Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File:                     EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier:          P0z+HaPfgZTrxcyqlHjvX4f3HKUhGkP9dTPukTi6hsk=
Subject key identifier:   90:8B:07:9B:E9:98:71:22:6C:48:46:7B:5B:BD:58:00:53:BD:DA:3B
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       052B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number:          051C
Signing time:             Tue 12 May 2026 23:42:23 +0000
Manifest this update:     Tue 12 May 2026 23:42:23 +0000
Manifest next update:     Tue 19 May 2026 23:42:23 +0000
Files and hashes:         1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: nn6NFHFtxDvhm45IkHZs+w1eTFwbP+Ubytspn8AaRGk=)
                          2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: 5pzE/DEK+uZ2gUdloRUaMZ5/Ny9r+z2BlO/k/Ebfld8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: May 12 23:42:23 2026 GMT
            Not After : May 19 23:42:23 2026 GMT
        Subject: CN=6a03badf-a5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:3a:57:63:db:65:1e:a9:9d:cd:1a:8f:71:
                    e0:c1:85:c5:55:60:d0:a9:a9:48:09:9d:84:38:9a:
                    6f:45:2b:d6:fa:58:06:a1:fe:72:39:d1:0f:f8:29:
                    d8:52:e5:47:a7:92:53:53:06:7e:89:68:cf:77:86:
                    7c:17:34:e7:08:42:45:23:f4:a1:51:11:cd:0d:6d:
                    9a:05:56:12:90:18:4e:be:ba:e2:96:8a:2c:fa:cd:
                    49:d6:19:25:13:42:72:9c:ac:6b:7d:e3:e6:62:26:
                    7f:ee:d4:4e:e9:81:20:c8:13:80:e3:1e:22:01:2f:
                    c6:b7:62:e7:f3:df:46:e7:90:65:4e:e7:ac:70:a4:
                    11:19:2f:da:08:2e:7c:ba:ab:c4:3b:9d:a0:0c:86:
                    f6:c0:e4:34:ac:e8:54:dc:25:2c:11:e3:47:5c:ec:
                    c2:9b:d0:81:33:44:37:00:86:79:b9:06:da:67:a6:
                    64:59:62:05:0d:a3:32:9f:60:00:97:f8:59:4e:39:
                    7f:99:1d:95:cd:b3:e9:3a:0e:41:36:8f:cd:4d:08:
                    7d:fe:59:24:08:c6:c8:39:92:75:72:8c:45:5f:00:
                    81:e0:ec:b2:0e:3f:83:51:80:91:fc:7a:f8:49:ba:
                    9b:a0:38:92:56:47:f6:05:3d:c1:4e:95:f5:8a:96:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8B:07:9B:E9:98:71:22:6C:48:46:7B:5B:BD:58:00:53:BD:DA:3B
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:36:54:59:6f:a5:4b:a5:c1:de:88:44:03:2c:d4:8d:5c:a5:
         0b:75:b6:a6:4d:d8:e1:8d:72:fd:ba:6f:b9:b7:42:b2:4f:2f:
         9a:6d:15:f9:41:94:f6:0f:e7:37:2d:8f:5a:8e:9a:4f:2c:03:
         8d:fd:41:2e:be:a5:ce:98:d7:bc:38:9d:79:78:a3:53:a5:ef:
         20:9e:ba:e3:2f:e8:29:25:1e:5c:4c:b0:a7:14:6f:c1:62:79:
         9f:c0:37:1b:2f:c1:9f:b9:83:a3:a6:6a:ce:5b:9a:8f:92:fa:
         24:31:40:0f:7d:d5:8c:e6:f6:6e:b2:81:dc:f3:a8:44:39:04:
         fd:80:4b:c7:9b:a5:9c:96:20:df:30:c3:0e:02:38:76:6b:d4:
         80:a1:f0:fd:58:c4:1a:bc:b7:6d:7e:71:04:f1:53:8c:11:b2:
         f2:d8:95:ca:f8:ca:b4:7c:7f:83:09:85:d6:b9:73:ff:54:e5:
         29:40:c0:64:29:71:9b:2d:a0:b9:a2:12:50:70:1e:ad:b6:36:
         0a:e0:3a:a1:d8:56:ac:0e:5e:9a:d9:1c:6d:e1:b6:1a:89:ef:
         34:0c:eb:16:e8:4d:d4:98:a7:6b:a2:71:33:90:87:77:f1:50:
         7b:c3:ba:82:1a:d2:77:44:29:8a:20:33:b1:16:72:2a:16:e4:
         7d:02:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:34 2026 by rpki-client