Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
File:                     ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json)
Hash identifier:          J77kgdc3IvbcqZ2AdSKgGyCKkG0twdSNJ897mHj3pic=
Subject key identifier:   F8:A5:13:66:55:D0:B4:48:76:07:A2:D2:AC:F9:E2:0C:E0:97:C4:30
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Certificate issuer:       /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
Manifest number:          81
Signing time:             Wed 25 Mar 2026 06:55:59 +0000
Manifest this update:     Wed 25 Mar 2026 06:55:59 +0000
Manifest next update:     Wed 01 Apr 2026 06:55:59 +0000
Files and hashes:         1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: h/n5j6ehqkEwUxC3haNhXLnXpmlDwStU7ukJKrNt0n0=)
                          2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: ZQ/BdX/5Q3geNUAzu42OIAmZumGNrffiueKHNoVmkq0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
                          rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Validity
            Not Before: Mar 25 06:55:59 2026 GMT
            Not After : Apr  1 06:55:59 2026 GMT
        Subject: CN=69c386ff-af14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c2:cc:73:2f:95:de:97:22:07:af:73:d7:d4:
                    8f:2d:1a:db:5c:fb:f4:d0:40:82:b5:3b:82:e7:12:
                    cd:0a:f1:42:50:8c:15:e8:66:a7:29:00:18:01:23:
                    5b:c6:d3:a2:d3:20:c3:ba:0e:35:a5:ee:4f:39:60:
                    59:59:6a:59:20:cc:6a:f0:29:78:79:6e:1f:69:41:
                    0b:94:66:68:4a:d7:31:e3:1c:f8:7b:96:97:c8:4d:
                    28:0a:19:e4:ee:a2:f4:79:88:e8:bd:f9:b3:e0:cc:
                    c5:db:83:69:1e:63:e5:bb:39:7e:b1:73:53:97:49:
                    4a:20:ac:ee:59:fa:10:d3:53:c1:d5:74:05:3c:fb:
                    03:72:e3:39:45:a3:7d:26:be:ec:87:e7:99:be:f8:
                    c5:c9:c8:34:e2:e8:a7:03:02:a1:e3:68:a2:e0:92:
                    1b:74:18:ec:07:dc:3a:3f:37:de:2f:1e:b9:c0:31:
                    a4:e2:98:03:44:2e:3f:db:3b:64:c8:78:d6:13:16:
                    6a:1a:93:5b:4b:75:0f:a1:41:b7:4e:12:8f:fe:66:
                    47:f3:98:07:83:f1:27:be:e7:d6:69:cd:f9:fc:a1:
                    d9:20:d4:67:f4:a2:db:e5:a5:48:95:f7:5d:59:42:
                    be:f8:eb:28:a7:a7:61:3c:87:9d:dd:4d:79:32:ad:
                    e4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:13:66:55:D0:B4:48:76:07:A2:D2:AC:F9:E2:0C:E0:97:C4:30
            X509v3 Authority Key Identifier:
                keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:b6:de:f7:08:05:b9:a9:74:80:e5:fe:93:5e:32:72:ee:
         b8:45:8c:51:55:9f:33:ee:32:6a:da:9e:fb:09:ff:ca:16:52:
         d0:00:fa:9f:6a:51:d8:0c:32:4d:56:16:00:8a:96:8f:32:36:
         6d:b3:d9:76:05:20:93:ce:3f:96:08:46:b1:38:f5:c1:d2:1f:
         d7:7f:09:e5:78:48:c5:7f:6c:bb:df:d2:22:bc:c8:12:f9:3f:
         e9:bc:d4:12:60:00:6e:97:70:ad:ae:ea:b6:ca:5e:44:63:3c:
         4d:b1:eb:85:ef:65:0e:65:d4:38:84:50:f2:5c:81:c3:f7:e5:
         a1:a4:a0:5d:f1:7a:23:e0:07:78:68:04:8f:70:12:5e:98:e7:
         cb:21:43:49:a9:a0:25:65:2b:0e:03:b4:cf:74:e5:b8:a7:f5:
         25:2d:b8:4b:80:a3:94:31:c1:d3:64:58:09:0c:a3:3c:d0:3f:
         6b:1a:80:5d:3b:f3:f8:5f:4f:e3:79:88:c6:d2:fd:a1:06:b4:
         35:cb:83:5d:43:56:67:30:62:7b:4e:fb:13:b9:f3:a1:4e:bf:
         e4:4b:da:e9:cc:b0:a6:43:46:53:71:93:23:ae:ba:87:ac:cb:
         8c:74:ca:c7:d6:e9:91:b5:b3:21:5a:ef:62:8e:f4:f6:d3:e6:
         b4:03:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:58 2026 by rpki-client