Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
File:                     EBEGw3VRsRR1-6qyOQEVt6zygC0.mft (raw, json)
Hash identifier:          p2wnFsrFvoQ2zWPMxSC8eC/cJKkTRIv5LfCJm8snVNc=
Subject key identifier:   0C:39:02:82:78:BD:69:C0:CC:55:1B:63:A5:AF:C5:EC:43:7C:1A:17
Authority key identifier: 10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D
Certificate issuer:       /CN=A91BF286/serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
Certificate serial:       0245
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
Manifest number:          023F
Signing time:             Tue 27 Oct 2026 02:45:34 +0000
Manifest this update:     Tue 27 Oct 2026 02:45:34 +0000
Manifest next update:     Tue 03 Nov 2026 02:45:34 +0000
Files and hashes:         1: EBEGw3VRsRR1-6qyOQEVt6zygC0.crl (hash: xDtqf/xSbWzNgoDDe72jA007fpAitcw9Al+uBvyWijI=)
                          2: 44BA2B8C671011EEB41FB227C4F9AE02.roa (hash: uVmZRSTc4x/K1CJySncdCGqBEzUNgcCUoJOuUTYwvwA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl
                          rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 02:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 581 (0x245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF286, serialNumber=101106C37551B11475FBAAB2390115B7ACF2802D
        Validity
            Not Before: Oct 27 02:45:34 2026 GMT
            Not After : Nov  3 02:45:34 2026 GMT
        Subject: CN=6ae0104e-8ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:e9:f7:5b:c1:a2:08:0e:3a:c7:f2:f4:d4:
                    d0:63:ca:1c:2a:bb:00:36:a9:0b:7a:4e:ea:1c:cf:
                    82:61:60:6f:cc:3f:60:aa:b4:4e:58:f6:8d:4b:64:
                    7f:5f:fa:bd:45:61:07:7a:26:8a:e5:ab:0b:88:e5:
                    2b:55:e5:48:5d:d0:22:65:1f:51:99:68:e9:ab:f0:
                    bb:70:6a:a6:40:6f:7a:2b:8c:b7:f0:7c:fc:e3:f6:
                    bb:9d:c7:db:14:6b:4e:06:d7:a2:7a:60:55:af:89:
                    09:81:7b:f0:66:99:bb:50:46:a2:32:44:be:a2:07:
                    71:88:a9:b4:6e:ea:40:2a:87:32:ac:a8:b1:f4:ae:
                    66:62:61:e3:83:91:6d:7a:2b:82:7f:27:df:79:d1:
                    f5:ac:c2:f8:4f:8f:cd:54:a3:91:c9:fc:46:45:89:
                    e3:86:6d:94:e1:29:68:65:24:b4:44:56:8d:3a:8b:
                    79:7a:3d:cf:df:c4:4e:1d:6e:0b:fc:2b:bf:99:0c:
                    5a:f1:54:2a:c9:ea:0f:4b:a6:1b:3b:7f:c2:67:b9:
                    e5:8f:95:34:41:a9:c7:5e:27:6a:79:8c:e3:34:c9:
                    1b:c5:1c:40:c6:f7:64:63:61:57:1e:82:09:0a:6c:
                    34:71:bf:da:9c:51:4e:af:d5:17:c6:44:6d:55:4e:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:39:02:82:78:BD:69:C0:CC:55:1B:63:A5:AF:C5:EC:43:7C:1A:17
            X509v3 Authority Key Identifier:
