Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File:                     EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier:          xCWFTdeSm5WdYeBZefpZ6wQ453B53xTX3VlJR/E6AZ0=
Subject key identifier:   38:F6:71:BB:16:76:2F:17:27:9E:BE:24:76:8B:58:83:C0:9B:4F:38
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer:       /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number:          30
Signing time:             Thu 03 Sep 2026 08:53:35 +0000
Manifest this update:     Thu 03 Sep 2026 08:53:35 +0000
Manifest next update:     Thu 10 Sep 2026 08:53:35 +0000
Files and hashes:         1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: RsQKFluF4WPUL1T55hQlSiYlWLtN+wmigm6i91A5sJg=)
                          2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 08:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
        Validity
            Not Before: Sep  3 08:53:35 2026 GMT
            Not After : Sep 10 08:53:35 2026 GMT
        Subject: CN=6a99358f-ba3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b8:35:c7:16:88:0b:1e:3a:c9:48:47:8e:9d:
                    53:97:6d:db:a4:a8:bf:f2:fa:b0:e9:e1:bb:eb:8e:
                    77:38:ac:db:02:b8:a1:c1:4b:ef:9e:b0:97:5a:80:
                    05:2d:86:0a:76:aa:af:50:13:ee:66:83:f5:ae:c6:
                    8f:0e:60:84:af:59:c5:cb:c1:08:06:26:23:d3:d1:
                    04:31:53:7c:c0:1f:83:a9:7e:b4:99:a2:ce:47:5b:
                    b8:9a:bf:ad:73:ed:03:a6:50:0d:e0:ab:25:36:6d:
                    f9:cb:74:22:39:e8:b1:bd:34:c2:c4:6a:3f:57:9c:
                    94:7a:c3:94:9f:f5:46:8d:d5:d8:80:b5:92:c7:91:
                    27:32:fd:f5:e9:3e:65:1d:e1:6f:42:a2:89:12:ed:
                    56:d2:83:83:d4:7c:11:6d:6a:e7:fd:6c:66:f7:9c:
                    cd:dd:af:60:6d:24:05:a4:8c:8f:21:75:3d:89:36:
                    4d:97:c8:82:2f:79:ba:26:de:09:c0:6a:44:f3:d4:
                    87:9c:18:bb:93:f5:39:81:5d:b7:c0:25:04:f5:6b:
                    e5:be:99:78:31:55:8a:c1:67:4e:c1:e3:e6:93:ff:
                    35:84:67:52:ce:de:95:6b:76:75:73:fe:97:92:17:
                    91:df:4d:3a:de:11:71:de:8c:df:83:9b:66:9f:db:
                    87:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:71:BB:16:76:2F:17:27:9E:BE:24:76:8B:58:83:C0:9B:4F:38
            X509v3 Authority Key Identifier:
                keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:db:e0:14:bd:c1:bb:81:14:2b:ab:2e:b8:59:e4:c3:96:
         be:72:05:9f:14:1c:4c:fe:72:24:08:96:59:f8:ef:86:e0:05:
         e7:cd:f9:63:75:ab:ac:b1:5d:7f:4d:27:0e:94:45:63:5d:b6:
         f7:d8:58:5d:64:ad:f8:17:91:d3:76:68:62:44:08:a1:01:6c:
         c0:5d:2e:a8:b8:ac:aa:90:14:ed:46:06:62:79:89:5b:af:8a:
         f9:61:fd:b4:ec:ac:18:12:7b:6e:98:54:f4:69:31:2b:f0:9d:
         b7:67:de:4f:d5:1c:1a:83:66:ab:ce:40:4c:3c:f2:fb:de:a4:
         9a:7e:f3:6c:26:4d:25:9f:f9:3a:16:2b:e4:53:c5:e5:21:43:
         f4:8a:34:82:7e:f4:a5:e5:0f:25:d9:f5:34:07:5d:0d:6c:07:
         34:c6:11:0f:6b:55:b3:43:ec:7e:a7:e4:11:45:f9:dd:71:ab:
         96:32:ab:b4:37:f5:aa:fa:85:39:c8:fe:c8:d4:5a:f6:6a:bd:
         21:fd:e5:e5:0b:f2:7a:14:c3:0e:83:98:df:e4:23:59:7b:24:
         6c:f6:70:a1:4b:49:79:c7:df:2f:31:fe:62:61:bb:50:77:c0:
         92:bb:cd:c1:d0:e7:2a:b5:9b:76:46:5d:85:5d:0b:74:ed:b7:
         a0:75:93:e9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
RkU2NDExMC8GA1UEBRMoMTA4QjcwQzU4NDZGOUQwNzU1QzVDNkRCOThERDI2Njg0
MEUwNUE2NTAeFw0yNjA5MDMwODUzMzVaFw0yNjA5MTAwODUzMzVaMBgxFjAUBgNV
BAMTDTZhOTkzNThmLWJhM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8uDXHFogLHjrJSEeOnVOXbdukqL/y+rDp4bvrjnc4rNsCuKHBS++esJdagAUt
hgp2qq9QE+5mg/Wuxo8OYISvWcXLwQgGJiPT0QQxU3zAH4OpfrSZos5HW7iav61z
7QOmUA3gqyU2bfnLdCI56LG9NMLEaj9XnJR6w5Sf9UaN1diAtZLHkScy/fXpPmUd
4W9CookS7VbSg4PUfBFtauf9bGb3nM3dr2BtJAWkjI8hdT2JNk2XyIIvebom3gnA
akTz1IecGLuT9TmBXbfAJQT1a+W+mXgxVYrBZ07B4+aT/zWEZ1LO3pVrdnVz/peS
F5HfTTreEXHejN+Dm2af24cTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOPZxuxZ2
Lxcnnr4kdotYg8CbTzgwHwYDVR0jBBgwFoAUEItwxYRvnQdVxcbbmN0maEDgWmUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGRTY0LzBDRUFGNjgyNUUz
OTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFkVnhjYmJtTjBtYUVEZ1dt
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRUl0d3hZUnZuUWRWeGNiYm1OMG1hRURnV21VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG
RTY0LzBDRUFGNjgyNUUzOTExRjFCMTA0OTlDRjAwN0FBQzIyL0VJdHd4WVJ2blFk
VnhjYmJtTjBtYUVEZ1dtVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC0ntvgFL3Bu4EUK6suuFnkw5a+cgWfFBxM/nIkCJZZ+O+G4AXnzfljdaussV1/
TScOlEVjXbb32FhdZK34F5HTdmhiRAihAWzAXS6ouKyqkBTtRgZieYlbr4r5Yf20
7KwYEntumFT0aTEr8J23Z95P1Rwag2arzkBMPPL73qSafvNsJk0ln/k6FivkU8Xl
IUP0ijSCfvSl5Q8l2fU0B10NbAc0xhEPa1WzQ+x+p+QRRfndcauWMqu0N/Wq+oU5
yP7I1Fr2ar0h/eXlC/J6FMMOg5jf5CNZeyRs9nChS0l5x98vMf5iYbtQd8CSu83B
0OcqtZt2Rl2FXQt07begdZPp
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:01:19 2026 by rpki-client