Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
File:                     ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft (raw, json)
Hash identifier:          Sxyl32dzwZrkZr/MKeTl6NPcoBIQQSGoG215sd3dGSQ=
Subject key identifier:   11:C6:0F:FF:1F:DF:98:4C:38:7A:66:E3:95:3A:71:DD:40:AB:F5:03
Authority key identifier: 79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79
Certificate issuer:       /CN=A91F5FA2/serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
Manifest number:          07AD
Signing time:             Tue 18 Aug 2026 21:49:36 +0000
Manifest this update:     Tue 18 Aug 2026 21:49:35 +0000
Manifest next update:     Tue 25 Aug 2026 21:49:35 +0000
Files and hashes:         1: ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl (hash: +mSmqyplxVLsyCXxtQ9d0nks2xoNxonCGhSjZ7LVHqw=)
                          2: FE4992F25C3411EBA2B9004DC4F9AE02.roa (hash: q6f3I/pDthdLdMLSxBp5iyTcTb4DHogkmy15HWS90s0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl
                          rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5FA2, serialNumber=79A94D28E5424738091383D5F4975BFDBCEAAE79
        Validity
            Not Before: Aug 18 21:49:35 2026 GMT
            Not After : Aug 25 21:49:35 2026 GMT
        Subject: CN=6a84d370-1095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:19:dc:01:35:d1:b9:d6:ef:10:c7:7a:7a:
                    c2:7f:6b:29:be:df:84:6b:1f:26:92:b0:50:24:97:
                    f1:89:0c:f9:48:2a:10:b3:b0:23:30:d8:12:da:38:
                    c0:66:23:ce:ce:78:bf:98:1d:7a:27:9f:c0:24:93:
                    d2:2d:ff:2e:e5:5b:fd:63:73:e1:c4:f2:f3:f9:cc:
                    da:7d:10:05:7d:e5:f9:29:a6:1e:90:d1:87:2f:0f:
                    8b:6f:03:95:44:7f:55:28:e0:14:0d:94:61:dd:62:
                    4d:a6:76:60:6c:48:13:06:fe:7f:69:0e:4f:8e:ec:
                    6d:b1:76:66:12:d9:c7:27:92:77:a3:43:13:5d:66:
                    3a:c0:55:d0:eb:f9:58:81:5b:31:30:46:4b:0f:18:
                    41:71:dc:87:23:8e:4d:04:9d:52:f4:c7:69:24:18:
                    70:12:2e:fc:d7:e1:3a:6a:61:fe:23:0b:57:de:88:
                    f4:fb:b4:99:a4:2b:d1:f7:86:12:87:d2:53:5a:de:
                    31:b7:9d:de:b1:73:09:bd:52:18:ce:8a:47:3a:34:
                    d4:b9:54:fa:ea:bc:a3:18:fc:62:8e:f8:fa:4e:7c:
                    ae:f6:52:2d:d7:12:00:1a:32:63:b0:f6:63:96:7e:
                    ed:60:42:a8:38:67:c9:2a:f5:e9:6e:10:ad:2f:80:
                    f2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C6:0F:FF:1F:DF:98:4C:38:7A:66:E3:95:3A:71:DD:40:AB:F5:03
            X509v3 Authority Key Identifier:
                keyid:79:A9:4D:28:E5:42:47:38:09:13:83:D5:F4:97:5B:FD:BC:EA:AE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ealNKOVCRzgJE4PV9Jdb_bzqrnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5FA2/032544405C3211EB97BF7C45C4F9AE02/ealNKOVCRzgJE4PV9Jdb_bzqrnk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:69:c4:90:cc:a1:ec:d7:a4:fe:f9:1c:70:3e:29:b1:1b:cd:
         f6:a7:ce:b9:52:d8:9d:57:02:fb:c7:b4:54:b5:93:fa:5a:b2:
         3e:a2:38:e7:12:d7:ad:fb:a9:65:9d:03:2e:7a:cb:4e:74:5c:
         bb:d8:a0:39:01:cb:66:d1:ee:e3:8b:02:38:2b:dd:b6:d1:6a:
         73:45:a8:37:ce:24:2c:b1:3c:92:24:d2:d2:9c:27:b0:32:d6:
         75:bb:7c:7c:3e:d3:68:84:ee:37:6d:8b:fd:2d:9c:35:81:fa:
         49:d3:53:0b:2f:56:98:76:8a:24:07:ce:43:f7:b0:71:ca:c1:
         58:e1:64:7a:f9:0f:6a:52:90:9d:1f:78:5a:bc:6b:41:cf:83:
         f0:69:f8:ce:3c:00:a4:01:2b:e2:4e:c2:4d:6c:45:64:ce:92:
         e1:b1:5a:50:73:86:67:49:83:b8:c7:b7:cc:8b:3c:3d:6c:48:
         ed:04:e9:1b:b0:d1:44:28:54:70:ea:8c:81:42:98:9e:2b:11:
         9f:20:6e:4a:c9:2c:82:06:eb:45:d5:53:d8:5d:b0:53:55:b3:
         f0:3f:63:21:e9:46:44:cf:82:67:86:4d:e0:b7:94:1b:85:71:
         7a:5c:b0:f4:20:cd:92:34:36:97:05:61:48:64:8d:3f:58:58:
         15:2a:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:07 2026 by rpki-client