Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File:                     ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier:          5w/baMJamRodna4OXpiviRorDOHiXmYV80Q/O0Ndw8s=
Subject key identifier:   C3:7C:FE:83:71:81:87:E6:2E:88:91:6D:46:99:72:A9:74:36:0B:A3
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer:       /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial:       0BB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number:          0B9F
Signing time:             Tue 12 May 2026 19:09:26 +0000
Manifest this update:     Tue 12 May 2026 19:09:26 +0000
Manifest next update:     Tue 19 May 2026 19:09:26 +0000
Files and hashes:         1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: TDclZ5+8kK/Y8BCj4xQxy+KHOdJZw0krCr2FV6q6ZmY=)
                          2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
                          rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
        Validity
            Not Before: May 12 19:09:26 2026 GMT
            Not After : May 19 19:09:26 2026 GMT
        Subject: CN=6a037ae6-37c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:62:ed:92:74:1d:f5:7b:87:fd:6f:15:2d:
                    e8:3d:6c:02:8e:ba:27:40:fe:f0:1b:3d:af:d9:c5:
                    a6:3f:4c:cd:b1:ae:21:b7:7b:f1:34:a4:af:de:d9:
                    1b:9f:63:49:de:4a:39:d3:c3:90:c6:48:e4:2a:07:
                    ae:5b:ee:05:69:01:83:3b:39:62:b4:f7:9d:58:5e:
                    6b:37:12:af:5b:03:cb:c2:cd:28:ad:04:fd:1b:3a:
                    3f:c0:ad:6e:29:a2:7c:51:69:c0:37:f4:55:b5:19:
                    29:f5:91:bc:a5:fa:d2:ac:b1:bb:10:72:7d:5c:94:
                    fa:78:13:d8:d6:cb:b0:25:75:fa:29:b2:3b:6f:09:
                    c2:26:bf:b5:9a:11:58:52:6e:36:66:c1:04:63:01:
                    80:99:3d:9c:87:0f:d6:32:78:3f:dc:bc:2a:f4:ce:
                    75:e6:ac:aa:63:4e:80:af:37:a1:cf:57:20:98:e8:
                    3e:82:fe:cd:38:e9:fd:61:78:f0:72:42:f5:74:e8:
                    54:2e:21:28:85:0b:18:75:eb:22:97:33:79:31:06:
                    de:3b:ef:0d:3f:c0:6e:e1:60:39:9e:f2:fd:5e:f4:
                    7b:28:0c:73:be:64:e6:2b:b5:0b:94:62:a2:93:64:
                    9b:6b:5c:e3:e6:da:85:cb:47:9e:89:f6:26:0e:7c:
                    54:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7C:FE:83:71:81:87:E6:2E:88:91:6D:46:99:72:A9:74:36:0B:A3
            X509v3 Authority Key Identifier:
                keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:ed:fa:35:15:74:2e:23:53:c9:9f:ac:fb:3e:04:da:7f:
         54:ce:e0:66:8c:ed:7c:b7:86:f4:2b:f6:07:7c:91:d4:dc:94:
         5e:d8:7e:f6:c0:e6:5d:a7:db:7b:f7:ea:02:7f:10:5a:c1:a0:
         65:15:56:65:ec:84:39:d3:83:ea:0b:0b:de:5b:72:08:a1:9f:
         33:b4:03:79:16:34:c6:e3:eb:3e:13:d8:58:f6:10:96:0e:44:
         19:58:02:e3:69:bc:84:4f:f0:56:9a:02:46:d3:f9:dc:cb:9b:
         e9:1a:86:30:06:a9:7c:88:8f:0e:c1:68:5d:fe:7c:ca:df:a9:
         89:59:82:96:4f:9f:f7:bb:a4:45:f5:26:a6:9b:eb:97:70:ec:
         d3:13:d2:71:2c:59:1d:d9:4b:9b:74:52:61:86:c8:13:93:39:
         47:e3:71:a8:3d:ee:43:2f:5b:44:45:53:9f:0e:7b:ae:8c:a4:
         ab:d6:05:ed:ac:2c:f8:95:11:a5:ca:fe:a5:a7:04:20:19:d2:
         e2:eb:12:d6:fd:2e:61:f3:39:76:f2:29:1a:61:aa:81:ca:cc:
         3e:95:95:3e:12:bc:af:0c:72:fa:80:f6:69:a1:42:8d:b5:da:
         5b:a1:90:04:59:9b:92:6f:58:6b:79:c5:c6:89:29:9d:fc:92:
         a6:47:30:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:09 2026 by rpki-client