Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
File:                     enMAIRE9JFEdbouFYuck7J6YJRs.mft (raw, json)
Hash identifier:          EmzNgkD1hI+xa7cnMOQoRxdTocBw5YUiGjhGU8pDlyw=
Subject key identifier:   BF:DC:6D:68:F3:00:89:18:4C:EB:05:6D:42:83:D7:A5:8F:3E:5E:31
Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B
Certificate issuer:       /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
Manifest number:          FB
Signing time:             Fri 11 Sep 2026 06:21:53 +0000
Manifest this update:     Fri 11 Sep 2026 06:21:53 +0000
Manifest next update:     Fri 18 Sep 2026 06:21:53 +0000
Files and hashes:         1: enMAIRE9JFEdbouFYuck7J6YJRs.crl (hash: CZQmXlbrOVN1wrW/CdYFMa+X/D1aD6/ZZBCtIbrU6yY=)
                          2: 51E2DA3C032811F1B93270B91D3D8C67.roa (hash: ZdHxlT3OqwPC+xGI71Ljv6ozI4riSBo2nvgbAgHx1Rg=)
                          3: 38A5CCEC0EFD11F198037EE50C3D8C67.roa (hash: 05pC1QjdXz/JcKagpqRB8Es2Hu2WFfz+kHjfBEq36Yo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B
        Validity
            Not Before: Sep 11 06:21:53 2026 GMT
            Not After : Sep 18 06:21:53 2026 GMT
        Subject: CN=6aa39e01-e33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:65:cc:ac:ba:cd:90:81:61:fd:f4:7f:62:
                    b3:67:35:bb:49:0c:cb:8d:22:15:18:6a:2f:91:c4:
                    7d:8c:a1:d6:fd:31:fb:f4:2b:b7:47:a7:89:ff:2e:
                    9a:f1:d1:b3:b1:dd:59:b8:31:7a:c3:9a:71:71:ab:
                    8a:f8:bd:88:d5:ab:0a:72:d7:84:0a:3e:f1:83:68:
                    2b:5c:b2:cf:30:9f:fd:a7:9a:f7:76:86:18:94:9b:
                    52:b8:4b:17:ae:64:b0:62:a9:a2:7d:5c:9e:b8:e4:
                    5f:07:7b:d8:91:61:e4:bc:07:91:76:f3:42:cb:53:
                    00:cf:79:50:83:2b:19:f3:23:ee:ad:1f:b3:e1:c2:
                    0e:42:c6:0a:9c:a6:4e:f8:6f:55:f0:64:a9:01:08:
                    31:c4:28:aa:b4:3c:32:c5:97:3a:22:de:88:9a:41:
                    13:35:00:0d:2a:4d:3e:3a:1e:98:37:fa:34:03:34:
                    86:33:e8:4b:9e:9c:f7:06:84:fd:f0:ab:95:bd:e7:
                    c7:e9:55:08:42:9f:3d:7c:9f:2a:0c:b5:fa:3b:cd:
                    00:25:9c:f7:27:f8:6d:6e:ed:7b:99:54:4f:96:16:
                    61:84:9d:1b:05:3c:3a:9b:de:dc:47:67:02:d0:7a:
                    1b:9c:6d:1f:b1:4b:dc:c1:4a:60:fd:7f:54:a5:70:
                    76:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:6D:68:F3:00:89:18:4C:EB:05:6D:42:83:D7:A5:8F:3E:5E:31
            X509v3 Authority Key Identifier:
                keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c8:5f:09:6f:cf:94:c4:0e:38:fd:65:77:87:99:a8:96:58:
         63:e3:6a:5c:8f:4f:36:e8:77:99:f5:76:0f:b9:71:43:ad:25:
         7b:b7:da:3c:2c:c2:b5:d0:fd:c1:21:e9:d2:53:52:91:3c:d4:
         0f:e8:27:55:87:97:29:58:e7:8c:eb:4e:ef:b6:13:de:75:85:
         ab:39:f4:e9:f8:ff:92:1b:6d:41:73:66:16:56:36:ef:d9:29:
         55:1b:35:37:51:70:64:e5:68:09:69:12:08:f5:5a:75:c7:9d:
         f3:d8:76:05:7b:33:f0:33:ec:ca:70:fb:8d:e4:eb:58:db:d3:
         49:ba:86:d2:a1:36:91:84:41:66:23:5a:3f:4c:b1:06:82:77:
         15:b0:e9:bc:ee:40:4d:5d:42:69:a1:a7:d3:7c:48:02:58:b0:
         f6:e7:76:9f:02:e7:55:bf:06:03:5a:7b:fa:3a:0c:6e:01:dc:
         c3:0d:41:9f:cd:99:c3:6d:8f:63:0e:85:ab:39:6d:ec:32:5b:
         31:ac:80:61:72:1d:b1:a3:13:a2:f8:a8:73:73:8d:16:a2:d9:
         eb:e3:86:89:80:9a:9a:60:87:4e:95:d6:b7:0c:78:c0:8d:e4:
         de:70:5c:12:c5:a8:45:ce:80:72:5a:0e:a0:d9:51:c5:88:03:
         73:44:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:24 2026 by rpki-client