Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
File:                     ezpr3tL3tMBYRWjAZKuANDKHI6A.mft (raw, json)
Hash identifier:          9viHann63Rtd6BKO0O1vVPFDgTFOKISHQCkSlU5Tp3M=
Subject key identifier:   69:83:28:56:9B:A2:FC:8F:61:42:03:EA:B7:7B:F7:69:62:76:EF:85
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       0221
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
Manifest number:          0216
Signing time:             Wed 25 Mar 2026 02:18:38 +0000
Manifest this update:     Wed 25 Mar 2026 02:18:38 +0000
Manifest next update:     Wed 01 Apr 2026 02:18:38 +0000
Files and hashes:         1: ezpr3tL3tMBYRWjAZKuANDKHI6A.crl (hash: uF+irUuLhRz13x2l2VkEOM9xa74hLFM46LRrO0UbRQI=)
                          2: 0CB9AF5C200E11EF91F18D75C4F9AE02.roa (hash: QWRcixf8QLc7IkGmviGZNSC4YSR65CJzVUK/LtjPM4I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl
                          rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190, serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: Mar 25 02:18:38 2026 GMT
            Not After : Apr  1 02:18:38 2026 GMT
        Subject: CN=69c345fe-048c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:90:8e:95:52:be:e1:6f:88:7b:c8:27:98:8a:
                    f1:0c:4a:79:83:58:2d:43:69:6e:d4:07:aa:f9:ed:
                    96:94:31:81:56:c2:e4:e0:63:8e:60:72:94:a2:0e:
                    4f:78:34:5a:6a:f1:15:98:9c:33:b8:63:f8:68:7c:
                    59:7a:b1:6d:b9:d0:dd:ff:a0:ca:e7:fd:c4:03:e7:
                    9b:79:74:ad:e8:15:08:81:f8:08:db:a8:a4:89:82:
                    c1:ee:b8:94:6e:00:a3:9c:f3:81:fe:49:54:13:6f:
                    01:c0:44:68:e5:6f:78:a7:0a:07:62:1d:ca:ce:44:
                    0b:5d:6c:db:70:75:cf:36:4e:f6:a1:05:1a:cd:72:
                    0e:05:f0:02:6e:b8:43:f9:1c:a6:b3:13:62:13:81:
                    91:bd:c9:0b:a6:68:c0:31:c1:88:ae:5b:a2:3d:a7:
                    59:1f:cd:34:4b:9e:f2:ce:9e:a2:aa:d0:06:11:cd:
                    a8:c1:07:28:b3:32:93:3c:b8:26:37:11:ba:c2:74:
                    f6:e8:1b:25:a8:fd:67:5e:b1:18:41:79:c2:3a:fa:
                    9f:8d:db:07:71:42:c0:be:d3:b6:a4:c4:0d:19:3a:
                    7b:9d:a7:68:37:94:23:ef:42:57:86:52:ee:5b:da:
                    ad:9c:9b:4c:d4:ed:e1:82:7f:6f:ea:4b:21:68:83:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:28:56:9B:A2:FC:8F:61:42:03:EA:B7:7B:F7:69:62:76:EF:85
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:fd:48:23:1f:10:d2:59:13:06:88:95:16:ca:bd:09:de:
         c0:83:49:e4:53:0f:9f:90:5e:12:e9:3f:94:81:78:32:3f:24:
         0a:c2:91:e3:51:22:07:b4:7d:fd:f9:da:84:58:6f:87:74:29:
         53:28:24:8e:7f:a6:7c:20:ca:ac:91:77:c6:90:ea:8c:db:e9:
         81:43:be:3f:6a:cb:b7:c5:78:82:0d:6a:9f:6e:22:34:13:c2:
         6a:91:00:3d:f1:ba:d5:b1:6a:8c:18:85:4a:3f:88:01:ee:09:
         4e:57:01:b8:78:ec:4e:71:66:d1:2d:c9:94:f9:cf:fc:7a:41:
         2b:cf:87:b2:56:df:f9:b2:97:61:07:c3:be:fd:20:ab:bc:06:
         86:55:d2:7e:42:c9:47:78:59:b9:03:51:81:4b:4a:a1:f9:f7:
         b7:0b:e5:ee:7a:0f:8e:e8:72:aa:90:8e:ad:03:3b:e1:79:2c:
         f0:69:12:52:6b:6e:1e:1d:45:ab:45:81:11:3b:86:69:5a:98:
         c1:26:49:2e:e9:a9:d9:33:77:03:12:c8:10:f9:b2:58:3e:1b:
         f1:fd:2f:a0:8f:a5:53:e8:b6:02:29:a4:ce:cc:42:e8:63:2c:
         04:b9:87:87:4b:f9:c5:18:58:7b:1b:d8:50:30:19:ee:2e:38:
         d9:66:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:23:18 2026 by rpki-client