Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          a4JSNr/ZiEyQ6HzLRtcszJ9Ug7X4rrYY3W7Kkr0y8h4=
Subject key identifier:   3F:36:8F:6B:A2:FB:7E:3B:F7:EC:D2:B4:11:5D:CC:5B:D0:30:6F:78
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          FF
Signing time:             Mon 11 May 2026 06:16:33 +0000
Manifest this update:     Mon 11 May 2026 06:16:32 +0000
Manifest next update:     Mon 18 May 2026 06:16:32 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: PX2vCgiahVQMn1UB0fmNHiGy3MZgYMaqi5Ylix7B9g4=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: May 11 06:16:32 2026 GMT
            Not After : May 18 06:16:32 2026 GMT
        Subject: CN=6a017440-f97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:a2:5c:c0:09:26:1b:93:25:c4:d2:d8:7c:
                    43:6e:9f:8b:20:26:bd:e8:c8:7d:e1:d6:6e:15:12:
                    ee:0b:8b:8a:cb:cf:60:ee:87:a7:30:c5:4e:60:2e:
                    c6:29:c8:ea:35:f7:14:28:d3:35:87:9a:01:58:bb:
                    38:39:0c:31:72:fa:a8:e3:2e:03:ad:ce:58:95:8f:
                    e4:03:1d:74:e9:9f:17:4c:98:83:14:0c:f8:64:e1:
                    04:27:3a:b6:bb:45:65:92:e5:28:8b:19:03:b2:5d:
                    ab:11:f2:7b:d1:98:ef:5f:49:10:2b:66:eb:df:ac:
                    1d:07:ec:a9:dd:f5:3a:17:1d:13:21:3e:e3:54:6d:
                    9a:e2:64:81:a2:d3:67:03:e5:32:29:82:bf:1c:61:
                    df:3b:f8:b9:fc:d8:8a:28:1e:54:8b:4a:a8:14:da:
                    a3:0f:d4:19:59:72:fd:03:b7:e0:72:1c:59:f4:13:
                    fd:92:b2:c6:f3:d3:24:73:38:4b:bf:31:6e:64:42:
                    e7:5f:e2:5c:11:6d:8d:98:08:7d:c2:bf:01:5b:31:
                    91:66:aa:0d:ac:ee:bd:53:c4:33:7b:28:a8:3c:ba:
                    af:5a:ae:d3:37:d5:75:32:08:6d:73:bf:79:ec:62:
                    32:9e:38:e0:df:75:fe:90:ea:c7:2b:50:6e:de:dc:
                    f0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:36:8F:6B:A2:FB:7E:3B:F7:EC:D2:B4:11:5D:CC:5B:D0:30:6F:78
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1a:2f:3f:20:30:62:82:fb:53:24:17:37:16:bb:8f:d2:7a:
         bd:04:73:a4:f0:30:1d:a4:12:cb:28:a4:dc:19:35:f8:8a:e4:
         a7:45:0c:10:d2:2c:10:38:b8:6f:7c:de:69:42:60:f4:a3:83:
         a0:82:22:b6:b4:bd:2a:91:cb:a4:6f:a3:75:4b:f5:fd:eb:74:
         11:27:3a:f7:10:29:fa:18:dc:a0:ec:dc:43:41:86:42:54:fa:
         f4:84:e2:a7:7e:e5:c2:e8:7f:12:b0:de:95:97:8f:91:62:82:
         67:be:b5:29:d0:fa:73:aa:98:5a:dc:95:c2:63:e0:64:ca:07:
         f8:39:ed:84:53:3c:b4:53:20:4c:c8:b3:e9:0b:19:db:1a:b7:
         a5:8b:ec:82:59:4e:69:7a:37:87:65:9e:00:b0:2b:1a:1b:08:
         fe:5e:38:3e:b9:5f:64:b5:71:b2:c8:a5:1b:d6:68:55:30:f7:
         c1:72:7e:90:c7:c2:30:da:f2:3b:5d:a7:0d:42:64:a8:04:d4:
         ca:dc:fd:40:7a:56:12:da:66:05:ac:c6:0b:8e:7c:3f:96:69:
         6c:79:22:ff:62:cf:6d:37:d8:e1:ce:30:a4:e7:47:e1:b9:0e:
         d4:13:40:3c:60:c3:98:98:50:b5:b3:76:e6:c0:78:39:ee:92:
         e5:bc:c6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:15 2026 by rpki-client