Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
File:                     EyzK6sEE4qNEW2M3YQVNyNcQehM.mft (raw, json)
Hash identifier:          2fMewVqhN/Hn3T0NThVsstu4zgvGGrM7htmkCQn40+c=
Subject key identifier:   43:7E:60:71:16:31:93:CE:B3:F9:F9:B2:7A:D9:2C:56:4A:09:FC:55
Authority key identifier: 13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13
Certificate issuer:       /CN=A91670F6/serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
Certificate serial:       05DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
Manifest number:          05D7
Signing time:             Fri 02 Oct 2026 23:18:45 +0000
Manifest this update:     Fri 02 Oct 2026 23:18:45 +0000
Manifest next update:     Fri 09 Oct 2026 23:18:45 +0000
Files and hashes:         1: EyzK6sEE4qNEW2M3YQVNyNcQehM.crl (hash: RWl4C2ShMbTgmD9H435aYgPVICsyuQxaKrGiT5u76qM=)
                          2: 29935FC21CF311ECA077821AC4F9AE02.roa (hash: Zuyj9zAGIINdxlHDSWvSI2XPToLQDCxQYFNlcnC7prI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl
                          rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 23:18:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91670F6, serialNumber=132CCAEAC104E2A3445B633761054DC8D7107A13
        Validity
            Not Before: Oct  2 23:18:45 2026 GMT
            Not After : Oct  9 23:18:45 2026 GMT
        Subject: CN=6ac03bd5-edb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:5f:eb:15:4e:4d:64:2d:9f:15:21:28:5d:
                    0f:5c:56:8d:26:93:60:1a:55:99:e2:57:ab:29:2c:
                    d6:5a:34:56:1b:84:c4:f0:fd:6d:3e:d4:d9:de:37:
                    0e:67:97:ae:d9:9c:81:af:96:a8:fe:72:a1:aa:17:
                    73:9b:0e:fa:19:71:00:dd:7a:34:c3:ae:43:f9:09:
                    19:cd:08:b6:03:c3:07:ee:41:ee:76:8a:94:29:83:
                    12:d9:a2:f6:9f:23:03:d4:84:8a:24:5e:6d:47:0a:
                    a3:8e:44:5a:2d:e5:ab:c4:8f:bb:05:a6:59:44:98:
                    e6:e9:88:2d:57:12:8a:bc:23:57:fa:0e:46:22:3d:
                    90:e5:0e:71:05:fe:6e:f0:54:5b:88:1d:88:b2:df:
                    72:2a:32:97:25:74:51:b6:bb:3a:bc:3f:e0:10:cf:
                    e5:92:55:44:25:00:df:30:ea:60:ff:15:2e:ac:46:
                    8b:36:13:a2:96:53:30:26:9d:05:53:a2:2f:72:ce:
                    c1:54:b9:58:eb:24:74:54:73:62:a8:83:e8:84:b5:
                    df:dd:1c:1f:89:f7:95:7b:28:81:af:ff:6a:69:49:
                    96:0b:bd:59:cb:65:8c:57:73:bc:b8:62:0b:29:e8:
                    5e:7a:c4:58:89:9e:99:da:c3:f2:cc:cd:75:31:10:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7E:60:71:16:31:93:CE:B3:F9:F9:B2:7A:D9:2C:56:4A:09:FC:55
            X509v3 Authority Key Identifier:
                keyid:13:2C:CA:EA:C1:04:E2:A3:44:5B:63:37:61:05:4D:C8:D7:10:7A:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyzK6sEE4qNEW2M3YQVNyNcQehM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91670F6/185DAFD61CEF11EC9EDD8011C4F9AE02/EyzK6sEE4qNEW2M3YQVNyNcQehM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:79:fa:cd:15:5a:b8:d1:65:cf:75:44:3c:75:ef:92:b2:c7:
         82:4e:09:1c:e2:4a:4b:27:02:49:31:df:9d:e7:b7:03:2f:65:
         60:0e:77:7d:98:eb:25:14:5c:bd:9e:75:12:8b:ae:ee:d3:4e:
         52:5b:ba:f9:44:c4:0a:0d:29:df:99:cb:6b:0b:46:7f:1c:4d:
         21:53:e9:26:73:03:ba:b1:ed:09:ae:00:ce:2a:68:3e:11:29:
         cf:b5:bc:32:f6:b2:94:69:b7:4d:9c:26:d3:fa:e2:37:2e:ae:
         cc:86:3d:74:31:59:b4:62:c2:d6:cf:c1:5b:5f:7f:b7:fa:6f:
         51:64:b4:83:45:40:e2:0d:7c:ff:10:eb:63:55:22:92:bd:a2:
         0e:79:4c:90:82:40:14:ca:34:a6:98:08:e8:89:cc:b4:fc:0a:
         62:da:e2:d1:c1:1a:0e:2d:4f:fc:5c:1f:f9:a2:a6:cf:78:fb:
         a1:91:99:da:20:15:76:e2:38:98:dd:cf:80:02:ca:91:16:4d:
         70:d9:41:bf:b4:7d:59:b8:d8:79:8b:7b:f9:05:91:e9:f2:f1:
         b3:c6:ef:6d:a1:17:e3:be:96:22:b6:34:b8:fb:dc:b5:b5:e9:
         5f:27:a8:16:a0:61:f6:d7:8f:44:27:d0:f4:e3:89:f1:68:0d:
         36:54:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:18:04 2026 by rpki-client