Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
File:                     ejg10bvhsbJcMWkZLSvc1xk6i8I.mft (raw, json)
Hash identifier:          Wr5BC49/hQgIKfmMAfk9c/oNaKbehi10/0+jOAqdo2k=
Subject key identifier:   CF:D1:88:AF:4E:21:87:06:57:D2:CF:6F:F3:CB:6C:6C:F1:DC:9F:5D
Authority key identifier: 7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2
Certificate issuer:       /CN=A91D03EE/serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
Certificate serial:       0B99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
Manifest number:          0B87
Signing time:             Thu 26 Mar 2026 19:03:13 +0000
Manifest this update:     Thu 26 Mar 2026 19:03:13 +0000
Manifest next update:     Thu 02 Apr 2026 19:03:13 +0000
Files and hashes:         1: ejg10bvhsbJcMWkZLSvc1xk6i8I.crl (hash: u6qydnRY1Vwm1UuivgparBa/vCEA5T/06qKzKT0P7xE=)
                          2: 186A84C83A1811EBAF24B12EC4F9AE02.roa (hash: OGoUhqxGb/v1NECssGQWXzp0QMgYwxdeF00KucDqSNo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl
                          rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2969 (0xb99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D03EE, serialNumber=7A3835D1BBE1B1B25C3169192D2BDCD7193A8BC2
        Validity
            Not Before: Mar 26 19:03:13 2026 GMT
            Not After : Apr  2 19:03:13 2026 GMT
        Subject: CN=69c582f1-c270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:45:0b:c0:02:14:90:6d:fa:94:b6:6d:86:
                    91:d4:a0:2b:e6:37:0f:ed:55:dd:4d:79:f9:cd:44:
                    90:9f:55:e2:e2:93:cf:8f:e2:96:96:46:0a:e3:9c:
                    ba:48:ae:4d:49:f5:a6:47:35:d1:a3:e4:32:9f:ad:
                    7e:92:fc:ea:1c:3b:37:30:d6:32:ca:8d:13:05:10:
                    60:14:a1:61:68:25:5c:e6:88:f1:31:49:13:59:a3:
                    24:02:32:0c:2e:0b:dd:88:52:1d:d7:6f:00:e6:82:
                    25:d1:ae:6b:84:99:2d:41:f6:ac:f7:a7:9b:d7:aa:
                    97:e9:99:bd:2c:67:b1:e5:f1:99:a7:e4:34:5f:03:
                    34:06:68:c0:1b:11:6a:38:76:19:02:ad:d5:3c:f7:
                    bd:44:8c:a0:3b:e4:8d:74:9f:e1:ae:f6:62:f1:07:
                    5f:fa:05:cb:1f:01:3b:ff:2c:90:15:fa:5a:f1:e5:
                    c8:82:cf:c5:2e:4e:3f:45:ea:83:41:f6:fd:11:31:
                    d6:d3:0a:b0:f6:28:10:29:11:be:86:08:c4:63:36:
                    21:cf:f1:38:39:0a:13:2b:8c:72:39:7d:ff:59:04:
                    0e:b2:86:09:52:de:76:2d:a4:a4:47:0b:c3:0a:cb:
                    fc:eb:9b:94:d8:87:d7:08:12:d7:97:ae:b4:da:f9:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:88:AF:4E:21:87:06:57:D2:CF:6F:F3:CB:6C:6C:F1:DC:9F:5D
            X509v3 Authority Key Identifier:
