Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
File:                     EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json)
Hash identifier:          TiH7o4DKAmmjz3q093uDyVWNoAYXYDBfWsEQs1aS24M=
Subject key identifier:   48:64:4C:7F:E0:37:36:E7:51:E8:15:2D:4D:EA:EA:0E:62:8B:7C:04
Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44
Certificate issuer:       /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
Certificate serial:       E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
Manifest number:          E1
Signing time:             Mon 05 Oct 2026 06:58:35 +0000
Manifest this update:     Mon 05 Oct 2026 06:58:34 +0000
Manifest next update:     Mon 12 Oct 2026 06:58:34 +0000
Files and hashes:         1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: +SUZqPnRagmCg5qlHwKtTohC3qqmdPbPoT/KZGHJu2U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 06:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
        Validity
            Not Before: Oct  5 06:58:34 2026 GMT
            Not After : Oct 12 06:58:34 2026 GMT
        Subject: CN=6ac34a9b-8337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:21:f3:60:70:8a:d2:e0:f6:de:46:96:59:86:
                    98:fc:65:f9:5f:fc:18:41:2d:19:b3:4f:0b:77:8d:
                    db:ac:8f:48:ac:52:88:55:1f:9c:a1:a3:1a:cd:39:
                    aa:71:08:5c:19:82:c1:be:7e:9b:f9:84:19:50:a3:
                    4d:bc:14:2c:71:38:25:e6:88:52:e5:37:e8:11:a2:
                    fe:d7:60:5f:fc:ae:33:3a:a8:56:29:fd:45:ca:0b:
                    bb:bb:3f:24:d0:db:61:fa:b5:2d:44:a4:cb:6f:68:
                    69:a4:fb:b5:be:6a:89:c0:c9:fb:4c:a8:df:26:d4:
                    67:7b:8e:21:23:49:93:2b:68:2b:bc:62:2c:1e:96:
                    ca:d9:a8:90:37:a9:94:5e:f0:e8:a4:41:54:6e:41:
                    4d:ef:e1:c8:36:79:3c:7f:c1:ee:c5:b8:0d:2a:f5:
                    75:10:27:2c:db:45:ed:0f:05:bb:d6:2f:89:af:61:
                    df:db:5d:9a:98:3c:b0:35:f3:34:c1:44:08:5e:6f:
                    0e:5f:b9:38:c5:b3:ef:25:fc:8b:2a:5c:6d:b0:59:
                    b0:18:c1:00:5d:72:2e:62:81:4d:fc:bd:83:86:44:
                    a0:fd:c7:c7:78:35:81:b6:b0:c0:59:c2:a9:9c:1a:
                    90:44:9a:82:9e:29:4a:fe:16:9a:34:6a:76:15:9f:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:4C:7F:E0:37:36:E7:51:E8:15:2D:4D:EA:EA:0E:62:8B:7C:04
            X509v3 Authority Key Identifier:
                keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3c:ca:e6:a2:36:51:57:94:0f:d4:94:b6:19:4a:cc:03:c2:
         08:89:90:42:ac:43:db:03:91:20:a7:f6:50:fc:ca:6a:11:7e:
         52:02:63:88:ad:25:c2:32:ba:c9:38:1d:2e:e6:72:72:7e:f9:
         42:6a:bd:67:0c:06:43:8c:81:f2:4e:03:80:8e:b6:93:d5:35:
         bd:9c:21:1d:cb:d3:9f:26:43:5c:e7:32:d0:f8:e6:97:9d:ca:
         91:39:bb:a2:e1:5f:a9:53:8c:26:26:84:36:c2:30:57:21:84:
         0b:e6:97:7c:4b:3d:cf:33:50:d8:85:ea:8e:0b:03:c6:c4:6d:
         c9:5a:6b:86:d4:73:49:dc:a3:56:6a:cd:ef:65:01:6d:2c:71:
         ce:58:ae:31:92:c7:54:6b:2a:b7:18:04:e8:fc:43:a2:a8:75:
         0e:e6:1b:8c:70:32:73:41:f8:95:67:4f:55:03:bc:84:29:41:
         50:72:df:54:32:f0:4b:9c:b9:4a:ab:a0:61:18:cd:f4:47:a7:
         1f:fa:1a:15:c9:c5:1a:47:c1:7d:47:ab:7b:d2:6b:6e:5b:dc:
         f4:b6:57:b9:82:07:94:19:e2:8a:2c:3f:5e:81:8e:1d:ca:2b:
         2e:07:b9:70:ac:33:5d:bb:0c:48:4b:ef:3a:a4:bb:11:8f:6b:
         cc:32:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:00:50 2026 by rpki-client