Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File:                     EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier:          nQ3XsOgYVQ14d8loPaIVq4mxAG2w+0ES0HDC5rgImXc=
Subject key identifier:   F6:BB:B2:5D:31:8D:C7:71:31:3A:39:51:B2:09:A7:24:FA:49:82:4E
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer:       /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number:          0187
Signing time:             Fri 11 Sep 2026 05:00:01 +0000
Manifest this update:     Fri 11 Sep 2026 05:00:01 +0000
Manifest next update:     Fri 18 Sep 2026 05:00:01 +0000
Files and hashes:         1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: 9Cokkz0j+pYYQ5rleyrsfAXIafYzE7m7uLKCGcX8eII=)
                          2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: 9p5HLgmT1CdIHAjr4jafHOekxC05g0RlL/udgHGc7xY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
        Validity
            Not Before: Sep 11 05:00:01 2026 GMT
            Not After : Sep 18 05:00:01 2026 GMT
        Subject: CN=6aa38ad1-ddab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:75:24:3d:2b:ca:6d:43:f0:ca:2f:32:c9:
                    31:45:4c:7e:d3:00:2a:98:d8:04:d5:f5:05:1f:2c:
                    51:5a:5d:6d:a9:f5:91:d1:40:d6:cd:75:88:b6:55:
                    60:80:58:ba:0a:d0:fe:6a:80:a2:ce:5c:1d:a8:5b:
                    65:20:74:e1:e1:2e:12:90:2f:f2:1d:68:71:01:75:
                    a7:48:d9:6a:c1:ab:b6:97:e9:fc:3c:a3:d3:a9:2a:
                    11:ff:0a:da:7d:71:a9:56:40:50:39:18:be:30:d4:
                    c0:0d:61:57:30:e5:ad:38:39:36:0b:98:5e:4c:0f:
                    08:17:d9:dc:1e:2e:40:7f:37:12:53:df:bd:fd:23:
                    4f:ea:6a:22:6e:54:b1:4c:1f:50:42:8a:b7:68:ba:
                    8d:81:81:49:0f:3e:ce:f4:be:fb:d3:98:0a:21:01:
                    a0:86:30:f2:ab:ae:b4:4e:21:48:e2:69:f3:8a:2e:
                    e2:f1:7f:d4:54:9a:ba:12:3b:af:c9:3f:c8:66:9a:
                    72:09:24:6a:4d:b5:ca:0c:4e:f2:52:b2:48:64:bd:
                    51:f5:c0:58:0b:57:a3:6d:5c:19:e5:16:70:67:9e:
                    d6:68:1a:44:44:68:c8:bc:12:9f:10:c8:63:00:7b:
                    9e:de:f4:c6:83:84:10:60:bf:4c:9c:73:b0:4b:a9:
                    c0:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BB:B2:5D:31:8D:C7:71:31:3A:39:51:B2:09:A7:24:FA:49:82:4E
            X509v3 Authority Key Identifier:
                keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:73:96:24:a9:61:8f:7c:b1:9b:fc:bf:cb:21:8c:ff:2f:
         99:e1:a6:11:fe:dc:02:11:c9:45:05:db:c3:45:57:68:2b:b7:
         e0:ec:ef:ea:17:93:f6:c4:be:48:4f:df:bb:b8:ef:dc:10:72:
         9a:84:31:19:48:12:f1:db:14:bc:f1:ad:d6:92:74:e7:26:f9:
         1c:a5:0f:c0:01:da:97:7c:41:fd:06:53:0a:b3:d4:15:89:6b:
         37:b8:a7:96:f9:31:6c:b2:92:b6:27:93:d7:b5:80:64:d1:af:
         bc:5e:21:66:4c:e0:17:16:da:55:7f:fe:a9:b2:a0:df:b7:85:
         2b:eb:31:2b:ff:1c:16:ef:a8:6e:7b:2d:69:f3:a7:89:cc:03:
         78:b4:2c:44:e2:1d:7c:c0:d2:ac:07:0e:5f:66:06:82:d7:22:
         a8:21:88:22:55:df:ee:42:56:4e:1e:77:2a:03:21:3c:80:fc:
         b4:0e:57:2e:7f:45:e8:09:36:78:b1:5b:08:8e:53:6f:54:ac:
         bf:e4:e4:7a:6e:70:01:77:87:7c:36:12:7c:48:a2:4a:71:75:
         ed:b1:d6:b8:a6:4e:9d:4b:60:12:5c:68:e9:af:ad:cc:ee:64:
         3f:1f:8a:3b:d6:2d:5a:56:a5:4d:9a:c9:c8:86:cb:e9:2e:3e:
         be:3e:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:07:41 2026 by rpki-client