Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          /7VN96HPj6tVIjnd2JYkpMta8EnT2bUtLfokC/epI7U=
Subject key identifier:   49:07:8D:FB:33:7F:AB:59:06:0D:BB:EA:F8:3B:20:F0:09:F3:9B:7A
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          0101
Signing time:             Wed 25 Mar 2026 05:23:19 +0000
Manifest this update:     Wed 25 Mar 2026 05:23:18 +0000
Manifest next update:     Wed 01 Apr 2026 05:23:18 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: Hm7esIi2+NKbP4qw6fAG8G09q0aF0peZ9A7o4+ODEUQ=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: OpU18Mvs2z700dAbPWy+rw1+oGqs2hvGC4cmM9zQ/YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: Mar 25 05:23:18 2026 GMT
            Not After : Apr  1 05:23:18 2026 GMT
        Subject: CN=69c37146-8ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:91:fe:13:01:56:1e:6f:78:cf:7b:e9:b9:
                    16:ff:89:83:97:40:07:bc:f2:e0:ee:3f:6b:a4:c0:
                    92:9b:39:05:ca:0e:45:71:b1:65:8b:31:c8:13:72:
                    fe:ac:4a:0a:2a:85:ff:82:3f:9f:7e:17:68:f4:7c:
                    de:8a:e0:9d:34:f6:32:7b:69:52:98:32:8c:cf:bb:
                    f6:80:39:e2:b6:0b:ca:c0:1b:f5:e5:b1:f8:83:e4:
                    9d:b9:74:dc:31:29:2a:a7:cd:74:b2:36:c3:df:2c:
                    25:53:6a:ca:e0:b8:d2:40:6e:63:17:8f:64:60:82:
                    4a:c0:12:58:b5:5c:f2:9d:c0:37:75:ee:54:2b:99:
                    07:eb:b8:df:fb:6c:09:1e:8b:f1:d2:5d:a0:8c:23:
                    2b:26:e4:5c:79:00:17:d0:90:38:de:51:c5:4a:a9:
                    b5:2a:0a:32:3c:25:db:ab:21:58:08:8e:ac:1d:57:
                    f6:00:4b:7b:cf:f0:92:93:6f:05:76:15:17:c4:15:
                    d1:e2:3b:4a:d5:e0:32:73:2c:36:d4:49:55:c1:66:
                    dd:86:0f:87:d2:c5:d0:4a:6b:79:5d:5c:59:1f:00:
                    15:64:30:34:ed:b5:a8:b1:4b:a4:27:5b:23:8c:31:
                    7f:8e:02:f7:52:52:8b:f6:bc:c0:12:bd:97:23:eb:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:07:8D:FB:33:7F:AB:59:06:0D:BB:EA:F8:3B:20:F0:09:F3:9B:7A
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6b:22:3b:b3:8d:63:e8:a2:9e:f6:51:dc:ce:70:11:66:64:
         08:18:20:e4:16:1c:49:e1:e2:b9:7d:eb:b8:dd:08:82:94:36:
         e5:e9:52:7d:dc:81:7c:ea:c9:2f:ad:0a:23:5f:ed:6b:c3:43:
         54:72:f5:17:8a:be:a4:c1:20:58:0f:8f:63:d1:68:58:b2:6e:
         07:28:ae:f3:e0:79:fd:4b:3e:bb:ac:ec:83:c1:fa:46:14:60:
         f0:0f:43:85:dd:8b:bf:27:74:2f:5c:29:2e:53:12:a0:c2:02:
         ea:15:4b:ff:15:32:89:87:69:79:08:dd:e6:ba:df:a2:bd:ef:
         ea:f6:c0:02:11:6c:19:78:24:c8:b0:bd:5b:61:62:42:58:ac:
         06:ef:d7:d5:c5:30:e0:81:e2:5d:a6:17:63:22:56:fe:73:41:
         33:43:7e:df:44:c6:7d:ae:88:8f:14:c6:0b:7a:d4:c3:03:e1:
         f7:d5:b0:64:06:bd:a9:cb:fd:49:3f:e9:38:2b:e8:f7:eb:94:
         56:d5:33:1c:80:c5:f8:07:1c:8e:d6:16:ec:a4:74:12:2a:99:
         ea:cf:98:5d:d7:0e:49:f6:7d:74:08:e6:48:90:5d:1e:df:f9:
         73:63:9d:9b:bc:62:6e:8b:d1:47:4d:28:3e:e0:b4:0f:20:75:
         3a:bd:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:13 2026 by rpki-client