Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
File:                     tN_eECSMkMVYSwFupua0nnge2CA.mft (raw, json)
Hash identifier:          8GCc/+TbjEfooP1Iyws1JlZ3Ud00khcBF+tijaAqX3w=
Subject key identifier:   EB:FD:D6:5A:15:AD:EC:8E:3A:7D:1D:F5:C5:92:4D:22:E4:4C:E8:EA
Authority key identifier: B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20
Certificate issuer:       /CN=A9174A5B/serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
Certificate serial:       0733
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
Manifest number:          072B
Signing time:             Tue 24 Mar 2026 21:31:56 +0000
Manifest this update:     Tue 24 Mar 2026 21:31:55 +0000
Manifest next update:     Tue 31 Mar 2026 21:31:55 +0000
Files and hashes:         1: tN_eECSMkMVYSwFupua0nnge2CA.crl (hash: r8CP5BCB3gWCn31dPHtrRbHHxTgL1TFthttyoDTGovE=)
                          2: 9E9FA4C40AB011EC8906F464C4F9AE02.roa (hash: rVMgOf/LdOya/esBRnd1GGohhsXmnrr7k+gFsh7Hjfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl
                          rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1843 (0x733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174A5B, serialNumber=B4DFDE10248C90C5584B016EA6E6B49E781ED820
        Validity
            Not Before: Mar 24 21:31:55 2026 GMT
            Not After : Mar 31 21:31:55 2026 GMT
        Subject: CN=69c302cc-2e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:06:cf:1a:ef:fa:dd:35:82:80:ce:ba:3d:0d:
                    de:45:22:26:fe:da:0a:e0:00:8e:6a:fb:88:0a:52:
                    fb:b0:55:ee:7c:66:ab:68:84:15:ea:50:0d:fc:2f:
                    75:ca:a5:5b:f4:55:5d:4a:d6:3f:64:05:3f:6e:02:
                    32:af:ae:4d:e8:dd:c5:42:52:b0:98:ff:aa:a2:be:
                    24:31:41:7d:07:34:b1:68:0e:c0:01:f3:f7:a0:e6:
                    15:3d:c6:7b:06:db:36:2d:be:f1:8c:43:5b:36:c6:
                    21:f1:91:74:bc:e2:43:a9:be:b7:dc:e2:60:7c:62:
                    d8:69:33:56:79:8c:c9:5c:1c:6a:3c:b2:c2:14:79:
                    2f:51:b1:1c:0f:5e:39:91:43:fb:cf:0c:8a:3f:a9:
                    b3:b0:10:d7:0b:30:98:f0:b3:fd:87:d5:e8:f8:eb:
                    04:7c:f6:c6:10:22:bd:10:83:d6:22:81:d1:80:5d:
                    c2:99:a3:f6:17:20:41:8b:c7:24:18:cf:67:1e:14:
                    fc:73:8c:d6:04:4b:3d:76:8e:43:6f:8c:8d:52:a6:
                    5f:b7:fa:8a:30:ab:12:7e:0e:dc:97:b9:9a:26:0f:
                    cc:ab:c7:1c:81:6a:e2:d3:a1:b9:da:7d:b1:4f:69:
                    01:8a:78:0d:c2:fc:33:9a:5a:8e:35:1c:09:96:8f:
                    fa:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FD:D6:5A:15:AD:EC:8E:3A:7D:1D:F5:C5:92:4D:22:E4:4C:E8:EA
            X509v3 Authority Key Identifier:
