Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          9PYuL6ZheKd6FuKPmvHiOkZpfA0ApngEbRH9WkIXPME=
Subject key identifier:   C8:72:69:42:2C:CD:8E:13:83:AE:0E:9C:90:25:8C:B0:CB:98:7E:DC
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       0503
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          04FC
Signing time:             Tue 12 May 2026 23:48:13 +0000
Manifest this update:     Tue 12 May 2026 23:48:12 +0000
Manifest next update:     Tue 19 May 2026 23:48:12 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: UezfqIgAXrP6ACqQbyvAoPUVOlkUxrBx98lCQuYw9YI=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1283 (0x503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: May 12 23:48:12 2026 GMT
            Not After : May 19 23:48:12 2026 GMT
        Subject: CN=6a03bc3c-fc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:c6:bb:a0:21:a6:30:8c:06:38:85:45:28:
                    c4:a8:f4:12:5e:a3:13:e8:b3:30:41:a5:8e:bb:1a:
                    9d:5f:96:0e:23:0d:eb:eb:e2:aa:6b:de:6d:a9:81:
                    df:f6:f3:2d:81:36:5b:5d:bb:c6:d1:1b:76:16:50:
                    86:70:04:87:1c:38:e8:63:c6:7e:36:07:15:55:60:
                    be:a2:27:9c:66:c9:f6:15:5e:2f:98:ba:de:3e:1a:
                    72:8a:25:78:1a:99:80:2e:cf:a5:fc:a9:ab:67:c6:
                    72:71:e2:3e:fa:53:ef:5b:8f:de:54:ca:75:b4:62:
                    a8:44:22:55:93:db:66:d4:1f:e1:55:26:50:ff:fd:
                    9b:27:05:71:29:14:b1:54:5b:9d:f0:21:e9:cd:47:
                    8f:43:67:22:ea:1b:15:e9:42:28:6a:29:bd:0f:3f:
                    9b:cf:27:3c:4a:68:8a:78:fe:2a:05:02:97:c1:2c:
                    15:fa:41:ec:3d:3b:ce:31:60:fd:f9:7d:6c:44:37:
                    82:74:94:f7:07:d4:2d:5f:3d:31:c8:6e:29:98:90:
                    80:9e:d1:78:20:f8:7a:9c:aa:83:57:a7:ed:18:a6:
                    14:09:b3:27:30:7c:8a:eb:b9:c5:53:25:5b:48:8c:
                    b2:36:a2:b3:bc:30:0a:bb:3f:bc:13:34:6d:8a:0f:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:72:69:42:2C:CD:8E:13:83:AE:0E:9C:90:25:8C:B0:CB:98:7E:DC
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:79:6c:eb:9b:0a:43:27:c1:94:31:16:f9:25:f2:06:55:
         8d:b7:29:32:9a:c2:43:90:b1:4f:a7:c3:82:b3:e7:35:37:4d:
         98:55:7d:69:50:94:0c:5a:d8:c7:0a:dc:82:4f:67:ff:22:9f:
         6e:1c:7e:37:30:2d:c5:0c:8a:b2:b7:cc:35:ba:5f:52:61:1b:
         6a:bd:ed:72:21:89:7e:c4:96:23:4b:1a:df:a1:cb:f2:a4:75:
         90:d7:ea:a5:85:91:36:2e:a9:26:0d:c1:e0:ab:90:90:c4:78:
         53:b0:2c:53:18:75:62:81:dc:c5:bd:e6:90:81:bd:91:d5:a9:
         b0:59:32:32:b6:e9:ef:49:6a:41:7f:e1:ee:e9:43:9b:86:54:
         e8:87:eb:6e:63:1b:c7:49:8c:a5:b1:ad:c0:17:4d:01:f7:3c:
         7c:51:f8:37:86:a4:0b:4f:a1:90:9a:96:25:c6:02:a0:c2:4f:
         fe:06:5e:4f:18:9e:de:7e:b4:a1:9e:ae:ce:5b:3f:d7:7c:42:
         e7:49:41:7a:60:cb:58:4d:5e:f6:d2:ca:fc:00:66:3c:21:12:
         93:f4:32:88:0b:3b:8c:30:84:11:03:51:b2:da:09:59:79:31:
         19:26:fc:a1:de:7e:83:a0:9d:60:8f:12:98:2a:11:2c:d7:be:
         3e:31:9c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:21 2026 by rpki-client