Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          pfiISokbWFSPbAgCAQz6NCtQ8kXJVeedWdosOCcLbGw=
Subject key identifier:   46:BB:42:43:A3:41:6A:1E:28:44:31:6F:3F:F2:00:15:46:50:07:0B
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       35A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          356E
Signing time:             Tue 12 May 2026 14:32:18 +0000
Manifest this update:     Tue 12 May 2026 14:32:17 +0000
Manifest next update:     Tue 19 May 2026 14:32:17 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: OX2SPRpa7mq8DE0OL1jCfc7s9QMt59nwqUYYae6xfUs=)
                          2: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: j0xY/53uVqFVDJMak2vPu5OYYbqCNOEfNhjOkMcxhA4=)
                          3: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: l+7Eu+xg0ulQzOgrjZeAHIZGKSy3zhWEJs8xcq7aCFk=)
                          4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: NHO8KDV0QFvuFED/5Jw/RLRu+225FkgTd21HwEd+FsI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13733 (0x35a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: May 12 14:32:17 2026 GMT
            Not After : May 19 14:32:17 2026 GMT
        Subject: CN=6a0339f1-31a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:26:bb:c3:b4:ce:4d:a3:2e:b8:cf:b3:b2:
                    c9:af:51:4d:a2:3e:56:4b:bd:a9:2a:d0:be:ad:74:
                    2b:0c:c1:f9:6e:f1:e8:6c:4d:3b:d3:6e:aa:69:e5:
                    26:78:5d:9d:a2:f4:4e:d5:40:27:2b:3d:6b:8b:dd:
                    84:f0:18:4d:81:d5:b6:27:5a:7b:d5:f1:2e:a5:6a:
                    48:9a:2f:24:f3:11:a8:f6:72:e4:9d:2e:1b:3e:d7:
                    17:ae:0b:c6:1c:6b:18:ce:88:50:a1:0b:65:1b:34:
                    1a:18:33:90:f6:f7:13:c9:24:e2:24:a2:83:e5:84:
                    3c:57:c6:95:37:c6:2f:ef:88:e2:a0:44:88:d7:d9:
                    7f:0b:ba:b5:c0:d4:4a:af:55:bf:e7:be:0a:53:e8:
                    03:34:aa:3a:b1:6a:d8:b3:64:31:b5:2e:d6:7c:1a:
                    f7:eb:e2:f0:e0:40:e7:84:b7:25:77:85:24:58:66:
                    fe:39:dd:12:5d:2a:18:e2:2c:0f:fa:ba:97:07:35:
                    6b:1a:1a:99:af:1e:72:1d:58:3f:ce:1d:57:ed:95:
                    68:3c:0d:d9:72:23:60:32:60:23:d2:b6:b7:d4:c8:
                    a4:2d:a4:24:9e:2b:04:4b:f3:d5:98:8f:6a:ee:ea:
                    03:6a:6d:af:c1:ae:04:05:23:94:9a:18:0a:bf:78:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BB:42:43:A3:41:6A:1E:28:44:31:6F:3F:F2:00:15:46:50:07:0B
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:46:d9:80:7a:f6:46:91:72:aa:77:62:ea:53:16:e3:30:
         08:a5:08:a4:1a:1e:27:6b:b5:db:cd:82:03:db:14:7c:99:da:
         b6:72:70:64:b9:34:14:1b:62:9b:53:0d:3a:25:6c:fe:24:85:
         fd:e0:3c:e6:55:c7:fa:38:4c:63:40:d6:c6:8b:1b:3d:c5:06:
         25:c0:41:62:90:c7:e6:31:99:92:82:e2:da:d3:e5:9c:d0:48:
         bb:22:ee:12:6f:91:78:64:0d:d0:7f:ed:6a:b1:99:f6:57:9a:
         70:78:e4:a5:c6:74:3a:c7:57:bd:be:f1:ef:1c:a7:c7:74:5d:
         50:47:af:ed:e3:db:5f:40:bd:89:0e:d9:7a:93:05:7b:17:3c:
         9b:db:f6:0e:d4:a9:2b:13:3c:24:62:7c:0b:0c:f8:18:75:88:
         60:42:cc:9e:36:10:f3:36:27:ca:9d:14:c4:c4:52:17:ad:29:
         06:0f:bb:fd:ce:51:87:02:14:f0:88:f7:0d:11:46:e1:97:fc:
         5a:d1:7b:5a:6a:ae:59:0a:74:ca:bc:0b:04:88:dc:80:60:9c:
         8a:d6:eb:c1:b4:d5:32:59:b5:e1:ea:57:be:7c:9d:78:88:09:
         e5:0c:ef:95:f2:78:53:52:67:19:5a:bb:b1:41:b2:c2:d3:9f:
         58:df:48:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:39 2026 by rpki-client