Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
File:                     eekj1QaVf9MN0m1ieTubQPj-iVY.mft (raw, json)
Hash identifier:          1i8T1XVwaua9v90DApmeHexy7REhFwpr4AmXmRCJSE8=
Subject key identifier:   7B:DB:50:A3:A1:CE:E3:B1:AC:C0:18:30:00:16:96:7A:D8:79:83:33
Authority key identifier: 79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56
Certificate issuer:       /CN=A916C4A5/serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
Manifest number:          011B
Signing time:             Wed 13 May 2026 05:56:41 +0000
Manifest this update:     Wed 13 May 2026 05:56:41 +0000
Manifest next update:     Wed 20 May 2026 05:56:41 +0000
Files and hashes:         1: eekj1QaVf9MN0m1ieTubQPj-iVY.crl (hash: JMT0C7md9JMCcpAxpGQx+wFxiavVvILucJDXcWCa1P4=)
                          2: FB82BBA0A24B11EFA8802F31C4F9AE02.roa (hash: ZBezG2thToCy6B0tzjqVjnjNrDP9Xb/gIEdCUKv3SqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl
                          rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C4A5, serialNumber=79E923D506957FD30DD26D62793B9B40F8FE8956
        Validity
            Not Before: May 13 05:56:41 2026 GMT
            Not After : May 20 05:56:41 2026 GMT
        Subject: CN=6a041299-8dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:36:4f:13:56:3b:08:fe:99:1e:e3:9e:2b:
                    4e:d5:22:66:38:7e:68:8b:0e:01:f3:14:64:f6:9b:
                    df:52:4f:65:de:9c:1e:59:ac:4d:3b:2d:4c:6a:2a:
                    72:a3:04:a4:6e:15:81:44:59:7d:fd:f2:b1:ea:64:
                    a7:4b:9b:c4:82:1c:1e:64:5d:23:ac:44:27:16:c5:
                    b7:1b:77:62:b7:26:88:bd:a8:1c:36:b6:06:99:d9:
                    3d:e9:c7:14:cd:3b:99:90:3f:9c:9f:1c:da:c0:fb:
                    d0:3d:6d:54:55:77:f8:ed:4b:7b:b6:9d:01:0f:41:
                    7a:c5:29:36:7d:76:6e:99:ae:82:ca:bc:09:d5:43:
                    e3:b0:66:c1:e1:54:d3:e0:37:93:eb:e8:e4:ec:0e:
                    43:15:4c:c8:de:12:4a:70:62:a7:8a:e1:15:a8:da:
                    cb:ac:74:f8:f5:b6:e3:5e:24:7d:be:58:c9:c0:b6:
                    a7:e6:9b:75:27:ae:51:55:20:f4:62:27:71:86:96:
                    e3:81:42:0b:42:c2:4f:ee:39:4f:bf:39:d1:1c:7e:
                    3c:14:fa:cd:63:17:09:a5:56:23:df:b3:d7:08:17:
                    39:8a:b7:7d:92:5a:17:5f:7b:59:63:b1:a1:3f:76:
                    5a:4a:4b:89:b6:07:5d:90:36:0f:f0:52:14:f8:28:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:50:A3:A1:CE:E3:B1:AC:C0:18:30:00:16:96:7A:D8:79:83:33
            X509v3 Authority Key Identifier:
                keyid:79:E9:23:D5:06:95:7F:D3:0D:D2:6D:62:79:3B:9B:40:F8:FE:89:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eekj1QaVf9MN0m1ieTubQPj-iVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/C73A3894A23411EF978C8D6DC4F9AE02/eekj1QaVf9MN0m1ieTubQPj-iVY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a8:8e:c6:5e:b9:a3:ae:af:ed:ae:3c:69:6e:97:b1:6a:17:
         cb:18:28:8b:69:3c:a8:88:13:01:18:a1:2b:b1:0c:f0:9d:d9:
         11:76:00:26:b2:45:b5:44:6f:2f:14:60:36:63:2b:c9:29:3e:
         e4:68:c1:8a:b9:61:89:1b:36:91:6c:43:3f:f6:ac:63:a2:f3:
         4c:c0:7e:43:75:3a:bf:3d:c6:55:77:0c:47:3f:64:14:fc:ca:
         c4:2f:00:b1:da:6b:4b:f1:17:02:78:b9:6e:eb:d7:d9:4c:c3:
         ae:68:36:7e:75:d6:93:da:18:db:97:b5:cc:07:84:34:2b:11:
         6d:d6:97:8e:46:24:6c:c9:ec:86:36:c2:ff:96:2f:3d:c7:fe:
         99:ec:24:c3:2b:f6:54:f6:c9:18:95:5a:c5:1b:2c:41:cf:47:
         cf:02:8a:20:ef:45:5f:30:1c:1b:b6:ee:db:99:37:9b:fa:f1:
         3b:b1:e8:7e:4f:6f:83:7e:65:d1:b4:3f:cc:8b:37:4e:27:e7:
         2f:b7:fb:35:87:48:43:08:00:92:7a:8d:a2:b4:77:3b:93:62:
         02:8c:f3:84:e1:1a:79:56:df:f5:6d:af:5d:ff:94:76:49:e8:
         69:f8:c9:d4:19:13:e2:a1:37:bd:17:92:18:92:0a:08:8f:ff:
         90:21:60:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:30:01 2026 by rpki-client