Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          DO6HSIWXhZoydbpW/l9zlXIQ7sTodCg4cJ99Mwq0r2U=
Subject key identifier:   38:9E:40:3C:FE:F9:D1:DD:1D:E2:68:51:29:EE:A4:5A:14:C7:C3:E4
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          E7
Signing time:             Wed 25 Mar 2026 05:40:09 +0000
Manifest this update:     Wed 25 Mar 2026 05:40:08 +0000
Manifest next update:     Wed 01 Apr 2026 05:40:08 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: y2ohrBd27LjJcUuUODEm1ZkZ4agBvrd+lOJREtoSfa8=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:40:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: Mar 25 05:40:08 2026 GMT
            Not After : Apr  1 05:40:08 2026 GMT
        Subject: CN=69c37539-2f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:98:02:b5:5d:13:5c:0c:f5:8f:69:20:45:0a:
                    69:a7:7e:c9:12:e1:a6:31:66:be:c8:78:74:a7:76:
                    36:66:42:30:e3:e7:66:16:77:03:95:0f:ea:d4:17:
                    05:ef:c7:d7:a9:ba:45:2a:9c:1f:ce:77:a7:6f:8b:
                    95:2f:c7:19:69:2d:ab:70:df:4e:1f:f7:ad:c2:73:
                    13:19:14:5f:f0:21:e9:8d:01:80:59:13:e7:08:e4:
                    56:72:09:87:a8:84:d5:0b:7c:24:b9:22:a7:8e:a9:
                    3b:a5:de:89:8f:69:f7:87:8e:6d:b7:e3:a6:31:4a:
                    3f:2c:18:98:42:20:ef:59:40:31:a5:4a:9d:5a:b4:
                    af:c6:cc:2e:8e:34:39:f6:16:8d:ee:e4:46:b3:7f:
                    45:fa:a7:f2:19:d8:d5:c2:85:a2:9b:f4:79:65:a6:
                    ad:71:96:26:ce:a9:45:17:2a:eb:c4:62:64:16:0a:
                    f4:68:ec:17:54:d5:05:8a:f2:2a:f5:a9:a4:0b:ac:
                    18:20:17:21:99:57:b4:b9:9d:fe:e3:98:45:71:95:
                    ce:39:7e:75:d9:32:95:d6:7d:f3:ee:46:61:7d:6b:
                    77:cf:cf:72:b5:5d:86:95:10:12:73:17:b6:9c:d2:
                    46:20:d4:9e:26:9b:66:76:61:e4:01:c0:7f:6d:ad:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:40:3C:FE:F9:D1:DD:1D:E2:68:51:29:EE:A4:5A:14:C7:C3:E4
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:da:9d:4f:fd:1f:1e:7c:e1:5f:8e:ec:90:34:02:8b:da:
         64:e2:20:4b:62:7f:9e:eb:47:87:fd:25:a1:4e:73:38:54:e9:
         a5:6c:a1:88:04:33:97:47:70:16:f9:8e:f9:27:8d:07:dc:d1:
         ec:5d:21:30:2e:91:9b:5a:16:28:8f:c0:14:fa:85:ec:d8:8a:
         98:f5:c1:67:a2:39:2e:ef:d3:d1:01:ef:e6:dc:7e:90:f6:ba:
         23:1e:db:14:c0:57:72:7a:c5:25:06:de:b1:3b:11:0d:fb:70:
         01:6d:de:1f:11:ab:6f:0a:ab:b2:15:e5:12:6b:d7:80:d8:75:
         fd:e4:dd:50:15:8c:7a:4c:05:a1:22:99:17:3d:bc:cc:a4:80:
         93:ef:44:1b:fe:80:11:bc:ce:2b:d8:be:97:77:b2:8e:fb:9d:
         a8:95:26:8a:76:b2:e5:e0:df:e7:00:c7:9f:21:dd:cb:55:0e:
         4a:81:83:bd:1d:72:cf:2f:1c:55:8d:f6:40:69:77:13:8c:23:
         28:ba:1d:1c:a3:cd:67:7c:7d:66:95:30:ba:f5:e2:7a:68:a1:
         91:b0:e4:fa:af:db:07:64:45:a7:dd:cd:6b:0c:b0:fb:f9:10:
         46:a1:4d:84:b0:f0:13:12:d5:b7:ef:99:f1:2a:51:3f:45:ec:
         84:35:80:ac
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0
RDFCOUExNTEwHhcNMjYwMzI1MDU0MDA4WhcNMjYwNDAxMDU0MDA4WjAYMRYwFAYD
VQQDEw02OWMzNzUzOS0yZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpgCtV0TXAz1j2kgRQppp37JEuGmMWa+yHh0p3Y2ZkIw4+dmFncDlQ/q1BcF
78fXqbpFKpwfznenb4uVL8cZaS2rcN9OH/etwnMTGRRf8CHpjQGAWRPnCORWcgmH
qITVC3wkuSKnjqk7pd6Jj2n3h45tt+OmMUo/LBiYQiDvWUAxpUqdWrSvxswujjQ5
9haN7uRGs39F+qfyGdjVwoWim/R5ZaatcZYmzqlFFyrrxGJkFgr0aOwXVNUFivIq
9amkC6wYIBchmVe0uZ3+45hFcZXOOX512TKV1n3z7kZhfWt3z89ytV2GlRAScxe2
nNJGINSeJptmdmHkAcB/ba2h5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDieQDz+
+dHdHeJoUSnupFoUx8PkMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC
RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy
SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAk+HanU/9Hx584V+O7JA0AovaZOIgS2J/nutHh/0loU5zOFTppWyhiAQzl0dw
FvmO+SeNB9zR7F0hMC6Rm1oWKI/AFPqF7NiKmPXBZ6I5Lu/T0QHv5tx+kPa6Ix7b
FMBXcnrFJQbesTsRDftwAW3eHxGrbwqrshXlEmvXgNh1/eTdUBWMekwFoSKZFz28
zKSAk+9EG/6AEbzOK9i+l3eyjvudqJUminay5eDf5wDHnyHdy1UOSoGDvR1yzy8c
VY32QGl3E4wjKLodHKPNZ3x9ZpUwuvXiemihkbDk+q/bB2RFp93Nawyw+/kQRqFN
hLDwExLVt++Z8SpRP0XshDWArA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:53:45 2026 by rpki-client