                keyid:B4:DF:DE:10:24:8C:90:C5:58:4B:01:6E:A6:E6:B4:9E:78:1E:D8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tN_eECSMkMVYSwFupua0nnge2CA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A5B/11E96B34701211EB8BEE0A1FC4F9AE02/tN_eECSMkMVYSwFupua0nnge2CA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:af:fc:af:b2:b3:63:f2:5a:9f:bf:3e:b9:8f:68:c7:cf:6b:
         cd:62:e3:1b:0b:37:30:a3:19:26:30:44:7f:2d:ac:21:59:67:
         09:a4:1f:6f:46:c1:67:d9:40:1b:bc:87:48:57:63:1a:ab:c7:
         e5:9c:ab:62:38:fb:05:32:21:22:00:80:cc:25:09:28:46:85:
         85:19:8c:0c:67:ca:20:02:05:e3:54:66:33:98:2e:41:c3:89:
         30:b3:09:39:0e:44:19:46:91:d9:52:36:75:6c:8d:d5:ec:6a:
         1e:6f:bb:4b:16:ef:a8:07:72:c4:68:ef:a7:3d:c8:0d:57:f7:
         53:8e:13:97:d1:f5:9c:6d:a3:fd:7c:1a:2b:f4:0a:80:64:b4:
         29:a9:d0:86:12:07:04:10:27:bc:e5:f7:44:a7:2d:86:26:e0:
         f9:6e:c7:93:ab:e6:36:9f:0a:40:39:ff:6b:c0:2d:f5:ac:4f:
         ba:18:ae:87:d8:9c:c2:1c:4d:4e:c4:a9:9f:89:79:48:e3:6b:
         c1:53:04:16:6e:6f:f0:4c:5d:02:4d:c4:ba:ec:46:c3:f7:31:
         bb:5d:ee:a7:37:3b:c5:b1:09:13:77:9b:8c:de:5c:53:e4:74:
         ec:49:7c:ae:e2:fe:04:24:d4:47:52:db:61:43:ec:b5:70:8e:
         a7:64:2e:0c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRBNUIxMTAvBgNVBAUTKEI0REZERTEwMjQ4QzkwQzU1ODRCMDE2RUE2RTZCNDlF
NzgxRUQ4MjAwHhcNMjYwMzI0MjEzMTU1WhcNMjYwMzMxMjEzMTU1WjAYMRYwFAYD
VQQDEw02OWMzMDJjYy0yZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+AbPGu/63TWCgM66PQ3eRSIm/toK4ACOavuIClL7sFXufGaraIQV6lAN/C91
yqVb9FVdStY/ZAU/bgIyr65N6N3FQlKwmP+qor4kMUF9BzSxaA7AAfP3oOYVPcZ7
Bts2Lb7xjENbNsYh8ZF0vOJDqb633OJgfGLYaTNWeYzJXBxqPLLCFHkvUbEcD145
kUP7zwyKP6mzsBDXCzCY8LP9h9Xo+OsEfPbGECK9EIPWIoHRgF3CmaP2FyBBi8ck
GM9nHhT8c4zWBEs9do5Db4yNUqZft/qKMKsSfg7cl7maJg/Mq8ccgWri06G52n2x
T2kBingNwvwzmlqONRwJlo/6mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv91loV
reyOOn0d9cWSTSLkTOjqMB8GA1UdIwQYMBaAFLTf3hAkjJDFWEsBbqbmtJ54Htgg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE1Qi8xMUU5NkIzNDcw
MTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtNVllTd0Z1cHVhMG5uZ2Uy
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROX2VFQ1NNa01WWVN3RnVwdWEwbm5nZTJDQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEE1Qi8xMUU5NkIzNDcwMTIxMUVCOEJFRTBBMUZDNEY5QUUwMi90Tl9lRUNTTWtN
VllTd0Z1cHVhMG5uZ2UyQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF6/8r7KzY/Jan78+uY9ox89rzWLjGws3MKMZJjBEfy2sIVlnCaQfb0bBZ9lA
G7yHSFdjGqvH5ZyrYjj7BTIhIgCAzCUJKEaFhRmMDGfKIAIF41RmM5guQcOJMLMJ
OQ5EGUaR2VI2dWyN1exqHm+7SxbvqAdyxGjvpz3IDVf3U44Tl9H1nG2j/XwaK/QK
gGS0KanQhhIHBBAnvOX3RKcthibg+W7Hk6vmNp8KQDn/a8At9axPuhiuh9icwhxN
TsSpn4l5SONrwVMEFm5v8ExdAk3EuuxGw/cxu13upzc7xbEJE3ebjN5cU+R07El8
ruL+BCTUR1LbYUPstXCOp2QuDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:27 2026 by rpki-client