                keyid:7A:38:35:D1:BB:E1:B1:B2:5C:31:69:19:2D:2B:DC:D7:19:3A:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejg10bvhsbJcMWkZLSvc1xk6i8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03EE/67281CF4497F11EA967A2E0BC4F9AE02/ejg10bvhsbJcMWkZLSvc1xk6i8I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:44:70:b9:08:2d:93:0c:4d:cf:f5:57:d0:73:ec:36:eb:6a:
         b8:33:4b:13:92:35:e3:0c:30:d0:ec:56:d3:bc:86:cc:c5:83:
         69:f1:7c:ba:3e:49:a4:50:19:0d:58:37:f5:da:a1:cd:8f:b7:
         38:51:80:6b:c2:a9:76:91:e2:b5:db:46:7f:33:99:41:8d:08:
         ce:bf:a6:ab:cc:04:45:d3:5f:b4:6d:2a:64:5f:8c:81:1c:09:
         2b:92:c5:a4:56:4f:05:15:c5:e4:36:c8:15:7f:af:10:eb:6f:
         66:77:75:5a:5c:62:dd:4f:04:60:aa:ae:85:33:28:98:47:40:
         98:dd:df:2e:eb:df:a7:75:14:7f:5e:f5:a5:49:bb:92:79:91:
         1b:fd:33:b9:a6:e3:ed:ee:b1:90:18:60:a3:7d:18:b1:e9:9d:
         99:df:ff:34:87:db:67:f6:bb:de:27:df:67:c4:98:3a:0f:53:
         b8:25:21:67:60:31:0e:58:92:50:0d:9b:78:70:96:44:63:0f:
         05:e6:15:fd:cd:33:2a:67:b5:d0:3d:0c:be:80:48:72:9a:44:
         76:e5:52:e3:f9:b9:05:4a:cc:ea:e4:0d:02:ec:e0:93:0d:b8:
         19:11:1d:b6:21:95:94:6f:3f:49:ef:4a:89:66:5d:ee:1d:e9:
         b5:26:26:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDAzRUUxMTAvBgNVBAUTKDdBMzgzNUQxQkJFMUIxQjI1QzMxNjkxOTJEMkJEQ0Q3
MTkzQThCQzIwHhcNMjYwMzI2MTkwMzEzWhcNMjYwNDAyMTkwMzEzWjAYMRYwFAYD
VQQDEw02OWM1ODJmMS1jMjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3pZFC8ACFJBt+pS2bYaR1KAr5jcP7VXdTXn5zUSQn1Xi4pPPj+KWlkYK45y6
SK5NSfWmRzXRo+Qyn61+kvzqHDs3MNYyyo0TBRBgFKFhaCVc5ojxMUkTWaMkAjIM
LgvdiFId128A5oIl0a5rhJktQfas96eb16qX6Zm9LGex5fGZp+Q0XwM0BmjAGxFq
OHYZAq3VPPe9RIygO+SNdJ/hrvZi8Qdf+gXLHwE7/yyQFfpa8eXIgs/FLk4/ReqD
Qfb9ETHW0wqw9igQKRG+hgjEYzYhz/E4OQoTK4xyOX3/WQQOsoYJUt52LaSkRwvD
Csv865uU2IfXCBLXl6602vn67wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/RiK9O
IYcGV9LPb/PLbGzx3J9dMB8GA1UdIwQYMBaAFHo4NdG74bGyXDFpGS0r3NcZOovC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNFRS82NzI4MUNGNDQ5
N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNiSmNNV2taTFN2YzF4azZp
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VqZzEwYnZoc2JKY01Xa1pMU3ZjMXhrNmk4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDNFRS82NzI4MUNGNDQ5N0YxMUVBOTY3QTJFMEJDNEY5QUUwMi9lamcxMGJ2aHNi
SmNNV2taTFN2YzF4azZpOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo0RwuQgtkwxNz/VX0HPsNutquDNLE5I14www0OxW07yGzMWDafF8uj5JpFAZ
DVg39dqhzY+3OFGAa8KpdpHitdtGfzOZQY0Izr+mq8wERdNftG0qZF+MgRwJK5LF
pFZPBRXF5DbIFX+vEOtvZnd1Wlxi3U8EYKquhTMomEdAmN3fLuvfp3UUf171pUm7
knmRG/0zuabj7e6xkBhgo30Ysemdmd//NIfbZ/a73iffZ8SYOg9TuCUhZ2AxDliS
UA2beHCWRGMPBeYV/c0zKme10D0MvoBIcppEduVS4/m5BUrM6uQNAuzgkw24GREd
tiGVlG8/Se9KiWZd7h3ptSYm/g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:12 2026 by rpki-client