Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File:                     EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier:          lb/vNRxOsCFkUSR2nSy/KBn+YXY1G+hcxzcNG1O3r14=
Subject key identifier:   EB:44:3A:87:A7:27:02:95:0B:A6:EF:83:9B:07:C9:9D:23:46:7C:2E
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0F46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number:          0F3A
Signing time:             Mon 24 Aug 2026 17:30:39 +0000
Manifest this update:     Mon 24 Aug 2026 17:30:38 +0000
Manifest next update:     Mon 31 Aug 2026 17:30:38 +0000
Files and hashes:         1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: YC99RLRhRa1jqKINgSUi4orBEA4x5DA0QIROe6o/IwA=)
                          2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 4bbcXUAySLXOzdFL1tioIfucTJOOmIVK2SW9Cfab4LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 17:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3910 (0xf46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Aug 24 17:30:38 2026 GMT
            Not After : Aug 31 17:30:38 2026 GMT
        Subject: CN=6a8c7fbf-1930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:bd:af:41:61:d9:ca:9f:2d:9c:e1:7c:0f:
                    a4:75:4e:14:9d:a2:66:17:cc:68:03:05:50:87:42:
                    f2:5d:e2:4a:98:43:c7:bc:a4:9c:42:44:6b:c3:6a:
                    fb:86:0a:9d:2d:a3:6a:ed:30:39:20:79:8b:4b:80:
                    86:19:37:76:40:eb:0b:a9:77:82:b7:57:06:ab:33:
                    72:b2:03:d4:60:15:49:de:0e:16:5b:da:e7:06:5c:
                    94:f2:3c:f6:24:b5:d6:ef:70:00:04:0e:ee:1e:35:
                    cb:e2:f7:3f:de:c9:e0:7f:d7:63:2a:46:8a:50:4e:
                    e7:2f:9e:fb:0d:f1:28:2f:77:de:1f:6d:61:cb:74:
                    cf:e8:1d:08:19:72:19:1c:98:35:f4:c7:bf:29:c5:
                    58:a7:6f:32:c1:f9:28:6c:07:33:4e:20:77:ad:01:
                    f4:a1:ea:ba:18:94:45:ed:5b:73:67:aa:fc:a6:a2:
                    17:68:13:87:a4:8a:97:49:23:26:e4:27:83:89:26:
                    93:90:7d:f9:ca:dc:42:66:89:32:c2:5a:1c:96:b5:
                    09:03:b5:5d:dc:44:11:d6:81:4d:eb:96:00:3f:17:
                    db:74:ee:f5:1f:4b:cf:23:3b:b5:9f:5c:80:85:23:
                    5c:03:78:e7:f3:af:15:5a:23:19:0a:6b:4d:73:bf:
                    bb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:3A:87:A7:27:02:95:0B:A6:EF:83:9B:07:C9:9D:23:46:7C:2E
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fb:38:ab:2c:9c:8e:02:d3:fb:8a:20:4d:1c:90:06:29:7f:
         9e:5d:d5:31:e4:37:b5:56:8b:79:c9:e9:45:0d:87:8d:35:ac:
         25:30:fc:11:2b:f8:67:5e:10:1b:aa:d0:f0:e3:59:11:14:96:
         82:6f:89:b7:18:91:c4:9b:19:9a:2b:ee:8a:3c:ef:f7:5e:ce:
         20:19:58:1b:75:62:9e:d6:97:e9:e5:db:92:e2:33:12:74:00:
         6b:54:54:15:ce:42:6e:11:c0:50:4c:18:de:10:34:6c:d4:8f:
         2d:36:13:49:0d:d0:07:68:95:1e:f3:59:66:76:70:c9:12:65:
         45:16:6a:d6:ed:b2:ef:b5:b2:e4:2b:01:ee:b0:9b:3d:51:f6:
         5c:86:ea:7c:10:74:9b:ca:35:83:79:a8:7c:c2:80:a3:5b:ca:
         cc:33:7f:d6:3d:8a:43:c5:2d:74:a6:4c:2b:45:2f:e8:fd:ab:
         e6:6f:6a:64:cf:99:a3:77:72:f8:8c:fa:04:86:2f:0b:b6:a8:
         f3:a9:38:f6:54:be:28:39:e3:16:83:9d:dd:fc:c6:3c:05:5b:
         bc:62:04:cf:21:dd:e9:2d:ae:7b:ec:b2:b8:df:62:d1:96:60:
         ff:3c:1a:ed:43:85:5a:2f:cf:a8:e4:16:47:53:de:38:f2:c7:
         59:d4:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 12:24:47 2026 by rpki-client