Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
File:                     cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft (raw, json)
Hash identifier:          Wrok/8CDgaC7e0sJIfSZsFJqBIukUebnm7eRCsiPn1E=
Subject key identifier:   24:9C:08:5F:F8:0A:3A:0D:DF:11:78:6F:24:8E:E8:2B:5B:91:B0:80
Authority key identifier: 70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82
Certificate issuer:       /CN=A91B1DCF/serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
Certificate serial:       05AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
Manifest number:          059E
Signing time:             Fri 04 Sep 2026 22:58:34 +0000
Manifest this update:     Fri 04 Sep 2026 22:58:34 +0000
Manifest next update:     Fri 11 Sep 2026 22:58:34 +0000
Files and hashes:         1: cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl (hash: qRY3LNYo8eR4Z2VePx512lSX+aH0lFiUFAyDis4ltzM=)
                          2: 3F3532743C8311ECA86D031EC4F9AE02.roa (hash: baibuYWIpr+G/3yWYzUEd75gq0D9onuWC061QPJtxB0=)
                          3: 40565FA23C8311ECA86D031EC4F9AE02.roa (hash: AcOK+or8IBRyx2MYpgbbtYCs/ZUAEOaOnVDcLAu/Hbk=)
                          4: 2894A350705F11F1A7A1ED8F70A30FBC.roa (hash: f5hXdnbfoOJMTROR6C6aBv/K1AhGm1KG2D4JAjNeBYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl
                          rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 22:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1DCF, serialNumber=704BFF4ECAA9DC8A8B7209264C607DB5F22F2482
        Validity
            Not Before: Sep  4 22:58:34 2026 GMT
            Not After : Sep 11 22:58:34 2026 GMT
        Subject: CN=6a9b4d1a-deac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:59:ad:fd:41:62:65:e3:0e:ab:7f:ad:1e:e9:
                    f2:22:ed:07:04:32:73:f7:a3:f2:31:ca:b7:df:29:
                    41:44:b6:1c:cd:8a:0f:77:02:74:86:85:f7:7f:f7:
                    c6:72:60:5c:f1:25:61:80:9c:27:97:6a:84:ac:ee:
                    2b:07:33:0e:1a:94:e4:e8:56:0d:16:f0:aa:82:e7:
                    76:eb:4f:06:dc:8e:cc:c6:17:36:88:56:7c:dc:b9:
                    d4:64:13:6e:6b:e6:21:84:03:1c:91:98:59:2b:7b:
                    8b:c0:cb:31:62:11:78:56:c6:6a:63:5d:b5:5e:14:
                    f1:ff:a4:34:07:a8:be:18:13:52:f4:b8:bc:c3:76:
                    ae:29:e9:f7:7f:3e:0d:c2:82:26:94:2d:d2:6f:cd:
                    57:cc:d8:2f:63:ab:44:26:cb:5c:84:5c:40:37:97:
                    73:9f:06:f8:02:ae:d7:13:95:39:bb:86:e9:ae:e7:
                    9e:d6:25:37:1c:a2:d5:ae:2c:39:a8:0d:14:0f:ba:
                    bb:86:d7:0e:f4:a5:ad:8c:23:d2:1d:38:37:ee:8f:
                    d3:01:59:cc:19:8e:f8:dd:7a:54:2b:c8:37:87:09:
                    68:20:99:70:f7:f3:30:e8:dc:10:05:1b:6f:87:75:
                    4a:ac:cf:7f:28:47:66:25:a0:84:25:da:a0:e0:7a:
                    75:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:08:5F:F8:0A:3A:0D:DF:11:78:6F:24:8E:E8:2B:5B:91:B0:80
            X509v3 Authority Key Identifier:
                keyid:70:4B:FF:4E:CA:A9:DC:8A:8B:72:09:26:4C:60:7D:B5:F2:2F:24:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEv_Tsqp3IqLcgkmTGB9tfIvJII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1DCF/36978A7C30BC11ECA303EF86C4F9AE02/cEv_Tsqp3IqLcgkmTGB9tfIvJII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:92:7a:9e:87:45:18:8b:65:4e:eb:41:36:9f:8b:f8:5d:ad:
         7f:12:4e:c3:5e:36:d5:cc:b0:11:38:57:06:33:6b:4a:7b:fa:
         98:51:b6:5c:04:5b:24:f3:b4:d9:8a:55:2c:48:2f:a4:db:77:
         01:8f:c8:16:00:85:ff:09:d1:b4:ab:a8:98:c3:cb:9c:06:c8:
         db:c9:f5:af:54:74:ea:e0:3a:2d:e8:f7:4b:db:e4:9c:d5:9f:
         f7:11:b0:50:63:94:d6:f4:66:a4:b6:35:05:00:59:d5:8e:be:
         e0:97:fe:f2:0f:5c:dc:65:3a:9e:51:5e:80:36:41:b3:43:f1:
         3b:aa:e7:2c:32:36:08:45:08:68:42:db:97:39:21:ad:9b:ad:
         35:55:74:a2:72:21:07:f7:95:62:59:d1:4a:12:0e:48:c3:19:
         2c:11:da:36:3f:67:78:c1:a8:7c:9c:4c:9c:46:3c:c4:1c:aa:
         ab:01:92:69:0c:98:7c:e1:97:ea:b7:51:1d:80:47:fe:c6:4b:
         1d:d0:73:f7:23:1a:2f:6f:35:c0:90:fa:86:60:b8:5b:2a:51:
         03:fd:a3:db:54:69:d2:b2:47:3d:da:0b:37:8f:f3:f4:3b:1d:
         16:e3:6a:82:f0:a3:dc:1c:2b:25:2a:ec:2c:1e:d8:55:9c:a3:
         28:2b:4c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:38:27 2026 by rpki-client