Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          MEeB9wC1U4pZBtbjcDZV+aeAOi33LgF9AKdj6ncB/Js=
Subject key identifier:   DB:F6:15:26:39:C7:DB:FB:8A:83:9F:FC:DB:71:0E:52:70:F2:01:AF
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          24
Signing time:             Wed 13 May 2026 08:58:50 +0000
Manifest this update:     Wed 13 May 2026 08:58:49 +0000
Manifest next update:     Wed 20 May 2026 08:58:49 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: rGyQ0uwLuZ4t9xUBJnruw8M+FZ5eKO9j8XXwmSZT8dA=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: May 13 08:58:49 2026 GMT
            Not After : May 20 08:58:49 2026 GMT
        Subject: CN=6a043d4a-dc06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:80:f8:bf:f5:16:3f:b7:c8:39:9b:b1:75:
                    0e:a4:9f:2c:57:1d:cd:26:38:02:3e:63:ee:9c:49:
                    1a:47:9a:cc:3e:d5:3d:4d:c6:65:22:de:50:61:ba:
                    45:33:87:a2:c9:0b:9e:f0:19:3f:c8:44:a4:a4:3b:
                    39:84:7f:5e:8e:80:c7:63:63:3b:e3:8a:1b:a8:e8:
                    64:03:6e:58:c3:ef:e1:c5:b7:96:63:df:76:15:22:
                    2d:3e:d1:e0:42:22:05:63:6d:04:40:de:fd:d3:c7:
                    14:41:db:86:86:37:a5:41:e1:13:29:b1:af:21:90:
                    8d:e1:52:20:93:94:f4:ed:8a:65:bf:9b:51:eb:b1:
                    db:4a:2f:8e:9a:29:15:78:3b:17:be:28:2a:a3:3d:
                    0c:7a:d6:ad:37:ad:63:c3:bf:f1:d5:f2:cb:25:f9:
                    76:ff:f0:60:9e:f2:26:8d:00:8b:5c:97:33:a6:16:
                    92:90:e5:59:5c:67:c1:13:57:12:cc:da:b6:96:44:
                    3b:d4:5a:6f:23:27:38:ed:e3:9e:a9:20:e8:cb:a6:
                    2f:c9:33:06:6f:79:1c:e8:79:e8:98:a4:30:29:4b:
                    ae:d9:92:cb:72:96:43:e1:a4:f3:e3:73:36:88:9c:
                    50:32:8d:a4:a9:97:30:30:cc:2a:05:7f:29:64:26:
                    dd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F6:15:26:39:C7:DB:FB:8A:83:9F:FC:DB:71:0E:52:70:F2:01:AF
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:81:76:14:99:22:8d:f5:90:c6:0b:e5:bb:6e:d7:a0:bb:ba:
         b8:bb:c0:eb:1d:7b:64:86:c9:5a:6c:fc:ad:ff:de:26:a5:5c:
         37:88:3b:83:99:49:53:9c:1a:b9:65:ef:19:8c:89:a4:48:11:
         9e:2a:9c:18:75:89:17:2b:f0:56:71:8a:1c:39:01:47:16:1a:
         81:7a:ad:9a:be:38:4d:b0:c8:e1:33:72:c4:c9:0c:5e:ec:ff:
         03:a4:8e:b5:60:64:0b:aa:fc:55:7c:82:be:f7:ea:9a:d6:94:
         ff:f2:c8:1c:a3:09:cb:1c:ff:74:69:f7:08:79:23:b6:ce:56:
         26:e0:78:96:91:a5:f8:29:1c:9e:31:81:b9:16:b6:78:2e:49:
         8d:c3:8f:b3:f0:2f:eb:c6:c3:22:2a:98:4a:4d:70:da:b5:98:
         7f:4c:87:46:3f:bb:bb:e5:a5:de:31:e2:16:9d:09:b8:6c:2d:
         0e:49:d6:7f:4c:bf:15:eb:50:b9:e3:55:e8:a3:a0:25:1f:4b:
         85:b9:16:fa:2a:66:80:4f:d9:01:c3:b2:62:6a:1f:11:ad:0a:
         82:7c:51:6b:15:65:73:9b:0f:be:30:63:f2:0e:ae:6b:b7:1a:
         c6:57:ad:9c:8e:ff:03:d7:11:ef:ba:23:47:b4:ce:f1:bd:9b:
         75:08:49:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:07:28 2026 by rpki-client