Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
File:                     EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json)
Hash identifier:          O8RYcNwcsivqGSkZeYTbDKRpjr9cTA8oQjsoRh5Sjys=
Subject key identifier:   4C:B7:48:E4:56:D0:C2:AF:C3:04:E3:2C:FB:95:2B:FD:E6:B6:51:A7
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Certificate issuer:       /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial:       0260
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
Manifest number:          025A
Signing time:             Wed 25 Mar 2026 01:39:03 +0000
Manifest this update:     Wed 25 Mar 2026 01:39:02 +0000
Manifest next update:     Wed 01 Apr 2026 01:39:02 +0000
Files and hashes:         1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: 5f2e7UKyScaizL/wfn63IEeB4nA2XLnDsWvp1zvHCW4=)
                          2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: FvyHMarOz25InZt6YctOwt9XRbwIcy8gaQ8eogmzCSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:39:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
        Validity
            Not Before: Mar 25 01:39:02 2026 GMT
            Not After : Apr  1 01:39:02 2026 GMT
        Subject: CN=69c33cb6-ccff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:30:9a:c3:d1:3d:98:2c:a8:12:80:47:6a:
                    01:71:c2:40:f8:ea:c9:63:78:a5:69:8d:41:07:98:
                    9b:e9:43:44:21:cb:5e:be:48:a3:7b:e8:1a:bf:c9:
                    69:f1:21:35:61:14:cf:9b:c2:41:0c:d8:a0:d7:ba:
                    ab:27:71:1a:ca:18:9e:9b:24:0c:4e:56:6d:69:7c:
                    96:22:26:43:5f:05:c0:6e:35:ec:ab:74:05:19:26:
                    1f:6a:8d:36:03:11:dc:65:73:bc:5c:c0:15:00:ca:
                    2f:52:16:a2:b2:ec:7a:a9:74:8e:25:cc:ae:c6:d4:
                    ad:06:86:0f:ce:d5:b4:b3:c5:89:19:18:92:bd:16:
                    e0:ae:e9:8c:65:3e:b7:2e:fc:d5:4e:49:c3:eb:9a:
                    da:b9:98:e5:56:b1:0b:e4:f2:4d:b7:2f:8f:a9:9d:
                    ca:c9:90:ca:f3:f9:3a:6d:d5:4b:79:bb:f3:2d:be:
                    06:a6:47:f2:d0:8a:ad:45:93:a6:76:65:69:91:49:
                    37:6a:6a:ea:72:76:1c:1d:7a:66:c9:b2:e6:cf:4e:
                    d1:28:9e:a4:64:5d:5d:5a:cf:d8:63:2a:ca:b9:0a:
                    08:de:97:34:55:0a:f8:9a:b8:99:30:18:8b:72:b6:
                    d9:66:ad:5b:60:78:35:70:a1:1f:ef:5a:c0:51:c9:
                    f6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B7:48:E4:56:D0:C2:AF:C3:04:E3:2C:FB:95:2B:FD:E6:B6:51:A7
            X509v3 Authority Key Identifier:
                keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:19:7a:55:1f:21:9d:fc:ef:d7:33:c0:d6:62:99:79:57:
         92:af:49:3d:26:12:af:f0:a2:4d:2a:10:99:ab:38:b8:22:0d:
         2a:00:f9:53:1d:b8:20:0e:ea:13:4e:69:f4:29:1a:e9:f7:43:
         61:4f:52:d7:ed:80:0d:09:63:58:e4:b5:7b:94:8a:9d:b9:56:
         0d:12:1c:bc:6c:96:56:e9:93:69:88:6e:c4:0f:7e:6b:e3:45:
         22:05:cb:82:25:6c:65:7e:01:66:e4:34:96:f4:11:e3:09:f0:
         e2:6a:ce:2d:b5:a6:9a:1f:75:56:96:7d:63:9b:bc:b2:f2:2d:
         66:bb:99:19:96:e9:dc:f4:d5:1e:cc:f6:4b:29:fc:31:46:76:
         ee:25:28:14:42:2c:7a:93:dd:88:e5:de:d5:a3:aa:f7:fb:09:
         2b:f7:fc:09:b0:06:6d:7c:23:8b:e4:92:85:66:e2:be:03:ac:
         52:6a:80:a1:1b:33:02:f4:4f:97:4d:32:49:a7:a7:2a:69:1b:
         91:00:8f:09:e8:b5:a2:eb:79:09:ad:9d:dd:26:aa:ba:bd:3c:
         30:31:ea:dd:97:f5:c6:fc:6f:e3:e6:48:e6:fd:6f:ad:00:25:
         04:ca:89:71:5b:df:59:82:94:08:c6:2e:a2:e9:0a:e7:82:94:
         d5:c5:5b:07
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURBMjYxMTAvBgNVBAUTKDExQUMzMzY3OEQxODMzM0NGRUJENDk4OTJCNTY4OTlF
MjdFQTYzNDgwHhcNMjYwMzI1MDEzOTAyWhcNMjYwNDAxMDEzOTAyWjAYMRYwFAYD
VQQDEw02OWMzM2NiNi1jY2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvtcwmsPRPZgsqBKAR2oBccJA+OrJY3ilaY1BB5ib6UNEIctevkije+gav8lp
8SE1YRTPm8JBDNig17qrJ3EayhiemyQMTlZtaXyWIiZDXwXAbjXsq3QFGSYfao02
AxHcZXO8XMAVAMovUhaisux6qXSOJcyuxtStBoYPztW0s8WJGRiSvRbgrumMZT63
LvzVTknD65rauZjlVrEL5PJNty+PqZ3KyZDK8/k6bdVLebvzLb4Gpkfy0IqtRZOm
dmVpkUk3amrqcnYcHXpmybLmz07RKJ6kZF1dWs/YYyrKuQoI3pc0VQr4mriZMBiL
crbZZq1bYHg1cKEf71rAUcn2FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEy3SORW
0MKvwwTjLPuVK/3mtlGnMB8GA1UdIwQYMBaAFBGsM2eNGDM8/r1JiStWiZ4n6mNI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REEyNi85QjA3MjBBNDhG
RUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16ei12VW1KSzFhSm5pZnFZ
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Vhd3paNDBZTXp6LXZVbUpLMWFKbmlmcVkwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REEyNi85QjA3MjBBNDhGRUMxMUVEQjkwMUE3NDNDNEY5QUUwMi9FYXd6WjQwWU16
ei12VW1KSzFhSm5pZnFZMGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAP/cZelUfIZ3879czwNZimXlXkq9JPSYSr/CiTSoQmas4uCINKgD5Ux24IA7q
E05p9Cka6fdDYU9S1+2ADQljWOS1e5SKnblWDRIcvGyWVumTaYhuxA9+a+NFIgXL
giVsZX4BZuQ0lvQR4wnw4mrOLbWmmh91VpZ9Y5u8svItZruZGZbp3PTVHsz2Syn8
MUZ27iUoFEIsepPdiOXe1aOq9/sJK/f8CbAGbXwji+SShWbivgOsUmqAoRszAvRP
l00ySaenKmkbkQCPCei1out5Ca2d3Saqur08MDHq3Zf1xvxv4+ZI5v1vrQAlBMqJ
cVvfWYKUCMYuoukK54KU1cVbBw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:09:05 2026 by rpki-client