Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          8aC2haTfXpAvh04rhlrsVM7HzsIsUUat2387Xh0elgI=
Subject key identifier:   33:94:CA:13:29:E1:97:F3:EF:ED:93:85:9E:0D:BD:3A:D6:DE:39:0B
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          83
Signing time:             Wed 25 Mar 2026 06:56:52 +0000
Manifest this update:     Wed 25 Mar 2026 06:56:52 +0000
Manifest next update:     Wed 01 Apr 2026 06:56:52 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: UUA69xHhQ40Cx5xhTM+OERvRdYusnUehZlZbizkmZpU=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140 (0x8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Mar 25 06:56:52 2026 GMT
            Not After : Apr  1 06:56:52 2026 GMT
        Subject: CN=69c38734-5e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:02:17:d9:d3:50:57:ce:15:1e:3d:30:ef:
                    93:9b:16:34:71:b3:87:ae:b2:c0:ad:69:5b:54:9b:
                    86:99:9f:b4:f8:0f:75:7b:55:23:d3:b5:50:6b:bd:
                    d4:d4:76:ec:86:a6:b7:67:d9:1c:49:4f:87:a6:8e:
                    19:f4:b2:3f:34:95:3b:e5:1b:10:9b:71:88:b6:60:
                    d9:77:c5:17:42:68:1e:75:08:8a:8d:b1:90:98:e3:
                    12:80:a8:c0:de:83:16:e0:10:d4:3b:28:51:ba:c5:
                    ab:29:3e:0a:dd:df:9f:c8:b2:6e:6f:87:e8:a1:5e:
                    65:06:07:63:82:40:16:c7:1e:27:a8:f1:96:77:df:
                    75:a6:18:6d:17:b4:9d:7b:72:11:2b:3f:e8:da:a2:
                    2a:a4:d7:08:e0:75:29:2b:b0:63:a6:89:dc:b2:7d:
                    46:eb:0f:56:7c:81:c8:05:ed:a0:69:f3:19:f5:f1:
                    2f:3a:9a:4f:e6:3e:d3:42:73:98:44:fe:db:b3:5e:
                    b2:e9:0f:a6:ff:f6:a1:8c:f9:f2:6f:d4:6e:aa:ce:
                    03:7a:e3:4f:3c:73:5c:bd:8d:8c:f6:76:53:bb:01:
                    95:70:b1:78:2f:0d:f7:67:b8:41:e7:b2:37:95:74:
                    ce:2e:c2:80:96:35:7b:eb:98:28:1f:a1:80:71:be:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:94:CA:13:29:E1:97:F3:EF:ED:93:85:9E:0D:BD:3A:D6:DE:39:0B
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e8:69:99:d8:e0:99:25:62:58:1f:3e:cd:53:39:ee:99:04:
         f1:13:e1:ac:23:f6:b5:e6:4e:8b:7a:18:e3:48:92:71:98:95:
         0f:79:94:b8:0f:d2:ff:34:11:13:60:6d:cd:f7:0f:21:e9:2d:
         3a:df:64:d5:35:f0:41:fa:2d:3b:a2:6c:76:6c:27:e7:9e:4f:
         b1:a7:1e:18:6e:8c:17:97:7f:6f:fe:50:be:bd:40:0e:d2:e0:
         e7:b0:0c:35:35:59:cc:ba:49:9e:bc:37:8e:d7:b7:3c:47:f4:
         8f:cf:1b:f9:d5:85:e4:4d:0c:05:9e:91:68:7e:17:29:d7:94:
         4b:c6:e2:dc:14:37:d8:67:35:60:fc:ce:73:3d:4d:83:cf:29:
         c6:24:dc:d3:6f:fa:16:47:88:8b:71:6c:cb:ae:e7:31:94:bb:
         c5:8d:3c:34:45:b2:2b:f5:da:54:71:95:19:c1:75:3d:73:f8:
         44:a0:8a:85:57:39:83:16:02:ba:c8:ce:5d:48:40:a1:f7:bf:
         79:3b:9d:d6:85:86:e8:fb:e2:9a:b7:fd:a5:3d:79:6b:06:c3:
         d1:50:aa:1e:4d:f8:a7:c9:fb:1c:c5:e0:65:3b:03:e8:52:a6:
         4c:ef:6d:d1:b2:de:9a:ac:8d:c8:2a:07:6e:7e:6e:37:c7:a0:
         c0:4e:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:57 2026 by rpki-client