Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
File:                     EF4GES4JwRrGtuM_Do2j9uYn8zI.mft (raw, json)
Hash identifier:          RQQroqkCnunl+hVCerGx4LDE/SAMTjwucQU66oyTguk=
Subject key identifier:   5A:76:50:B6:B1:F3:5F:95:10:4B:F2:52:EA:13:3E:8E:63:77:8F:13
Authority key identifier: 10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32
Certificate issuer:       /CN=A91D0468/serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
Manifest number:          32
Signing time:             Sun 25 Oct 2026 09:01:41 +0000
Manifest this update:     Sun 25 Oct 2026 09:01:40 +0000
Manifest next update:     Sun 01 Nov 2026 09:01:40 +0000
Files and hashes:         1: EF4GES4JwRrGtuM_Do2j9uYn8zI.crl (hash: ylfPWR45act0KLFKrBcklxIrQMlMl6X5GiJIO28Km60=)
                          2: F7D72646866311F18181548196A30FBC.roa (hash: YWqTKDIpSAxFUM6HW5snbyR2J7jAqm3hUt37+u8FRTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl
                          rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0468, serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
        Validity
            Not Before: Oct 25 09:01:40 2026 GMT
            Not After : Nov  1 09:01:40 2026 GMT
        Subject: CN=6addc575-5c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6f:bf:f9:02:da:37:a2:09:84:19:63:8a:70:
                    4e:00:88:36:1e:8f:26:a1:5e:49:1f:3e:ec:ce:77:
                    c4:2c:2d:79:e3:9e:b5:66:49:90:25:cc:03:52:a3:
                    cd:6b:1d:d1:cd:ba:52:f3:03:54:77:7d:cc:66:48:
                    a1:3d:3b:7f:01:20:3e:f3:e8:8f:55:35:59:64:ad:
                    e5:a7:ac:cb:43:bc:a3:94:7f:4b:a1:5e:59:d0:dc:
                    e3:bd:9f:f4:44:cb:7a:c0:f4:23:09:fd:6d:ea:ee:
                    99:8a:2a:cf:5e:cb:3d:32:58:44:6f:f0:2b:f4:69:
                    62:03:68:af:06:b7:da:2f:1b:24:be:fe:86:c3:c4:
                    e9:cf:7d:ab:ae:e1:4f:91:1e:45:41:9f:ee:61:a9:
                    8d:a7:cc:df:f4:9d:53:34:d1:59:a1:e8:b9:0f:8e:
                    6c:83:38:e3:10:e8:99:4f:92:a5:49:16:1d:26:5e:
                    a8:49:f9:28:17:30:10:16:f0:f3:76:8e:6a:a6:05:
                    7f:e8:c6:d9:3d:38:64:ef:58:dc:9e:ba:f6:44:c1:
                    46:71:a4:c3:72:57:5f:47:50:38:8c:42:c1:b7:82:
                    e2:77:bc:b5:96:04:2e:48:06:bf:71:1e:c4:80:cb:
                    fc:6d:b3:04:2f:b5:d8:05:30:ba:c5:a2:dd:63:79:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:50:B6:B1:F3:5F:95:10:4B:F2:52:EA:13:3E:8E:63:77:8F:13
            X509v3 Authority Key Identifier:
                keyid:10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d9:cf:bd:f4:5c:4d:16:3c:c7:15:1b:ef:27:14:82:30:dc:
         85:d5:18:0a:27:16:c2:1e:c5:c2:8f:43:b7:32:5b:40:6c:ea:
         18:83:a8:83:a3:4f:b7:6f:e7:68:00:7c:1f:d9:ee:c6:72:af:
         12:b2:95:d5:d7:63:79:42:74:a0:8b:60:f8:ca:a4:0e:29:d5:
         09:d0:58:0a:3e:f8:9d:6b:a0:12:76:f2:64:49:1d:9b:7d:79:
         76:93:0a:ec:62:f8:61:95:ed:f0:85:ae:32:e3:80:1a:e6:d9:
         da:9f:d2:a8:c6:98:1b:31:c6:c5:a0:15:25:a4:eb:a6:1f:56:
         48:c3:0b:ce:22:31:77:50:83:e9:4d:2d:97:b8:e3:a8:cb:b4:
         8d:1d:7b:d7:61:9b:c4:69:6b:85:2d:b3:ec:08:92:db:cf:02:
         67:e4:7b:2d:27:3c:d9:32:82:e2:04:3a:2f:74:64:37:3a:7d:
         6a:f7:aa:77:9a:ff:a9:ea:d6:dd:40:6e:cb:e1:c0:6a:8f:f5:
         d7:6a:22:55:ab:07:0f:76:f9:64:67:2d:4b:de:b5:7c:14:ab:
         c6:45:a1:e7:59:38:a9:69:66:19:bb:d0:51:94:8a:34:86:48:
         f2:70:5f:74:0d:89:d0:c4:ea:4b:f7:f9:7f:6d:d9:a2:bb:3e:
         a8:16:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:25:13 2026 by rpki-client