Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File:                     EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier:          XCui53l4VofFh2jAaGyQsVhmHZmR5o8YodUobJo425Q=
Subject key identifier:   83:42:7B:CF:63:E8:B5:8A:9B:5E:7D:6D:81:94:7B:29:E3:DF:EE:21
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number:          0148
Signing time:             Mon 11 May 2026 05:17:38 +0000
Manifest this update:     Mon 11 May 2026 05:17:38 +0000
Manifest next update:     Mon 18 May 2026 05:17:38 +0000
Files and hashes:         1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: Uvag5Fzvr50NRw2tv+VZIWqn98jt8u4fj9HZABWYFiA=)
                          2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: May 11 05:17:38 2026 GMT
            Not After : May 18 05:17:38 2026 GMT
        Subject: CN=6a016672-b18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:d2:44:8c:06:23:ea:cb:93:24:94:c0:ab:
                    0e:c2:ac:4b:56:a1:5b:12:cf:d6:03:77:78:aa:f2:
                    3e:f4:7a:35:e8:55:85:b9:3c:9b:19:c8:9b:a5:b3:
                    38:3c:85:88:fb:dd:04:7d:84:79:3d:5e:e3:ac:4c:
                    2b:96:e4:53:17:20:71:a5:64:84:70:3c:9f:be:a9:
                    6b:80:3a:cf:1a:9e:59:69:3c:c1:b7:5e:43:93:a6:
                    f0:f1:47:d2:6d:3d:f9:8f:63:db:08:05:a2:b1:d9:
                    47:dc:4a:33:23:ca:7d:37:1f:f2:05:44:77:86:40:
                    97:be:26:9c:79:bf:0a:fd:d9:fb:79:05:93:82:0b:
                    d4:0d:44:57:a0:5d:1d:35:a7:f3:96:ca:cb:58:9e:
                    8f:40:7c:1b:ac:dc:4a:e6:44:e8:b9:66:4f:c1:3c:
                    7c:a2:b1:77:a7:fc:44:ba:95:b7:89:d5:56:ad:71:
                    67:40:a6:f1:ad:dd:62:5c:bb:da:b9:ff:10:7f:27:
                    26:76:35:38:23:90:0e:57:6d:12:0a:15:2d:14:f3:
                    d6:87:40:c0:22:96:6a:c7:da:46:85:12:16:15:03:
                    56:91:77:f7:3c:fe:b8:22:c9:ac:d8:e1:77:a3:67:
                    c7:37:55:95:ae:bb:ce:00:90:8e:f6:0c:1c:ee:3a:
                    f2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:42:7B:CF:63:E8:B5:8A:9B:5E:7D:6D:81:94:7B:29:E3:DF:EE:21
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fd:cf:d7:50:96:76:61:da:eb:d8:18:ff:ac:96:ce:26:3e:
         10:58:26:3d:5f:cc:68:ba:5b:a1:0b:a7:be:d5:32:5f:e8:d7:
         df:08:48:c6:59:44:cc:e9:d5:14:89:4e:5b:86:bc:64:48:e2:
         97:25:93:81:42:ba:10:dd:32:ee:12:4a:cd:43:06:a2:88:da:
         71:39:d7:e0:c8:3b:19:2a:1d:e2:a8:8e:92:dc:f0:09:1d:7a:
         d6:f1:f5:78:9e:f2:c8:96:a3:25:bd:94:66:2a:32:0b:34:0c:
         cc:c3:84:55:d1:41:3d:23:8c:4b:2f:8f:e6:39:66:61:a4:5a:
         29:ae:6f:7b:0d:21:92:db:e1:b8:4f:c6:09:6d:40:e0:4b:0f:
         fe:7d:97:dc:d2:41:53:3e:9e:78:88:ae:b2:51:bd:03:f5:1f:
         9e:26:0f:2b:90:29:a8:8b:fa:c5:dc:41:2e:9f:b2:d5:c0:6f:
         2d:93:6a:9b:92:1e:1f:21:65:48:b3:9d:f4:ec:8b:d0:d5:d4:
         7f:93:d8:d2:97:5c:27:ab:f8:c6:7a:15:3d:ff:d7:ea:6f:1c:
         9c:42:94:ed:f5:b9:1b:3f:e1:19:77:38:e7:28:0e:ab:83:0b:
         ff:7a:e2:c7:57:12:7a:7a:2c:a1:3e:78:76:32:2d:0a:5b:b6:
         4e:54:77:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:59 2026 by rpki-client