Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File:                     EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier:          x6Aa6wFql7MZIOq0z5l96cFgc3r0sxTHBnNTAdEPDmc=
Subject key identifier:   29:EC:D3:00:5B:42:F7:C5:35:97:F7:08:92:A1:1A:CC:96:19:5F:9F
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       01FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number:          083C
Signing time:             Thu 10 Sep 2026 22:34:21 +0000
Manifest this update:     Thu 10 Sep 2026 22:34:20 +0000
Manifest next update:     Thu 17 Sep 2026 22:34:20 +0000
Files and hashes:         1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: nZxWiKT44lvq7DXP7aKALxpjnncLU8gvvcIsjsctmJQ=)
                          2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: 5GjTNJmRyuym9Vk2w+VFTLpCECbH6Iwjcf4wp0xQSoo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Sep 10 22:34:20 2026 GMT
            Not After : Sep 17 22:34:20 2026 GMT
        Subject: CN=6aa3306c-3240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:e1:c1:f2:5c:e6:95:84:01:6f:a9:12:54:
                    62:60:b2:f2:ea:6f:06:11:49:97:c0:ba:89:7f:f7:
                    3a:55:4a:8f:d0:07:03:6c:02:a4:f9:74:51:3e:d4:
                    5b:62:8e:95:45:e6:57:fe:04:e7:ca:d1:43:8a:b4:
                    17:f7:c7:df:6f:22:7a:7c:bf:4f:10:a8:94:84:74:
                    10:0a:21:2f:45:c1:8f:0f:be:ce:30:bb:91:d2:1d:
                    91:8b:b6:af:09:35:ad:5c:c8:36:47:75:de:a9:03:
                    3a:f0:c3:84:3c:b0:b3:a3:12:c2:f1:cd:2c:68:55:
                    df:25:33:fa:b5:b3:13:e2:a2:e6:4b:ed:26:d6:c8:
                    e3:67:f4:45:2d:49:c9:16:4a:5f:bd:1c:b5:ed:00:
                    3a:50:13:28:e0:7c:a7:6b:4a:fb:54:ad:1e:5c:31:
                    61:36:48:15:a6:59:07:c8:cf:25:43:fd:e8:8b:91:
                    3e:35:f2:3c:68:c5:b9:e0:92:80:b2:cf:af:a9:49:
                    7a:80:9c:4f:52:5b:6b:c1:cf:e2:dd:ab:39:2a:01:
                    5e:a6:08:7e:2e:16:9c:66:a7:9f:37:3d:58:f7:02:
                    d0:71:ce:92:f4:5f:a0:07:fc:0d:c8:b6:de:ee:64:
                    c4:34:a0:52:b2:cd:4b:65:68:13:68:ba:15:b9:3f:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EC:D3:00:5B:42:F7:C5:35:97:F7:08:92:A1:1A:CC:96:19:5F:9F
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:4d:0c:4c:f6:fc:1b:36:24:42:84:d5:75:1e:d0:c8:c5:
         fd:76:54:70:e6:6d:4a:2c:61:21:6b:23:cd:b3:35:9a:dc:2c:
         2a:83:cb:54:f6:c7:f1:1b:f8:67:ef:6e:32:a0:83:45:ac:49:
         cc:39:51:ca:aa:84:b7:11:c7:17:e7:20:c4:13:e1:e0:d1:af:
         02:c7:a0:a8:8c:b5:e9:a9:dc:98:55:14:c9:c7:1e:52:7a:1f:
         63:36:4c:e0:69:57:6f:c7:7f:8b:15:29:45:90:7d:ab:4f:fd:
         ea:c1:2b:6c:47:51:0f:87:31:fa:e4:0b:91:72:b2:f3:7d:bc:
         cd:fa:2b:9d:bb:3d:27:2d:0c:f8:af:44:05:2a:30:06:20:5e:
         a4:fd:82:de:f0:a7:88:17:23:69:c7:20:b4:7f:3a:45:f8:39:
         94:53:18:e4:b8:8e:10:41:99:1c:54:37:76:1a:6b:64:a3:a2:
         e7:ad:77:bc:b1:f2:d7:ff:fb:89:90:ac:0b:1a:13:39:5b:1b:
         04:0f:34:ef:ee:2b:3b:25:00:af:70:a2:fa:3d:21:24:8d:4d:
         19:4b:2f:b9:ce:35:20:f1:7d:57:44:73:21:2a:d9:78:2c:aa:
         5b:e5:95:f4:f5:cb:28:81:bd:38:43:26:1d:49:48:8d:ee:ed:
         af:59:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:27:10 2026 by rpki-client