Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File:                     EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier:          kIdZKI/dZ255eIWs+t+94qmRC8EHvyarqUARngSljh4=
Subject key identifier:   78:70:F8:62:13:78:CE:75:F8:7C:5D:8B:92:31:01:C3:57:C7:6A:AA
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer:       /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number:          0194
Signing time:             Mon 11 May 2026 04:24:44 +0000
Manifest this update:     Mon 11 May 2026 04:24:43 +0000
Manifest next update:     Mon 18 May 2026 04:24:43 +0000
Files and hashes:         1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: EVtQ+M/vIU7kGOGr90KSYDxVft5Cib76647N8xQfMgs=)
                          2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: qHKPAO+iCN/5xje+tGrEHy5PZ4Gr8KsPsnqdqu/3QUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
                          rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
        Validity
            Not Before: May 11 04:24:43 2026 GMT
            Not After : May 18 04:24:43 2026 GMT
        Subject: CN=6a015a0c-8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:41:2e:57:2e:99:22:64:60:d6:2a:ab:a2:
                    f5:81:ed:a0:68:b6:fc:01:81:0d:58:b5:0b:87:41:
                    1a:2e:43:d4:d0:d3:6b:e8:d1:5f:a9:11:9e:a5:19:
                    d0:da:b6:0a:eb:fe:aa:90:af:5d:b3:bd:35:5a:e2:
                    ff:bb:44:c2:21:29:f9:c4:ff:ac:50:75:c9:15:09:
                    30:5a:c8:ec:fe:16:e0:6c:6d:e8:1b:d4:32:54:69:
                    26:dd:ef:c2:ea:1e:f5:2b:7c:63:2d:d7:d3:ff:45:
                    0d:33:c4:27:15:20:ed:0a:88:91:20:1d:8c:bc:91:
                    4a:f7:a0:fc:e0:cc:97:06:57:83:21:4e:52:fc:fc:
                    b2:40:59:f5:d4:57:6c:e4:0a:ac:9c:c2:d4:fb:3b:
                    12:39:c6:54:fc:42:09:d3:93:8e:37:a6:d5:ec:b9:
                    b5:ca:1c:46:71:de:24:af:9e:93:5b:6a:f2:4e:e8:
                    1d:0d:50:2c:ab:49:ba:e9:23:4d:f1:90:f2:32:93:
                    bc:b6:68:3d:6e:ce:49:c4:4c:82:a0:a8:0f:a3:56:
                    57:d2:c9:8b:4b:85:5e:53:a6:fc:7a:45:a2:c2:dc:
                    a7:d2:06:84:c8:90:67:ad:38:b1:09:72:02:78:de:
                    f9:5d:e8:28:b5:b4:86:26:8c:5f:9e:cf:6f:0b:62:
                    e9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:F8:62:13:78:CE:75:F8:7C:5D:8B:92:31:01:C3:57:C7:6A:AA
            X509v3 Authority Key Identifier:
                keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:26:28:d9:63:00:bc:83:9c:81:84:94:d6:b5:84:54:93:15:
         82:78:fd:bb:b3:54:9f:2e:d1:d5:b1:d5:6f:dc:3e:ab:c0:8d:
         27:25:d6:d8:e9:0a:7e:f1:d2:42:87:3c:ac:29:19:ee:52:63:
         a9:83:e6:35:61:e2:cf:15:c7:97:fe:1e:a3:26:a2:4c:ad:da:
         8d:05:a8:38:38:f5:67:53:72:01:da:c2:94:b9:16:85:2e:0c:
         3d:dc:86:d0:73:e2:12:50:70:58:c3:ed:f0:2b:b0:33:ce:99:
         c9:30:97:96:33:d6:1d:35:6e:02:b0:40:4a:c3:69:71:61:d0:
         02:d0:31:68:24:65:b4:cc:e4:c4:b0:50:f8:f3:24:27:c5:f0:
         87:6d:28:82:4c:51:da:a8:a5:11:99:8e:1f:e3:c4:34:99:6c:
         43:50:47:65:34:ff:85:32:95:8a:de:b4:e5:3a:ec:0b:7f:13:
         76:7a:38:e4:2d:70:2b:37:1f:c9:13:a7:d0:7f:fb:6c:18:33:
         a2:7f:e1:a7:e4:b7:c5:19:1a:b9:04:aa:04:4e:2a:ac:6c:fc:
         ea:ac:89:a6:6f:32:b7:86:5e:9d:c6:fc:38:90:92:d8:86:f7:
         c5:af:f0:e4:34:ba:d5:71:f4:29:68:b8:b9:99:f3:87:38:36:
         40:a8:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:17 2026 by rpki-client