Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
File:                     E0_EgN8WeugPs_TETe9qm6mZWpE.mft (raw, json)
Hash identifier:          AN6oZ0nik4Iz6WDy/4kf9gAdBYmWhAmAAJaE3owiiUQ=
Subject key identifier:   23:60:BE:C2:39:30:28:D3:41:FB:1D:30:AE:D0:1D:03:53:64:0E:FE
Authority key identifier: 13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91
Certificate issuer:       /CN=A91736F5/serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
Manifest number:          A3
Signing time:             Tue 27 Oct 2026 07:40:20 +0000
Manifest this update:     Tue 27 Oct 2026 07:40:20 +0000
Manifest next update:     Tue 03 Nov 2026 07:40:20 +0000
Files and hashes:         1: E0_EgN8WeugPs_TETe9qm6mZWpE.crl (hash: 5PjKPiSshf+UgOESLzs9jszjY4dCOHQ2+p09HNShj/M=)
                          2: 17CFC78AFBA611F084AB06C85C6F56BC.roa (hash: EFiAI8HriNBWNG3CIQNK3bGdXLBEF+nSIaNzRbQQUMk=)
                          3: 378C2C42561111F1AB5F48A6BE833773.roa (hash: WN8uGZEuk7h+8OFa+x+lBRN+oylNBbQqtfAltmIrj+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl
                          rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 07:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91736F5, serialNumber=134FC480DF167AE80FB3F4C44DEF6A9BA9995A91
        Validity
            Not Before: Oct 27 07:40:20 2026 GMT
            Not After : Nov  3 07:40:20 2026 GMT
        Subject: CN=6ae05564-51a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:f4:bd:df:c9:96:99:fc:49:be:22:d4:28:
                    b4:3b:eb:be:ef:ac:5d:8f:01:ef:20:a8:2e:c2:5b:
                    b5:95:27:36:e5:37:df:4c:c7:8d:92:51:6c:a3:a3:
                    fe:ef:3e:41:bc:c3:4c:ed:53:36:bd:c7:a4:1e:6a:
                    6a:b5:b5:76:cb:f8:20:94:1f:9c:3e:55:ec:c4:fe:
                    92:c7:17:29:bc:4a:31:0e:e8:5c:bd:4b:cf:52:0b:
                    b4:47:8b:39:bf:72:fd:d3:48:c9:23:fe:f1:7c:4b:
                    da:15:26:c5:4a:d5:23:06:51:67:74:6d:00:15:83:
                    27:8b:f4:24:0e:34:16:42:5d:54:1d:3d:f2:fe:3b:
                    d6:10:d4:c2:6a:34:29:2c:08:2e:bd:29:0a:69:44:
                    e1:a8:f1:94:9f:ab:8b:6f:30:9c:e8:a7:a7:96:b2:
                    73:05:82:3e:99:6f:9a:54:5e:c5:33:a1:58:ab:37:
                    cd:0d:91:e1:e4:91:dd:f8:39:b0:aa:f5:17:79:77:
                    7f:b3:5a:a4:0c:23:5a:bb:12:da:88:4c:3a:10:99:
                    8b:b3:65:e2:6d:03:63:30:ae:80:0e:3a:cb:bf:33:
                    4c:42:de:95:6a:6d:6a:01:0e:57:fe:cf:8b:b1:7e:
                    ec:b2:4b:65:34:30:0c:c4:f1:aa:87:1a:43:91:5f:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:60:BE:C2:39:30:28:D3:41:FB:1D:30:AE:D0:1D:03:53:64:0E:FE
            X509v3 Authority Key Identifier:
                keyid:13:4F:C4:80:DF:16:7A:E8:0F:B3:F4:C4:4D:EF:6A:9B:A9:99:5A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E0_EgN8WeugPs_TETe9qm6mZWpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91736F5/20DDE392E6EE11F0AD095792636F56BC/E0_EgN8WeugPs_TETe9qm6mZWpE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:1d:53:bd:89:35:d0:de:77:92:f0:b6:95:7b:ef:30:9a:
         87:14:cd:54:29:c4:f7:2f:3f:37:06:16:fe:f1:c0:01:eb:b8:
         71:c6:44:19:6f:37:c2:07:16:a3:b6:dd:9e:35:2e:8a:27:44:
         dc:17:4b:49:46:10:0c:2b:42:92:d5:7e:5a:8c:66:1e:ea:da:
         24:d4:ee:b9:bb:5d:63:ec:21:9b:02:b1:12:5c:21:76:29:40:
         9c:2c:ba:81:1f:b5:13:60:f9:c2:cc:7a:7f:bb:5b:36:6b:52:
         34:b1:b9:69:74:ae:99:fe:16:58:17:ae:48:45:ee:b6:9e:ff:
         20:85:ed:11:e5:99:fa:99:16:bb:c2:c3:73:6e:9b:84:a4:9e:
         fe:f9:7d:94:99:c5:35:a9:9e:e4:04:a1:46:16:43:80:a1:f3:
         08:91:8e:54:5e:43:e2:fb:41:05:43:7b:78:39:93:7a:6f:67:
         5e:27:10:bc:6a:6a:d2:7b:41:87:bf:cb:6b:0c:33:24:63:21:
         17:50:bf:22:e0:1d:b2:f4:23:1e:eb:b0:5a:eb:e0:6e:fe:02:
         95:7b:7f:09:f5:13:d8:61:a2:2a:f9:c2:b9:1d:4d:00:20:d0:
         b7:11:fe:d8:78:86:cb:bc:a6:73:73:ac:ee:40:ec:c1:01:1f:
         44:ee:35:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:18 2026 by rpki-client