Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
File:                     eCkTb3m3-Js81HxTb8dJYjK54To.mft (raw, json)
Hash identifier:          mEVcfA/EB5EHnnR2pB98o2TAiP+KCBaHWoNBY5iwclA=
Subject key identifier:   91:23:58:E6:D8:18:1A:77:C9:66:6B:93:8E:E8:5C:D5:22:CC:04:1F
Authority key identifier: 78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A
Certificate issuer:       /CN=A91B5552/serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
Certificate serial:       05AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
Manifest number:          05A5
Signing time:             Tue 24 Mar 2026 22:52:46 +0000
Manifest this update:     Tue 24 Mar 2026 22:52:46 +0000
Manifest next update:     Tue 31 Mar 2026 22:52:46 +0000
Files and hashes:         1: eCkTb3m3-Js81HxTb8dJYjK54To.crl (hash: czt48ZPrTJxb30Ec6MkdaygbaztNkWH9cWnsdDMYitc=)
                          2: 0E183FBE516911ED9B5EF024C4F9AE02.roa (hash: NcPpTWr8/4K7GMelvOauMc1yVYZ5F6ROMYJV3thfRqQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl
                          rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1454 (0x5ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5552, serialNumber=7829136F79B7F89B3CD47C536FC7496232B9E13A
        Validity
            Not Before: Mar 24 22:52:46 2026 GMT
            Not After : Mar 31 22:52:46 2026 GMT
        Subject: CN=69c315be-3052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:37:fa:cf:5b:ca:b0:23:e0:91:19:b4:71:
                    2f:a8:4a:fc:6a:51:bc:69:12:53:27:42:4c:1e:88:
                    87:98:99:ac:ca:1f:cc:22:86:42:76:b3:aa:27:32:
                    f2:f5:ad:f0:30:02:86:9c:0d:a5:cc:26:e7:5b:d8:
                    bf:4c:2a:60:ca:7d:d1:38:23:22:b8:e3:1d:1e:48:
                    7d:cf:6d:f6:c3:43:32:1b:54:e5:95:d6:23:9e:9b:
                    ea:6f:dd:49:ca:37:8f:48:0b:39:c5:44:f0:5d:4c:
                    ac:fc:20:07:f0:39:ce:21:18:93:25:d3:9a:80:e9:
                    f3:23:ee:6f:b4:55:2c:62:26:b2:ff:09:60:ea:a1:
                    42:89:16:77:6f:15:74:fa:3f:0e:0a:04:d8:3c:7f:
                    33:d4:8c:02:19:44:6b:1b:9c:91:52:12:e0:51:57:
                    cf:e9:15:66:e3:4b:83:c0:fc:78:f1:fd:1a:d1:c8:
                    80:f2:f5:b7:3f:ce:98:f6:c9:b8:35:5c:ed:98:29:
                    b5:37:66:73:5a:92:25:ab:c8:ed:53:d2:b8:2a:a8:
                    ee:d4:46:c8:3f:3c:cd:3a:ff:15:5e:6a:a4:6a:e8:
                    1c:25:f4:bb:29:d7:6e:ea:14:4e:e2:f5:03:c9:3a:
                    6f:08:db:d7:90:fc:46:d3:ce:43:38:16:ca:c1:8c:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:23:58:E6:D8:18:1A:77:C9:66:6B:93:8E:E8:5C:D5:22:CC:04:1F
            X509v3 Authority Key Identifier:
                keyid:78:29:13:6F:79:B7:F8:9B:3C:D4:7C:53:6F:C7:49:62:32:B9:E1:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eCkTb3m3-Js81HxTb8dJYjK54To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5552/6F60F77C0BCC11EC8570CD1FC4F9AE02/eCkTb3m3-Js81HxTb8dJYjK54To.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:d0:80:88:cb:32:c3:44:02:e0:62:0b:16:13:90:71:f3:
         ef:44:b1:d0:1e:ca:36:72:f9:ee:08:0c:64:48:b2:37:b4:fa:
         4e:09:4d:2a:02:dd:a4:0c:05:37:a5:3c:c7:4e:31:93:fd:5e:
         fa:a1:40:c5:f2:f4:a4:43:44:58:ea:a1:ca:e3:d6:3d:6e:19:
         7c:92:a6:2a:9f:63:8b:e5:82:1a:62:3c:99:3a:00:b8:fa:26:
         95:10:d2:0d:10:eb:4a:bb:dd:8f:2f:18:82:39:a9:f5:48:b4:
         33:6a:b3:48:95:9b:38:eb:fa:fe:15:96:79:7b:e5:6c:45:5d:
         f2:75:52:87:e1:ac:9d:80:33:87:ec:b5:84:bf:ab:31:9f:f6:
         1d:a9:24:71:0e:5c:db:32:7b:d0:29:42:aa:7e:da:da:8d:7d:
         c9:99:df:45:a4:99:12:00:f8:c3:48:29:3e:ee:b4:a9:82:73:
         df:c5:aa:4a:c6:40:6e:ac:2e:42:d3:69:57:2a:70:3f:41:dc:
         1d:9c:7f:a9:81:46:0e:ab:45:95:f3:5f:07:3c:01:53:16:4f:
         a9:cb:c0:3c:3a:94:0a:c3:27:49:40:27:ba:62:45:db:78:a8:
         9b:2e:86:9c:63:38:1f:b5:e0:e2:7c:ae:95:78:83:2c:8e:d8:
         bf:0c:7a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:11:39 2026 by rpki-client