Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File:                     eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier:          ajjXAlxK+JDOaiNkuyGhcWeT78Iqa8TtD+R8FGs6bpM=
Subject key identifier:   36:DF:F4:FE:30:A2:91:37:98:1F:60:F3:36:11:BB:CB:34:8E:74:B2
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number:          027E
Signing time:             Wed 25 Mar 2026 01:20:15 +0000
Manifest this update:     Wed 25 Mar 2026 01:20:14 +0000
Manifest next update:     Wed 01 Apr 2026 01:20:14 +0000
Files and hashes:         1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: Q6swfM2zmOY6BCESMam8H66FYdfmTZfLpZif51EgzPo=)
                          2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: 8IACVOF1lhPTJN0lhLFFp1SWYA6BHv6zLt1gxO2Ww3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Mar 25 01:20:14 2026 GMT
            Not After : Apr  1 01:20:14 2026 GMT
        Subject: CN=69c3384e-4201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:98:fe:c7:25:ea:be:5d:2a:2e:5a:fc:f5:
                    66:cb:eb:93:09:56:52:ef:95:af:d0:76:b4:52:a2:
                    f4:87:4d:d0:7c:58:3d:bf:c1:46:c9:1b:3a:63:70:
                    b7:01:40:ba:5b:94:f7:c7:32:5a:09:0b:dd:22:56:
                    86:5e:43:78:bb:99:30:5a:81:16:a5:5e:5c:84:2c:
                    7c:3f:14:4b:71:c9:d3:9f:b7:6b:ed:7d:8d:46:7c:
                    b5:6c:8c:bc:83:83:4a:72:5d:09:3d:ef:24:32:76:
                    23:c0:c2:6b:7b:f0:34:fa:fd:cf:72:e4:fd:22:4d:
                    32:11:a1:ce:b2:72:e7:a6:ab:54:19:58:db:d6:00:
                    65:38:61:2b:54:c7:3e:db:61:50:81:be:13:65:61:
                    f9:a3:db:2d:43:86:51:65:51:2e:cd:49:df:ad:c1:
                    8d:6e:30:21:e6:65:ec:0a:88:fb:2b:c7:57:8c:d4:
                    3f:3f:e2:ab:8e:ad:29:d9:59:1c:79:81:81:2a:6e:
                    2a:1b:e9:87:5d:ef:7f:94:c5:7e:1c:43:29:ff:a8:
                    29:f6:d6:f9:e0:14:11:24:aa:af:20:f7:45:c7:a1:
                    5d:f2:2d:f2:3c:e1:0b:35:ea:b5:ec:42:32:03:bc:
                    48:d8:71:69:42:13:c7:60:ff:c2:aa:f4:c5:33:62:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DF:F4:FE:30:A2:91:37:98:1F:60:F3:36:11:BB:CB:34:8E:74:B2
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:8b:7f:9b:73:02:a6:c8:0f:39:3e:3d:74:0e:5e:bb:2c:
         7a:20:2f:0a:b9:08:c8:7d:6a:6d:ec:f4:28:ed:66:41:c5:52:
         f7:0d:66:93:b5:d5:6e:2e:16:e0:62:c5:3c:fb:4d:02:e1:a5:
         c0:33:99:56:1e:df:79:a3:93:8b:8f:54:f6:8e:94:ff:7e:32:
         b3:26:b8:b2:71:d0:c4:d5:f7:00:75:57:ae:56:75:3b:a4:05:
         e5:95:73:a5:03:11:5e:90:4f:a7:68:28:65:c5:db:42:4c:9f:
         f4:c8:93:bf:18:c0:bf:c4:ea:a6:7b:18:b9:db:a1:11:93:eb:
         b6:ba:54:5e:1c:c1:84:05:f6:0d:fd:13:ed:65:63:74:26:6e:
         4f:8e:ef:a2:65:c3:4c:ea:8d:2a:68:19:74:8e:fb:66:bb:a0:
         bc:6c:58:ad:83:49:5f:c7:b1:a1:fc:da:2a:a1:a6:b4:89:39:
         2a:7b:64:33:b3:6c:d5:c1:07:81:6f:eb:f7:52:42:2e:9f:b2:
         23:0d:35:7f:28:ee:87:a2:e1:a5:bc:3a:54:9a:32:00:a9:c4:
         4b:e4:e8:62:73:88:5b:a6:a4:10:70:f8:38:a5:99:cb:5e:cf:
         e7:8a:06:a5:e0:5c:9c:c4:dd:9b:4c:32:35:75:5c:13:21:c1:
         0a:6b:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:10 2026 by rpki-client