Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
File:                     _Er4bnAJnaC6rC7dx30b70x1qJU.mft (raw, json)
Hash identifier:          cJkItEO17xi+7A3cW+57OPkQbSdfSCINowxEECh7IF0=
Subject key identifier:   1B:A0:CE:1C:04:62:72:AB:73:5F:AF:AB:79:2D:43:A0:6C:FA:B3:78
Authority key identifier: FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95
Certificate issuer:       /CN=A917D31E/serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
Manifest number:          B1
Signing time:             Sat 03 Oct 2026 07:45:55 +0000
Manifest this update:     Sat 03 Oct 2026 07:45:55 +0000
Manifest next update:     Sat 10 Oct 2026 07:45:55 +0000
Files and hashes:         1: _Er4bnAJnaC6rC7dx30b70x1qJU.crl (hash: D4m1PpumaB4lswUobXpFVuy5izfHPUEgZ8ekBO+iP7Y=)
                          2: 3505DC88B6E411F090AAA224C4F9AE02.roa (hash: 0eYQs4+CcW1n3DAWa3b99gSSE/qKrGxFztudMbxy8B8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl
                          rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 07:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D31E, serialNumber=FC4AF86E70099DA0BAAC2EDDC77D1BEF4C75A895
        Validity
            Not Before: Oct  3 07:45:55 2026 GMT
            Not After : Oct 10 07:45:55 2026 GMT
        Subject: CN=6ac0b2b3-966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:67:ee:be:d1:e1:cc:c9:6d:11:da:75:12:
                    3c:98:c8:73:37:30:8d:3a:d3:80:4c:79:28:07:31:
                    d2:52:c4:25:e9:f1:41:95:a2:de:81:39:bb:d6:50:
                    a3:6e:19:6a:6e:23:5b:71:3d:b6:f5:e4:0c:46:0e:
                    62:0f:7a:b7:79:72:9c:5d:ca:50:39:b4:4b:ac:32:
                    d3:4e:0c:8a:34:95:a7:09:84:b1:98:89:af:4e:ee:
                    69:4f:68:f9:a3:3c:0e:68:7e:50:99:9f:32:b8:14:
                    a9:f1:c0:0a:53:62:a2:91:be:ab:02:c1:dd:17:9f:
                    38:e4:c6:79:41:90:fb:36:68:97:80:dd:af:73:90:
                    5a:a2:d9:57:83:5e:a3:2c:81:4e:c9:d1:4b:b5:be:
                    7d:78:90:e7:9c:80:47:6d:ab:6b:b6:51:57:2c:9b:
                    19:67:bf:3b:f5:32:a4:79:50:99:8c:60:ea:0b:7c:
                    a4:88:b4:c1:c6:a7:43:ba:3c:cc:27:f6:cd:78:85:
                    88:08:b5:64:f0:e5:39:5a:7b:71:08:66:77:ef:2f:
                    5d:7a:4f:eb:93:11:fa:f2:14:46:1c:a5:c9:cf:a3:
                    b8:21:16:fe:07:0d:3d:8d:a5:da:17:ea:a7:7a:62:
                    4b:01:31:d3:93:01:d2:a4:2a:87:74:fe:00:49:f1:
                    79:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A0:CE:1C:04:62:72:AB:73:5F:AF:AB:79:2D:43:A0:6C:FA:B3:78
            X509v3 Authority Key Identifier:
                keyid:FC:4A:F8:6E:70:09:9D:A0:BA:AC:2E:DD:C7:7D:1B:EF:4C:75:A8:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Er4bnAJnaC6rC7dx30b70x1qJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/537845A0B4BB11F0A1353722C4F9AE02/_Er4bnAJnaC6rC7dx30b70x1qJU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:ac:0d:70:6f:e5:f4:fd:f8:79:15:e0:be:85:98:da:4f:
         e2:2b:82:16:45:8d:d8:4d:50:2c:6d:50:0b:da:47:df:5c:58:
         fe:34:bc:10:bd:02:c7:16:6f:7a:5c:b7:c8:cb:4e:85:c9:96:
         e4:d9:7e:41:95:f7:c6:ac:43:48:e5:ae:b4:b2:7c:0b:30:72:
         d9:df:a7:9e:9c:9e:09:fe:cb:13:a1:c1:a5:6e:9b:4d:02:5d:
         8f:a0:8b:ec:78:fd:51:d3:64:ff:f4:7f:2e:fe:5c:64:1a:f8:
         79:bb:b6:36:3b:ed:7a:35:b4:80:76:17:30:f4:18:a7:ef:04:
         ca:97:8a:c9:07:db:da:bc:a0:d4:5d:ac:02:94:f3:64:a5:d5:
         88:99:ae:b8:e3:e5:86:f3:bb:29:0f:c4:29:3c:40:6a:58:c6:
         0e:58:b2:50:a8:34:47:f3:41:02:c3:46:0f:6a:40:61:21:04:
         99:1a:ae:4b:b0:32:fa:d7:9c:07:8a:af:f9:b5:5d:3e:f6:24:
         d1:73:09:cf:b9:b3:5d:33:68:57:58:6b:8f:49:e5:10:16:bb:
         2d:fd:3b:41:35:82:11:de:bd:6a:c4:d4:6a:3f:51:de:23:11:
         1f:b5:cc:6d:38:8d:f4:39:1e:f5:1d:28:a1:8d:a7:3d:45:e7:
         9f:d7:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:04:09 2026 by rpki-client