Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          ltvtI4D1qlb/pVA9FQyTJXpINBL70fX4D9tZbjQdfv8=
Subject key identifier:   DD:47:DE:D2:11:A7:7B:81:89:E2:75:0B:45:19:3C:37:8B:D8:EF:3F
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          0B
Signing time:             Wed 25 Mar 2026 08:19:44 +0000
Manifest this update:     Wed 25 Mar 2026 08:19:43 +0000
Manifest next update:     Wed 01 Apr 2026 08:19:43 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: xLcRmWzAPvhtQ+HKhY3kTFz1pLBFeMXDmmmw5MNrFIA=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: Mar 25 08:19:43 2026 GMT
            Not After : Apr  1 08:19:43 2026 GMT
        Subject: CN=69c39aa0-6d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:e0:a9:bd:16:78:e6:26:91:c6:32:25:9d:
                    b3:d3:11:c4:18:35:f5:a0:1e:14:5d:fa:65:e7:73:
                    be:57:5c:54:4d:88:c6:8d:ec:29:a5:6d:09:99:78:
                    a1:4e:b4:aa:dd:ca:bf:27:be:64:d9:57:8c:1d:ce:
                    a9:ac:c3:b8:e2:31:36:75:15:8a:44:cb:fc:3b:04:
                    fa:6d:90:e2:20:15:82:df:7f:99:10:53:c5:fe:eb:
                    d8:91:33:84:fc:07:fd:9b:5a:6d:26:6f:d0:5d:b6:
                    48:87:a2:df:31:19:18:fb:22:ac:c7:99:ce:b5:cf:
                    c7:c7:bb:6e:eb:23:52:75:6e:a8:bc:09:df:d6:94:
                    ac:5f:c4:03:78:a5:60:ec:bd:a1:2b:7b:e8:f4:fe:
                    2b:df:62:46:5a:f8:84:f4:ad:58:c5:90:14:13:ec:
                    1a:b3:db:b0:75:c2:46:00:ee:e1:e6:88:97:dd:6b:
                    2b:ca:3f:09:cd:07:2c:f7:c4:08:74:d2:98:1a:68:
                    5c:ad:50:ad:77:cf:ae:7f:4b:98:30:38:68:5e:9e:
                    99:ce:c2:33:20:df:7e:38:47:5d:4b:56:92:f2:df:
                    16:af:89:8e:7a:76:26:d2:14:92:d0:22:f6:c2:a1:
                    2f:f2:b9:e9:66:72:1b:7d:9f:e0:1f:39:db:25:7b:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:47:DE:D2:11:A7:7B:81:89:E2:75:0B:45:19:3C:37:8B:D8:EF:3F
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:59:85:de:7a:75:12:0b:02:76:aa:4e:5e:d9:2a:4a:1e:
         17:d4:71:a9:11:a6:6e:f2:51:70:47:06:b8:4e:c6:e4:08:11:
         74:90:ab:79:65:e3:0c:68:31:77:ea:68:df:eb:3e:3b:87:af:
         ce:59:6a:d0:04:ad:c2:be:54:39:6a:5c:94:3d:dd:3a:7a:cb:
         62:60:58:68:6f:4b:1c:d1:5a:2b:b5:fb:ff:72:04:71:da:07:
         49:40:3b:79:cb:07:fe:42:ea:5b:72:94:bd:b2:23:44:42:71:
         fb:ae:e7:77:59:8b:c5:e3:14:11:94:3e:a5:19:9f:55:af:39:
         0c:dc:72:7e:2b:49:0c:e2:43:9d:e4:f6:62:4a:18:73:7c:bc:
         01:fd:7a:07:53:78:4a:3c:14:93:20:96:df:36:6c:54:4d:cb:
         91:9e:07:75:2f:16:b4:30:80:ad:88:d4:2d:86:1f:3d:b6:5b:
         d7:77:8c:f0:70:01:dc:e6:af:05:01:26:aa:cb:e8:72:07:31:
         9d:ae:17:e7:fc:a4:47:3d:f5:c3:a4:92:54:7a:da:29:89:2d:
         14:9e:9c:74:5c:8e:8f:cc:f1:5d:83:05:8b:30:26:d3:f8:c1:
         07:af:19:dd:5e:cc:04:d5:33:58:fb:ae:00:cb:66:2e:60:ea:
         1b:e2:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:38 2026 by rpki-client