Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
File:                     EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json)
Hash identifier:          VsiBYU2/OLZNJpjVH34TjOelZtMeJv2xkB/Ix9YPuNo=
Subject key identifier:   31:04:36:17:B1:97:D6:5F:B1:5F:EB:7B:9B:79:84:D4:75:29:92:6C
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Certificate issuer:       /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
Manifest number:          0227
Signing time:             Wed 09 Sep 2026 03:03:32 +0000
Manifest this update:     Wed 09 Sep 2026 03:03:32 +0000
Manifest next update:     Wed 16 Sep 2026 03:03:32 +0000
Files and hashes:         1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: G8lxO4urLbomHK7NfHTf2SqPz/ndEpjGgNCquij+EyM=)
                          2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 03:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
        Validity
            Not Before: Sep  9 03:03:32 2026 GMT
            Not After : Sep 16 03:03:32 2026 GMT
        Subject: CN=6aa0cc84-cbca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:46:52:5f:f1:fc:6e:3d:49:7f:31:5f:fb:08:
                    9a:60:5a:7c:16:bd:0a:23:e6:c5:12:a2:78:1a:cf:
                    f3:01:03:09:e8:20:2b:9a:b2:8c:78:d6:57:b0:55:
                    2d:e4:b7:3c:4b:9a:54:e7:31:9d:59:69:d5:ae:b0:
                    6f:18:01:80:ce:88:3d:f1:0f:6d:ed:36:1f:06:54:
                    ad:75:1f:9c:76:6e:d8:3d:35:35:f0:78:03:9d:20:
                    69:69:de:63:55:22:05:9c:39:0c:f2:e9:8a:e9:6e:
                    54:fb:b0:90:bd:33:13:dd:6a:11:23:23:a6:36:7e:
                    af:38:d6:b3:7f:51:82:c2:77:ea:40:65:3d:99:88:
                    8b:de:6e:ca:e1:35:2a:ea:4c:1b:37:12:c0:22:3b:
                    5c:da:ce:51:17:e2:1f:12:95:78:7a:be:1d:a7:4a:
                    8f:a7:b0:ff:1a:c7:31:06:fb:66:b2:5e:0d:20:12:
                    00:6f:a2:ae:01:36:bd:c8:dd:ec:98:dd:e5:8a:dc:
                    b7:5e:1b:ba:26:ac:df:ae:ed:b8:cc:a8:31:64:53:
                    32:2e:13:94:e3:d4:79:c9:d2:31:4e:56:22:31:c3:
                    65:cb:a6:ae:77:3c:f9:5f:6d:31:fd:0b:bd:47:06:
                    42:b5:2b:d2:43:bf:c0:82:54:06:b0:74:2e:ad:5e:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:04:36:17:B1:97:D6:5F:B1:5F:EB:7B:9B:79:84:D4:75:29:92:6C
            X509v3 Authority Key Identifier:
                keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:89:9f:c7:b7:c9:20:56:77:63:65:07:13:72:1d:ec:71:70:
         20:2a:bb:24:a0:e5:18:96:b1:fc:bb:22:4b:1a:e8:7b:74:27:
         61:c3:b5:c8:6b:c6:1f:63:2f:33:bf:4c:a6:cf:cb:13:a0:03:
         77:38:3c:61:6c:41:b5:62:f6:dc:e8:a6:62:75:7e:19:52:f8:
         24:61:54:90:c4:de:c2:96:a4:df:f3:98:15:07:a9:81:be:11:
         92:6a:b7:42:7a:d2:e1:4d:17:63:c9:d6:f6:d7:3c:93:88:45:
         6e:c1:cb:65:48:9a:2e:4b:b3:41:0e:2f:33:83:85:7b:e3:93:
         75:7c:05:7a:45:0d:c2:99:ba:42:50:79:86:28:5e:6a:dd:75:
         6f:51:97:77:ab:66:29:9b:4b:e4:d8:c9:5a:81:68:be:ea:76:
         4e:c3:b3:16:f1:70:41:3d:b2:15:56:d6:8f:4d:67:ef:80:82:
         30:4b:08:4a:44:d4:c8:9d:38:a9:f5:d1:1d:e1:8a:92:4b:ae:
         44:b9:e6:31:2c:96:ca:07:bc:62:4d:b9:18:7a:76:54:d0:f8:
         b8:d6:26:e1:27:d8:d8:d0:c2:91:0a:23:57:cd:ea:c5:fd:3c:
         43:cc:f9:9f:19:fb:df:f3:fb:0c:7e:84:77:ff:cc:c2:8e:e8:
         8e:f5:73:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:38:37 2026 by rpki-client