3c:67:53:4e:d7:0a:
         a5:5b:3c:70:51:0e:71:51:15:a5:ec:39:e3:f1:6d:50:cd:ea:
         69:1e:2b:9c:b3:eb:12:43:cf:47:34:b5:35:56:bf:95:de:58:
         b3:83:8a:f6:7d:02:ed:aa:98:38:ab:7f:31:f8:71:d8:06:d7:
         b1:65:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:59 2026 by rpki-client