Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
File:                     EDhLgnxFluWuq0OYhypdFG6ggV8.mft (raw, json)
Hash identifier:          jx7/hj7rhtxzVw1ign5itrNM9NHn7ux+IreZ3/BIMVk=
Subject key identifier:   42:B8:23:E7:57:F2:2E:66:9E:7A:F7:0C:88:24:9E:07:A1:69:F2:4A
Authority key identifier: 10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F
Certificate issuer:       /CN=A91BA3E7/serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
Manifest number:          27
Signing time:             Wed 07 Oct 2026 09:24:37 +0000
Manifest this update:     Wed 07 Oct 2026 09:24:36 +0000
Manifest next update:     Wed 14 Oct 2026 09:24:36 +0000
Files and hashes:         1: EDhLgnxFluWuq0OYhypdFG6ggV8.crl (hash: e5pmfppJSgiulihwgia/y3igQE+9Gq30P/pOZu0/Feo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl
                          rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA3E7, serialNumber=10384B827C4596E5AEAB4398872A5D146EA0815F
        Validity
            Not Before: Oct  7 09:24:36 2026 GMT
            Not After : Oct 14 09:24:36 2026 GMT
        Subject: CN=6ac60fd4-c353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f9:02:01:b7:bd:ce:45:44:59:2d:cd:a6:87:
                    1b:d8:16:61:25:10:d2:05:a5:e8:ba:e9:1a:e3:77:
                    3b:31:ed:3e:87:38:a8:f4:df:c6:fb:22:9c:1d:0a:
                    9f:20:b2:01:c7:22:cb:bf:e8:50:38:3a:de:4a:d3:
                    6c:6c:8f:b7:b7:96:06:f4:9b:2b:3b:4f:c8:9c:5f:
                    a5:ec:c3:e7:59:81:43:a0:b3:6b:76:90:40:39:3c:
                    70:e7:ca:21:5f:89:fe:67:ae:5d:99:39:69:92:89:
                    86:ec:f1:9e:4e:7f:c0:e2:f5:36:3d:6f:f8:72:2c:
                    43:e9:95:12:98:6a:12:8f:00:20:de:78:3c:cc:1f:
                    42:f8:8a:e3:9c:fc:d6:27:f4:f7:29:c4:78:21:55:
                    24:c1:7e:62:f5:fd:e2:c3:d9:1e:59:43:d4:73:60:
                    ea:95:26:4c:c8:b3:50:4b:eb:64:fb:5c:bf:84:3f:
                    ab:69:0a:cd:27:58:fc:32:4e:5b:bc:a0:64:e7:cc:
                    a3:4f:56:50:57:ac:c3:9e:73:76:b7:d7:c6:b7:33:
                    2a:26:86:c8:e5:f7:a9:a2:60:90:33:e3:1c:5a:a4:
                    b8:2b:f8:0a:d7:f3:76:26:11:0c:06:e8:7b:ff:7e:
                    e4:80:33:3c:eb:6d:c4:0a:ad:6b:3c:ac:3d:a6:c1:
                    a3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B8:23:E7:57:F2:2E:66:9E:7A:F7:0C:88:24:9E:07:A1:69:F2:4A
            X509v3 Authority Key Identifier:
