Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
File:                     eVaKOOzbYX5njAimzEPE1lAs7GI.mft (raw, json)
Hash identifier:          Cfvz/xlQyFFCM7Gg8YsndSNQIDsuR1rzL1/P2Cjwquo=
Subject key identifier:   64:BA:7C:82:32:AF:74:55:F2:34:6E:BB:13:D6:E3:0C:2A:9C:41:CC
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Certificate issuer:       /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
Manifest number:          DC
Signing time:             Mon 11 May 2026 06:46:42 +0000
Manifest this update:     Mon 11 May 2026 06:46:41 +0000
Manifest next update:     Mon 18 May 2026 06:46:41 +0000
Files and hashes:         1: eVaKOOzbYX5njAimzEPE1lAs7GI.crl (hash: zFt+PSHwqkfuOFCWNZKgdo3kYRFtjm9BiTj/bHsmdOY=)
                          2: B5E94296025C11F0BDF41912C4F9AE02.roa (hash: b/gx6jE3ztiTlC5Eac5TsfJ6NWxaMyjyfxR8HfsCYbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
        Validity
            Not Before: May 11 06:46:41 2026 GMT
            Not After : May 18 06:46:41 2026 GMT
        Subject: CN=6a017b51-4848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:d0:d0:9b:44:ea:63:bb:49:06:67:ad:26:
                    09:0d:2f:e7:f5:10:6b:63:b7:94:3b:e4:61:3b:5b:
                    d8:73:79:c9:4a:96:09:4b:92:b9:3b:62:08:53:0a:
                    94:7b:6c:06:a0:f6:80:21:43:fd:ba:fe:4f:c3:25:
                    f0:94:10:68:aa:94:b5:28:43:3d:07:7a:59:f6:9c:
                    aa:c9:51:92:1a:81:43:b2:bf:77:48:65:6b:6d:15:
                    85:e0:2c:d3:3e:54:75:8c:53:04:d4:3d:15:4d:63:
                    2a:14:7c:28:aa:f3:a9:b0:77:a4:47:5f:6a:cd:3f:
                    a6:47:92:15:60:77:dc:fc:e6:8f:07:77:95:ca:3a:
                    c5:b4:a6:9e:b4:69:2c:6f:0a:6c:fe:b7:b4:ed:0e:
                    ca:d5:7d:62:05:7f:f1:fc:6d:9b:a6:22:16:db:d9:
                    57:0d:d8:88:a4:fd:c6:cf:02:f9:ef:a8:12:d3:1f:
                    b1:72:50:79:04:3f:da:92:aa:11:c9:3f:24:7c:76:
                    53:75:72:dd:d1:36:a9:44:6f:e0:e3:bb:59:be:80:
                    ef:86:6a:b9:84:9f:75:85:4b:24:6c:c2:32:26:f0:
                    4c:ec:6c:b0:57:59:4a:e7:a4:c1:a2:a4:64:ba:fc:
                    26:03:20:e3:bd:17:6c:89:ad:ce:35:89:7c:31:56:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BA:7C:82:32:AF:74:55:F2:34:6E:BB:13:D6:E3:0C:2A:9C:41:CC
            X509v3 Authority Key Identifier:
                keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1b:af:85:7c:ec:94:c5:23:a3:bd:ae:9b:10:97:c0:69:f2:
         18:95:10:ff:84:93:4e:c6:be:df:b8:c0:3e:c0:7a:37:f6:82:
         c6:9c:2c:dd:19:41:90:4c:f5:2c:30:41:11:fc:70:5f:17:31:
         10:16:70:d7:e4:0e:72:5a:69:76:7c:43:21:8b:d0:86:70:04:
         55:43:8d:b8:a6:3e:a0:1a:a5:7a:14:93:6f:9c:b3:52:ee:ab:
         f1:15:17:41:f1:2c:b8:d0:0f:37:87:ad:d4:f3:54:79:3c:14:
         9a:aa:2e:3c:71:09:6f:ed:81:e6:d9:12:27:9a:72:03:e5:e0:
         c9:e2:0d:97:5f:1d:c0:b8:7a:e3:98:3d:a2:69:34:e3:9f:6f:
         17:f4:06:00:2b:c2:cd:82:c6:1b:af:df:4d:4d:18:16:3b:7f:
         dc:fb:e5:c4:95:40:24:04:ba:2c:ab:d5:c9:d2:e6:b3:49:e0:
         74:5a:10:20:2c:ff:50:5f:9a:25:88:0e:92:06:af:17:6a:60:
         25:f7:59:c1:3b:32:98:ee:73:83:7e:7e:ea:7e:f5:10:99:19:
         c7:a7:5c:a6:21:ca:57:86:71:a4:5d:d7:28:02:ba:f3:63:c7:
         60:cb:e2:64:8a:0c:6f:35:ad:80:39:2c:24:9b:0d:fa:14:0f:
         07:8b:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:18:23 2026 by rpki-client