Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
File:                     E3ay871bTTWtlSsXkNgnRpktQW8.mft (raw, json)
Hash identifier:          IP2ioy3tI6ifoeUdCi2DWnEZ8K9k8A6RjC3nZUOZIKk=
Subject key identifier:   B9:E5:7E:CF:64:6C:DC:21:39:1E:99:B3:85:74:36:F9:AE:A6:DB:A9
Authority key identifier: 13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F
Certificate issuer:       /CN=A9183A80/serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
Manifest number:          05E8
Signing time:             Wed 13 May 2026 00:09:49 +0000
Manifest this update:     Wed 13 May 2026 00:09:48 +0000
Manifest next update:     Wed 20 May 2026 00:09:48 +0000
Files and hashes:         1: E3ay871bTTWtlSsXkNgnRpktQW8.crl (hash: 0xW1NMeD6X0Ck8JubiLxrl5fOdReo37bZunLh8aDb6Y=)
                          2: F03F059C391D11EF9A100142C4F9AE02.roa (hash: +62L24ARwxsz7CVaJKv515m0+Lg0yNxUoqJGRQhPpt4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183A80, serialNumber=1376B2F3BD5B4D35AD952B1790D82746992D416F
        Validity
            Not Before: May 13 00:09:48 2026 GMT
            Not After : May 20 00:09:48 2026 GMT
        Subject: CN=6a03c14d-d0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:67:a5:27:41:4f:e0:b3:28:bb:d8:ba:6a:01:
                    30:fa:29:9d:c1:df:9b:b6:5f:35:25:3e:53:ee:88:
                    d1:0b:d6:c6:1d:0a:d4:ba:b3:15:34:69:1e:83:df:
                    ba:fd:40:2a:0e:c4:3c:81:7e:c9:75:88:ee:8a:b8:
                    ba:f7:9c:4f:28:86:fd:e0:fc:89:f0:05:78:aa:0e:
                    c6:53:f9:3a:8f:b9:44:cb:b2:09:66:cc:36:86:aa:
                    fc:d6:ae:4e:bb:c1:94:36:44:0a:74:d7:8f:87:68:
                    d2:e8:fd:3d:49:0c:20:66:7b:49:25:04:86:98:85:
                    5e:24:e4:d9:9f:ff:12:56:8e:b0:5c:f6:8f:22:d1:
                    f0:b3:89:82:3e:f8:55:3c:fc:02:44:50:23:3a:75:
                    5f:dc:1a:c0:7e:66:87:5f:85:0d:cf:83:90:68:d2:
                    09:76:51:57:55:bc:95:17:e3:75:25:30:70:ee:10:
                    51:d0:5c:f5:70:32:e0:83:90:8d:fa:69:1e:33:71:
                    b7:63:b9:f8:31:01:15:b4:70:6b:8c:59:72:35:8c:
                    de:01:f1:5a:f9:80:a7:b9:6e:9e:59:f2:ee:0c:10:
                    26:26:a8:0a:47:94:96:b8:9c:1a:4f:81:af:4b:97:
                    07:41:44:f3:70:45:dc:37:38:7e:6c:20:df:19:b0:
                    75:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:7E:CF:64:6C:DC:21:39:1E:99:B3:85:74:36:F9:AE:A6:DB:A9
            X509v3 Authority Key Identifier:
                keyid:13:76:B2:F3:BD:5B:4D:35:AD:95:2B:17:90:D8:27:46:99:2D:41:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E3ay871bTTWtlSsXkNgnRpktQW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183A80/690119D2881A11ECBCCFA00FC4F9AE02/E3ay871bTTWtlSsXkNgnRpktQW8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:fe:17:ca:c6:c5:b1:61:99:aa:dc:6c:5e:4c:cb:f6:77:8a:
         e5:67:09:94:b8:1e:d4:e1:19:c5:99:9f:2c:9f:fb:01:02:8e:
         43:7c:62:be:b6:90:4c:95:a7:b3:39:72:d5:4d:92:e0:6f:5c:
         f2:64:61:15:64:b3:35:78:4b:29:0a:9f:fb:40:17:5a:6e:df:
         79:f3:5e:44:66:c3:c8:1d:6b:ab:9a:66:c7:5a:dc:ac:e8:19:
         18:e3:8c:96:0d:69:65:62:a0:d6:f7:ce:60:03:cd:7d:1d:be:
         35:4c:1b:51:ad:41:ff:13:5c:1f:9d:37:32:ce:e5:1c:49:1a:
         a2:ac:cd:68:9b:ba:46:b7:d3:85:5b:3a:6e:ca:2b:06:d1:92:
         44:53:7a:81:c5:fc:08:08:75:8d:85:8d:6a:13:64:e9:0e:33:
         06:88:18:75:ef:a8:06:3f:0f:13:25:1e:34:9b:a0:08:73:01:
         08:59:fb:7b:f4:19:54:6e:c9:53:a4:7f:31:58:03:8c:72:5b:
         68:a1:c1:91:df:15:95:b7:71:47:c7:e8:35:74:dc:21:ac:de:
         d0:87:81:a5:1a:04:6f:b5:aa:f8:e3:49:55:e3:7c:66:65:af:
         c6:70:0c:0e:31:3c:16:de:7e:50:fb:7f:5d:95:e3:10:db:3f:
         62:01:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:31 2026 by rpki-client