                keyid:10:11:06:C3:75:51:B1:14:75:FB:AA:B2:39:01:15:B7:AC:F2:80:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EBEGw3VRsRR1-6qyOQEVt6zygC0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF286/1CE2B0C4669411EEA0452951C4F9AE02/EBEGw3VRsRR1-6qyOQEVt6zygC0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:b5:0b:7d:c6:11:8c:99:78:01:8c:18:ec:f7:a6:ea:63:
         3c:da:42:8f:f4:51:30:1c:6a:46:45:8c:b1:cf:6d:f9:99:6a:
         c6:5e:f8:a5:e3:d4:91:68:86:0c:74:17:5a:f1:b1:96:fe:c7:
         76:8f:56:73:78:a4:d2:c6:70:b5:13:f5:85:3c:2b:47:ff:c1:
         9a:a2:93:cd:2c:40:e7:c2:85:19:3c:47:66:05:e7:47:66:a5:
         7d:80:e4:b1:26:ef:42:3b:7e:0a:51:f7:6c:5f:9e:ba:be:18:
         d3:51:5f:97:11:bd:1e:8b:1c:60:50:21:9d:93:b9:fa:01:53:
         ad:38:84:d0:43:10:05:cf:6c:1c:51:e4:7a:f3:3c:04:58:38:
         52:28:5b:eb:4c:3a:ef:81:c7:3f:25:20:69:c1:7e:6a:b7:2d:
         a0:21:c2:ac:73:67:21:d4:7d:d6:e2:d7:e0:88:c3:f2:43:5a:
         3b:99:56:50:fd:4c:5f:7c:86:50:99:d5:1f:22:91:f6:e8:91:
         d4:e7:73:b8:bd:17:4d:56:ff:64:38:23:32:bb:d8:98:37:ee:
         ff:25:86:8d:e7:48:a3:58:97:1a:c8:d8:60:70:36:a3:ef:36:
         0a:c3:36:b7:21:3d:70:43:de:87:34:22:a6:43:5f:15:fb:b1:
         ce:24:c2:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyODYxMTAvBgNVBAUTKDEwMTEwNkMzNzU1MUIxMTQ3NUZCQUFCMjM5MDExNUI3
QUNGMjgwMkQwHhcNMjYxMDI3MDI0NTM0WhcNMjYxMTAzMDI0NTM0WjAYMRYwFAYD
VQQDEw02YWUwMTA0ZS04YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlOnp91vBoggOOsfy9NTQY8ocKrsANqkLek7qHM+CYWBvzD9gqrROWPaNS2R/
X/q9RWEHeiaK5asLiOUrVeVIXdAiZR9RmWjpq/C7cGqmQG96K4y38Hz84/a7ncfb
FGtOBteiemBVr4kJgXvwZpm7UEaiMkS+ogdxiKm0bupAKocyrKix9K5mYmHjg5Ft
eiuCfyffedH1rML4T4/NVKORyfxGRYnjhm2U4SloZSS0RFaNOot5ej3P38ROHW4L
/Cu/mQxa8VQqyeoPS6YbO3/CZ7nlj5U0QanHXidqeYzjNMkbxRxAxvdkY2FXHoIJ
Cmw0cb/anFFOr9UXxkRtVU7+/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAw5AoJ4
vWnAzFUbY6WvxexDfBoXMB8GA1UdIwQYMBaAFBARBsN1UbEUdfuqsjkBFbes8oAt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ni8xQ0UyQjBDNDY2
OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNSUjEtNnF5T1FFVnQ2enln
QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VCRUd3M1ZSc1JSMS02cXlPUUVWdDZ6eWdDMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjI4Ni8xQ0UyQjBDNDY2OTQxMUVFQTA0NTI5NTFDNEY5QUUwMi9FQkVHdzNWUnNS
UjEtNnF5T1FFVnQ2enlnQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAbq1C33GEYyZeAGMGOz3pupjPNpCj/RRMBxqRkWMsc9t+Zlqxl74pePUkWiG
DHQXWvGxlv7Hdo9Wc3ik0sZwtRP1hTwrR//BmqKTzSxA58KFGTxHZgXnR2alfYDk
sSbvQjt+ClH3bF+eur4Y01FflxG9HoscYFAhnZO5+gFTrTiE0EMQBc9sHFHkevM8
BFg4Uihb60w674HHPyUgacF+arctoCHCrHNnIdR91uLX4IjD8kNaO5lWUP1MX3yG
UJnVHyKR9uiR1OdzuL0XTVb/ZDgjMrvYmDfu/yWGjedIo1iXGsjYYHA2o+82CsM2
tyE9cEPehzQipkNfFfuxziTCUg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:44:23 2026 by rpki-client