                keyid:10:38:4B:82:7C:45:96:E5:AE:AB:43:98:87:2A:5D:14:6E:A0:81:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDhLgnxFluWuq0OYhypdFG6ggV8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/6EB4B5128A1F11F19E4EC7A16811F970/EDhLgnxFluWuq0OYhypdFG6ggV8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:dc:5c:70:fc:ae:6e:72:8e:f6:11:62:65:98:80:3f:a2:23:
         2b:e5:48:6b:d7:cd:86:a1:bb:8f:78:59:37:05:aa:bc:19:ef:
         b1:30:f4:bd:67:4b:57:85:4e:6e:18:73:f5:d3:83:50:5d:25:
         53:ab:0a:09:db:ca:8e:06:d3:20:4b:70:16:48:b6:5f:81:2a:
         bc:b7:06:d0:77:ac:7f:9b:55:69:5a:17:bf:bf:05:b1:4a:2f:
         92:24:07:e1:38:b7:42:9e:39:94:c6:df:18:a4:88:77:ef:65:
         e7:e1:44:86:5a:19:81:07:6a:b8:3f:22:72:5f:2d:45:59:75:
         ca:b4:50:dc:45:c4:c5:93:38:68:0e:90:ed:27:bd:ef:d9:f2:
         cf:e1:01:78:1b:84:23:a6:d4:cb:fc:3c:ab:df:54:15:16:8b:
         ac:9c:63:a3:65:0c:3f:48:9c:d1:15:ce:92:a8:b9:2b:bd:cd:
         47:c3:c7:b7:5e:50:8a:a6:a1:af:15:f7:5f:9a:4c:d9:7c:88:
         3b:d8:63:71:82:fe:e2:1c:9f:7e:a1:e2:a8:d3:c8:dc:7c:fa:
         88:e4:3b:47:6d:d1:8a:16:0d:53:68:ef:b9:d4:8c:07:db:ad:
         11:1c:23:2f:59:55:37:fb:ac:05:ae:7c:29:89:3a:d5:94:70:
         09:97:18:1f
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QTNFNzExMC8GA1UEBRMoMTAzODRCODI3QzQ1OTZFNUFFQUI0Mzk4ODcyQTVEMTQ2
RUEwODE1RjAeFw0yNjEwMDcwOTI0MzZaFw0yNjEwMTQwOTI0MzZaMBgxFjAUBgNV
BAMTDTZhYzYwZmQ0LWMzNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCj+QIBt73ORURZLc2mhxvYFmElENIFpei66Rrjdzsx7T6HOKj038b7IpwdCp8g
sgHHIsu/6FA4Ot5K02xsj7e3lgb0mys7T8icX6Xsw+dZgUOgs2t2kEA5PHDnyiFf
if5nrl2ZOWmSiYbs8Z5Of8Di9TY9b/hyLEPplRKYahKPACDeeDzMH0L4iuOc/NYn
9PcpxHghVSTBfmL1/eLD2R5ZQ9RzYOqVJkzIs1BL62T7XL+EP6tpCs0nWPwyTlu8
oGTnzKNPVlBXrMOec3a318a3Myomhsjl96miYJAz4xxapLgr+ArX83YmEQwG6Hv/
fuSAMzzrbcQKrWs8rD2mwaPjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQrgj51fy
LmaeevcMiCSeB6Fp8kowHwYDVR0jBBgwFoAUEDhLgnxFluWuq0OYhypdFG6ggV8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzZFQjRCNTEyOEEx
RjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVXdXEwT1loeXBkRkc2Z2dW
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRURoTGdueEZsdVd1cTBPWWh5cGRGRzZnZ1Y4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB
M0U3LzZFQjRCNTEyOEExRjExRjE5RTRFQzdBMTY4MTFGOTcwL0VEaExnbnhGbHVX
dXEwT1loeXBkRkc2Z2dWOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBl3Fxw/K5uco72EWJlmIA/oiMr5Uhr182GobuPeFk3Baq8Ge+xMPS9Z0tXhU5u
GHP104NQXSVTqwoJ28qOBtMgS3AWSLZfgSq8twbQd6x/m1VpWhe/vwWxSi+SJAfh
OLdCnjmUxt8YpIh372Xn4USGWhmBB2q4PyJyXy1FWXXKtFDcRcTFkzhoDpDtJ73v
2fLP4QF4G4QjptTL/Dyr31QVFousnGOjZQw/SJzRFc6SqLkrvc1Hw8e3XlCKpqGv
FfdfmkzZfIg72GNxgv7iHJ9+oeKo08jcfPqI5DtHbdGKFg1TaO+51IwH260RHCMv
WVU3+6wFrnwpiTrVlHAJlxgf
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:55 2026 by rpki-client