Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          Wnj3lDdpisthxHj7v8UIc5lcrnbDD8lYFUg8XLtZtg0=
Subject key identifier:   8D:56:2B:F5:01:B1:11:70:F0:5F:4D:5E:34:60:51:2B:80:CF:18:27
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1130
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          1121
Signing time:             Tue 12 May 2026 17:18:18 +0000
Manifest this update:     Tue 12 May 2026 17:18:17 +0000
Manifest next update:     Tue 19 May 2026 17:18:17 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: hJtDctdNolvxXrkwecDQEjLouVUmQeAehdGFl3ZnNz0=)
                          2: 33F4955E3A3411F1992413829C833773.roa (hash: xzrc0aZMkP3QUOKDSz7VwBlE/D9wG/T3IpXcxQAIOWA=)
                          3: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: 6KS9OCsrsIMN/yuwvdA00TtrzykhEoQMpStopN33PPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4400 (0x1130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: May 12 17:18:17 2026 GMT
            Not After : May 19 17:18:17 2026 GMT
        Subject: CN=6a0360da-6425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:ce:32:5e:82:00:52:93:e7:1b:75:c3:17:
                    16:e5:6e:03:63:3f:96:15:cb:b4:4e:ad:20:60:c8:
                    d4:88:ba:d0:d9:3d:00:43:96:1d:ab:3b:3b:0f:e4:
                    9a:85:d3:4f:4d:1b:bd:30:50:91:de:9a:23:11:18:
                    be:1b:8e:9a:8a:c2:9c:e7:ca:36:6c:99:1d:6d:b6:
                    49:c1:bb:f8:e9:e6:91:8a:48:f4:cd:2c:4d:4f:08:
                    79:f9:bf:6d:c7:3f:17:b7:14:50:4a:56:bd:e4:fe:
                    17:9f:53:d5:01:be:41:0f:51:a7:bb:56:40:57:2b:
                    84:3c:5a:ab:a9:7e:85:5c:09:2a:02:63:64:a5:ba:
                    93:f4:7e:86:53:ea:e1:bf:f7:98:a7:32:dd:eb:32:
                    07:0a:dc:8a:8e:05:00:0b:df:6d:d2:67:b0:d5:36:
                    3e:4f:81:6a:bf:ee:06:d1:34:10:2a:ad:9f:fd:52:
                    5e:49:9a:81:7f:71:e0:99:44:e6:c4:6f:55:09:dc:
                    7c:50:aa:ad:66:5b:29:66:b6:b0:87:fe:9b:b2:44:
                    a3:a4:bb:74:f0:8b:70:8b:c3:40:93:2a:97:92:c1:
                    13:3e:42:fa:dc:e7:32:75:93:63:b4:86:c7:6d:47:
                    6c:ce:be:f8:05:c7:d1:59:7b:5f:f5:e0:95:2d:24:
                    a3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:56:2B:F5:01:B1:11:70:F0:5F:4D:5E:34:60:51:2B:80:CF:18:27
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:34:3e:86:dc:c4:4b:d3:df:b8:d9:9b:2d:a0:1b:83:ca:06:
         5d:21:ce:88:2d:d4:b2:f5:6f:3a:45:12:f1:71:6d:64:ab:3f:
         e9:88:33:ae:21:3b:38:fb:14:ca:4f:fa:19:f8:8e:80:bb:8f:
         f3:fa:55:e0:bf:d2:52:0b:4a:d3:35:7b:c4:7c:12:df:b7:3f:
         d0:a3:75:cf:12:05:f4:cb:d9:cb:1f:a1:fa:87:e5:8b:82:fc:
         a1:7d:f4:34:c2:de:31:85:31:de:cf:4f:38:58:20:3b:78:69:
         35:76:d5:44:d1:7f:c9:b2:ca:3f:b1:36:f6:6f:1b:e9:7e:28:
         3a:7f:e6:08:08:7d:b9:62:25:24:12:27:87:73:1d:6c:02:a9:
         ce:54:d9:d3:48:5c:34:19:46:31:26:62:43:24:3a:5a:0b:fe:
         b7:f9:14:d4:a3:de:97:b0:21:af:c6:83:a2:c4:7b:82:2f:49:
         92:e6:a5:99:a3:18:6f:9b:0f:fe:0c:9a:8d:88:97:83:67:c1:
         e7:e9:2f:59:de:d2:b0:c3:12:30:ae:7e:f2:c7:f3:84:1f:e2:
         8b:f1:0f:b2:75:82:01:86:d0:e3:68:d3:56:b6:0d:8a:0a:40:
         44:65:ad:8f:8a:f0:56:70:e3:ab:94:e9:8c:a8:6f:20:8e:3c:
         e2:3a:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:00 2026 by rpki-client