Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
File:                     E1XVGH0uY9fm1JB42OcfoFHEVuM.mft (raw, json)
Hash identifier:          gLpOY4i7IEUwRfcOJ6gBzD4fWPf5DeKnQrAl15B51sk=
Subject key identifier:   DE:88:D8:DE:57:50:2E:11:9C:68:69:FE:0B:20:D5:64:8B:59:43:CE
Authority key identifier: 13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3
Certificate issuer:       /CN=A91B3CB5/serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
Certificate serial:       0D8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
Manifest number:          0D5E
Signing time:             Fri 02 Oct 2026 18:21:26 +0000
Manifest this update:     Fri 02 Oct 2026 18:21:26 +0000
Manifest next update:     Fri 09 Oct 2026 18:21:26 +0000
Files and hashes:         1: E1XVGH0uY9fm1JB42OcfoFHEVuM.crl (hash: 3h29zGrhTSylyGr/fcWd1iiXueutbphRAnuALOUeFNI=)
                          2: 257E3B94E37B11EA84A20810C4F9AE02.roa (hash: Dw3nMUxEhyHX5ev98aRNWPLfcsu+JByGF2YmsWZl+nQ=)
                          3: E26173CE050611EAA0470B49C4F9AE02.roa (hash: R7rZtnSJJ0QZFo5Ja/uQYwMCd6fNJf9hdwEvNCJu1OA=)
                          4: F2F8C8B2AAE311EFB889317FC4F9AE02.roa (hash: FMrV9a339leH9QraYW+j9/idX+LpdB6y6EvY3B6c48k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl
                          rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 18:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3467 (0xd8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3CB5, serialNumber=1355D5187D2E63D7E6D49078D8E71FA051C456E3
        Validity
            Not Before: Oct  2 18:21:26 2026 GMT
            Not After : Oct  9 18:21:26 2026 GMT
        Subject: CN=6abff626-970b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e1:3e:8c:37:53:60:97:58:d1:f0:08:c4:c0:
                    fc:46:cf:39:05:a7:c3:cb:d2:84:5b:35:90:34:95:
                    4d:fb:83:de:07:75:90:53:52:ac:7d:5d:d7:94:1c:
                    6a:d8:1e:0a:c3:df:17:5d:5f:b3:b1:73:82:2d:30:
                    6d:f9:0b:07:be:e1:fc:a4:72:58:28:f4:28:4d:8c:
                    6f:91:1d:b3:67:4e:80:d5:73:90:13:24:4b:27:dc:
                    19:b6:76:79:31:47:26:a2:48:83:a2:e3:46:45:6d:
                    fa:1f:3e:b9:4d:c7:94:98:9d:9e:9b:a8:6c:25:91:
                    de:58:99:fd:81:f9:16:70:b3:30:79:e6:31:84:fe:
                    da:ff:ed:98:f8:de:61:ad:52:37:9b:20:cd:f5:68:
                    ee:10:17:ce:08:bc:b2:b4:0f:b0:45:b0:1f:3c:9c:
                    8c:78:79:1d:d4:6b:e6:1c:06:bb:64:fd:98:ee:ef:
                    11:aa:59:78:86:75:d2:00:88:87:c0:91:9e:6f:97:
                    42:1a:e5:d1:92:4c:bb:68:37:3c:19:5b:30:a1:a5:
                    9d:b7:be:04:59:9d:95:5d:29:e5:8f:f1:8c:c3:da:
                    24:e9:2f:88:4f:bb:3e:ca:df:8e:d0:30:af:30:b0:
                    92:ac:3a:7f:8f:93:ef:49:71:bc:60:be:fc:65:e1:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:88:D8:DE:57:50:2E:11:9C:68:69:FE:0B:20:D5:64:8B:59:43:CE
            X509v3 Authority Key Identifier:
                keyid:13:55:D5:18:7D:2E:63:D7:E6:D4:90:78:D8:E7:1F:A0:51:C4:56:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E1XVGH0uY9fm1JB42OcfoFHEVuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/632650F8050511EAAA934C43C4F9AE02/E1XVGH0uY9fm1JB42OcfoFHEVuM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:66:b4:2a:d9:33:09:fc:8e:bd:48:75:90:d5:da:ab:b0:
         e6:bf:60:54:70:bc:20:e6:bc:2c:f1:a5:03:ca:87:d6:c5:a1:
         35:96:0f:ce:a0:5f:58:72:10:49:52:7c:03:0b:3a:e8:6b:6e:
         3f:b8:ac:48:7e:22:ea:7b:f3:c4:bf:93:0f:d4:1e:6d:36:d4:
         12:8e:70:d1:d2:28:15:6c:ad:90:b1:c3:89:4c:8a:79:35:a7:
         af:fb:1c:19:74:f3:d1:f4:93:25:04:a7:5d:d2:ba:4e:0f:ee:
         59:50:0a:5c:88:94:32:ba:63:66:47:86:ea:ac:b6:d3:72:5a:
         a8:85:3e:9f:35:d2:01:0e:21:00:bb:4f:51:ad:50:e0:65:77:
         51:c5:02:c6:36:8f:51:4e:27:2b:10:bc:e9:2c:10:7d:e9:f7:
         2e:bd:6a:07:f5:d8:21:be:be:c1:ed:85:a0:7a:41:5f:9b:48:
         0e:32:3e:d5:b1:77:55:8a:ac:1b:07:cc:73:07:22:cb:b1:2f:
         92:8e:05:75:55:10:98:30:ce:fa:e7:98:65:3c:cc:88:2f:8f:
         9e:f8:8c:e7:4c:d9:e7:46:d6:8c:0b:6f:e2:e7:43:15:a9:b5:
         ab:6d:c3:9d:93:36:aa:53:df:fb:8b:88:6f:35:78:1f:53:10:
         23:f3:0b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:42:40 2026 by rpki-client