Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft
File:                     EAiP7ctRWnPwDu3X7GDodfnfCvY.mft (raw, json)
Hash identifier:          6+QuLELVHBZcShX/rJP2t+z/WOIQ/b276CRPrAp/h50=
Subject key identifier:   01:DE:29:FF:19:64:DD:22:7F:26:E4:95:9F:42:AD:D8:4A:34:91:85
Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6
Certificate issuer:       /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
Certificate serial:       01CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft
Manifest number:          01C5
Signing time:             Wed 25 Mar 2026 03:04:23 +0000
Manifest this update:     Wed 25 Mar 2026 03:04:23 +0000
Manifest next update:     Wed 01 Apr 2026 03:04:23 +0000
Files and hashes:         1: EAiP7ctRWnPwDu3X7GDodfnfCvY.crl (hash: fm5wjueXU9zOeVC5c9jgJm6JGQd/BCVwXm9p9Lpbdgs=)
                          2: 29D7838672F611EEB309873EC4F9AE02.roa (hash: A4vS1iBIFna31/2+QmW4fzKxufr25An/KZ05zs9GbyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl
                          rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
        Validity
            Not Before: Mar 25 03:04:23 2026 GMT
            Not After : Apr  1 03:04:23 2026 GMT
        Subject: CN=69c350b7-c089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:97:a8:81:06:84:59:b3:3a:95:2b:6e:50:10:
                    f4:e7:f8:e0:07:51:92:fd:08:a9:7a:a8:3c:50:30:
                    53:ea:ec:55:88:e1:d0:eb:87:ba:3a:4c:1f:36:1a:
                    c7:49:f9:f2:ed:ba:8f:b0:f5:78:45:a8:20:3e:8a:
                    70:7a:5f:2e:8c:54:0b:40:f0:b9:ab:e2:b8:5b:5f:
                    24:49:d9:42:28:67:05:6e:e5:78:8f:65:bc:1a:28:
                    62:91:e5:48:5d:b1:d4:7d:f4:e7:fc:69:36:a7:3c:
                    c3:d4:7b:e3:4b:54:dc:02:12:f9:20:73:f5:af:30:
                    ce:f8:fe:5f:db:3e:7d:73:78:58:88:08:21:9c:c5:
                    32:01:fa:bc:00:8b:b3:80:c7:47:20:16:5f:52:4b:
                    b3:7c:c2:11:2d:35:95:a0:7e:08:d2:79:d3:5e:9b:
                    a9:3d:8e:dc:50:35:bf:c8:53:aa:4b:81:4c:b6:7b:
                    9f:32:3d:94:08:d8:d2:25:22:ea:50:d3:7f:b9:2f:
                    86:4f:ab:75:75:e6:31:c1:bf:52:22:a5:7e:34:bd:
                    69:fa:3a:6b:ad:3e:70:d6:3f:95:53:3d:2f:bb:69:
                    f4:d0:31:7c:0d:67:e9:64:8e:49:b5:ab:33:85:76:
                    ad:d1:49:59:eb:72:ca:83:02:0b:c7:ca:0b:6c:f1:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DE:29:FF:19:64:DD:22:7F:26:E4:95:9F:42:AD:D8:4A:34:91:85
            X509v3 Authority Key Identifier:
                keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:50:c1:d1:ea:ee:a3:8e:3b:df:fa:ba:54:57:db:6f:4c:
         17:a7:ec:a7:bc:af:78:12:b7:6f:ff:bf:3e:78:99:01:9e:bd:
         24:a5:a5:2b:6d:7e:7d:c1:b6:5d:80:d5:12:fb:28:59:ba:a9:
         91:bc:b6:b4:ea:14:7c:3f:03:66:78:2e:de:86:69:79:cd:b5:
         00:ac:47:95:ed:41:af:40:f7:41:11:52:e8:56:48:7b:cc:86:
         cb:7d:89:2a:1a:9c:93:db:c1:be:23:d3:ef:d3:3d:eb:57:08:
         ae:f5:da:1b:0b:b5:6a:ce:41:e3:1d:70:2e:ce:e2:41:ef:c3:
         69:85:df:36:fc:66:5f:71:22:b3:e9:ce:f6:e5:97:1b:7b:84:
         54:ac:91:bb:aa:5f:03:0b:69:e7:81:e0:16:c1:60:2c:18:7b:
         89:70:b6:03:04:99:0f:f6:63:6d:9a:b4:3c:f1:c1:f4:6d:1a:
         b6:0a:bf:1b:56:90:f8:29:3a:1e:4c:2d:5b:eb:7b:ef:15:2a:
         d4:de:f9:76:b1:a9:7e:32:a3:48:24:04:7a:79:e1:47:39:84:
         03:80:00:9c:e5:05:89:ac:61:d5:db:ae:4c:be:4d:49:c9:b5:
         8a:94:dd:84:3f:a8:c3:e6:47:53:ed:8e:ea:21:44:98:74:14:
         41:48:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:33:04 2026 by rpki-client