Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          /NZOktTxwMouerbyWSfhz+HeZAQ9XMmmYndvhSY7A/E=
Subject key identifier:   79:85:F0:CA:59:B9:7E:94:0C:5C:3D:58:B8:0F:0E:BE:FF:18:29:61
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1DC5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1DB3
Signing time:             Tue 12 May 2026 16:07:20 +0000
Manifest this update:     Tue 12 May 2026 16:07:19 +0000
Manifest next update:     Tue 19 May 2026 16:07:19 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: N+rMj8IabT9Xa+mZlSjkgElPcH1x95sv0aoAbqrAARo=)
                          2: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
                          3: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
                          4: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7621 (0x1dc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: May 12 16:07:19 2026 GMT
            Not After : May 19 16:07:19 2026 GMT
        Subject: CN=6a035038-63a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:3d:44:76:d3:52:c2:82:62:09:d6:6f:51:
                    ba:71:05:b0:35:27:71:60:5f:8f:0e:0b:8e:b6:3e:
                    5f:0b:ee:d5:0a:71:f7:1b:b9:b2:9f:64:82:c6:63:
                    3d:2d:fc:74:5d:c7:ab:6a:e5:93:bc:3a:74:3e:9c:
                    2c:3f:6d:0d:3b:73:3a:02:ed:09:5e:65:82:a7:90:
                    37:2d:84:92:de:ca:f2:1e:df:05:80:9b:fe:b8:a8:
                    2f:27:20:1d:43:8c:44:a0:81:50:70:46:68:88:64:
                    20:b0:fd:29:41:ba:1a:75:bd:59:c9:a1:92:3b:39:
                    fb:b2:10:9c:60:13:bf:e8:8a:35:2f:e6:21:2a:35:
                    97:ea:92:f1:af:a7:a3:29:c3:ac:2d:47:44:aa:5b:
                    dd:0b:4a:7e:b3:33:99:01:1c:3b:7d:2f:d0:d9:91:
                    55:aa:dc:e9:1d:cb:9e:1f:26:37:f8:7e:4b:be:7a:
                    1f:a7:39:19:c4:6f:68:20:11:f0:05:78:68:61:5d:
                    f2:4d:1a:d0:03:11:d6:63:57:54:b1:9c:66:65:09:
                    bf:9c:0b:c3:35:24:4d:5d:75:54:d8:45:bc:05:28:
                    3c:f6:73:93:97:59:d0:e9:1a:ec:6d:75:b4:ec:9d:
                    d3:09:e8:19:c5:a4:5c:c8:09:72:7f:af:0d:58:0c:
                    27:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:85:F0:CA:59:B9:7E:94:0C:5C:3D:58:B8:0F:0E:BE:FF:18:29:61
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:67:b8:44:fb:81:0c:6b:4c:9c:72:9a:5f:7b:54:3f:12:
         cf:33:65:52:a1:52:ad:c2:c6:4e:bd:cd:ae:ab:d3:57:16:6e:
         2d:83:39:35:fe:bc:b6:e1:a2:41:2d:bc:1e:ba:db:70:d9:ea:
         57:78:ee:aa:24:70:4a:bb:1b:25:22:5b:90:38:2b:b7:8f:9d:
         b8:02:e4:25:cb:2e:3c:6b:92:e6:a5:81:a6:8d:4c:be:a2:0d:
         7d:bf:b4:4b:60:8e:4b:61:72:d2:d6:16:fb:9a:4d:46:2b:ee:
         5a:72:52:5d:07:83:f5:09:2d:e9:09:10:0d:20:4e:1c:97:ef:
         04:c4:3e:09:71:3a:16:ec:c4:ab:2e:4c:6f:8f:8f:5f:70:88:
         07:d2:6a:fb:bf:fb:9a:1f:5e:6c:dc:13:6d:3e:a8:d6:b0:12:
         ef:25:60:c9:cd:86:8a:95:2f:7a:a4:10:6d:a6:d2:c5:b0:05:
         e9:ad:bc:26:df:f2:27:f2:84:c6:52:43:42:e1:e7:d7:f8:b2:
         36:2b:02:7c:e0:c8:ab:17:d3:a9:ba:0c:2b:45:9c:7c:b6:ec:
         7d:57:50:4f:be:24:ff:32:1f:93:db:90:4d:d1:b9:f4:83:c3:
         26:bf:38:9f:c8:36:79:10:f8:52:58:ec:bf:95:60:5c:25:d7:
         72:74:c6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:37:17 2026 by rpki-client