Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
File:                     ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json)
Hash identifier:          ehKKCuQoG0gP+KByPWyRMK/ySOZlCE6wCC0f1hg+Etk=
Subject key identifier:   F4:36:0D:CD:79:08:CF:2A:4D:4D:DE:52:FA:BB:C0:39:B7:25:95:59
Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8
Certificate issuer:       /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
Certificate serial:       1CD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
Manifest number:          1CBE
Signing time:             Thu 26 Mar 2026 16:08:46 +0000
Manifest this update:     Thu 26 Mar 2026 16:08:46 +0000
Manifest next update:     Thu 02 Apr 2026 16:08:46 +0000
Files and hashes:         1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: 9kh4pFwCkpUAT0S46qFEFS+HfS92fSYO06YbIU8KrAA=)
                          2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 1JIPjH43h7F+AY6RV/6u/KwLSOLkd4S+wof4uQEdR30=)
                          3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: R+96bcwecFf2cVpU7ANBKtm0Iy1WRFMsackOslbooo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 16:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7385 (0x1cd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8
        Validity
            Not Before: Mar 26 16:08:46 2026 GMT
            Not After : Apr  2 16:08:46 2026 GMT
        Subject: CN=69c55a0e-315d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:fa:39:9a:4c:e0:8e:f4:07:2d:d7:fa:9b:
                    e1:39:9c:15:1a:5f:21:36:ab:f3:80:dd:b0:2a:5b:
                    db:6e:6c:1d:74:26:75:22:97:e4:a8:bd:7a:36:f3:
                    b4:47:2d:85:f6:8e:fc:39:40:94:56:ac:0f:f5:ad:
                    d5:2e:fe:29:6e:86:99:92:47:f3:c5:96:7a:c6:b6:
                    14:dc:d5:f1:95:cd:d9:73:f3:89:7d:f1:2a:ff:a6:
                    b4:01:87:8d:b6:de:6d:ee:72:b6:40:af:ab:94:0e:
                    c0:3a:b6:66:6e:83:6d:01:ad:80:2a:f7:58:c1:51:
                    69:11:8e:48:6e:b3:0f:66:e0:87:45:50:f9:29:e1:
                    ae:0d:15:63:6d:76:0f:72:5d:96:94:f4:db:a0:03:
                    29:21:8b:ef:95:22:10:33:f4:34:a2:71:8d:37:96:
                    5b:ef:6f:5f:aa:f0:0b:fe:52:4e:3a:d0:98:ee:74:
                    25:06:c4:b0:37:19:3b:b3:40:72:31:a5:82:db:41:
                    4f:56:72:82:39:cc:17:38:c7:b8:01:c3:cc:6d:42:
                    19:0c:d2:ce:2d:15:cc:ab:6b:3f:c2:ce:08:20:e8:
                    5c:55:07:3e:68:9f:c7:db:02:37:8f:e0:72:0c:bc:
                    82:17:f5:6d:07:9e:e5:58:26:a9:d2:ed:99:88:ec:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:0D:CD:79:08:CF:2A:4D:4D:DE:52:FA:BB:C0:39:B7:25:95:59
            X509v3 Authority Key Identifier:
                keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:27:f4:1e:08:9a:a6:53:a5:10:1b:f1:c1:8f:40:18:c1:fd:
         ea:4b:d0:da:b7:9a:01:ca:2a:b5:50:58:69:10:51:24:44:74:
         f8:87:40:04:78:cb:84:ab:04:39:2e:70:90:42:e8:6b:01:f6:
         68:32:49:8a:c9:6d:fe:f4:97:6e:c4:2c:54:07:69:8b:31:1f:
         bc:19:66:b5:14:c0:74:e4:c9:bb:ef:20:65:9f:a6:2c:7b:75:
         10:44:f8:3c:72:54:7b:63:e4:9d:3c:c7:c2:65:8e:6e:22:66:
         94:b2:16:b3:8b:51:f2:f2:66:65:15:62:71:4c:6b:eb:38:dd:
         b7:bf:6e:88:f5:3d:33:34:1f:31:1e:2a:c8:7b:fe:36:c9:35:
         91:cc:3e:cf:7f:8c:84:ef:5e:d2:42:0d:1b:2f:58:c1:da:85:
         27:76:20:b2:d0:ca:6a:b0:dd:af:33:d8:e4:68:57:83:6d:98:
         7b:ae:26:69:c2:be:f7:1a:8c:e1:f5:a0:39:c1:79:1a:fe:66:
         b1:60:69:66:36:e6:72:09:aa:fa:32:09:6e:f6:81:37:46:5a:
         cd:34:ea:8a:ca:41:fd:68:67:5f:fc:92:87:b0:b0:43:92:bf:
         f3:64:f3:90:1f:0f:ab:83:3a:cb:59:9d:b2:da:23:66:b1:2f:
         4e:c8:a5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:44:57 2026 by rpki-client