Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          0k5nPL3ATfTmAe6jfnO+Z7Ss0+GkQcklXR6HXrBVfBI=
Subject key identifier:   0D:C2:19:DB:48:5A:33:80:1B:C3:B0:0B:0C:6C:3A:38:AC:4E:4F:35
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       09FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          09F4
Signing time:             Thu 26 Mar 2026 19:44:33 +0000
Manifest this update:     Thu 26 Mar 2026 19:44:33 +0000
Manifest next update:     Thu 02 Apr 2026 19:44:33 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: cRPr4s5C+eswDsAkdo+daiMRCIImSG1ARuSomYYFNtk=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: jI6HZInKgUXWgQZHqo8Q6HEpUFhmYGG6RExCLAEtqzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2556 (0x9fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Mar 26 19:44:33 2026 GMT
            Not After : Apr  2 19:44:33 2026 GMT
        Subject: CN=69c58ca1-efaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:56:3f:46:91:2d:9b:4b:3c:b9:9b:ed:cf:ea:
                    a9:ee:08:aa:79:1c:d6:49:7e:08:29:4c:5e:f2:bd:
                    39:56:69:d2:74:ef:54:9d:9a:c8:ad:15:e8:da:a0:
                    b1:6d:bc:be:f3:e9:39:fb:a4:6e:39:5d:1c:2d:c4:
                    04:1a:ae:13:9d:7c:72:f5:14:96:aa:c7:6a:55:8a:
                    17:4c:37:77:dc:d0:a1:1f:34:7a:66:f2:c1:3f:47:
                    eb:71:3f:e3:7d:ad:13:6b:db:24:a9:71:d8:9d:c0:
                    14:87:69:a3:cf:06:a1:c9:51:80:01:84:4a:7a:c4:
                    8f:48:fe:8f:f6:68:78:7f:dd:b2:96:7b:de:74:c7:
                    a2:4e:bd:e5:d8:68:5a:19:08:ad:21:7e:46:af:bd:
                    48:e0:54:55:1c:0d:87:01:55:34:4b:1b:cf:b7:7e:
                    3b:4e:c8:73:63:ba:4e:16:76:85:0c:b4:62:35:96:
                    17:7f:5b:ee:dd:09:c3:67:ad:0f:c6:76:0b:cf:16:
                    51:b2:0e:f6:b7:6b:7c:87:e7:94:6a:a2:83:f9:19:
                    e8:fc:66:68:f0:42:73:a0:04:1a:35:36:6a:69:1d:
                    2e:16:10:56:9a:17:8a:90:16:24:d2:bd:dd:e8:f3:
                    5d:74:67:fa:8d:b7:ef:32:38:3f:07:1e:6a:bf:e9:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:19:DB:48:5A:33:80:1B:C3:B0:0B:0C:6C:3A:38:AC:4E:4F:35
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:94:c4:a6:11:93:d1:06:81:6b:17:35:3a:d0:fb:b1:ae:05:
         52:ac:80:55:b4:70:ce:8f:9d:e4:82:b5:04:9d:86:3f:7b:9b:
         f0:e6:b0:2d:f2:fb:7c:a3:1b:08:dc:cc:35:7e:c3:03:97:ba:
         78:4a:dd:79:08:c6:9d:b0:85:70:fc:71:11:8a:ac:c0:24:15:
         78:8a:18:3f:fc:98:ba:a4:d3:f8:24:88:19:3b:4a:1e:be:c3:
         f8:93:75:ac:63:cb:98:c2:cd:97:2c:dc:79:3e:87:96:64:04:
         64:3c:79:a8:00:e8:00:37:a7:f8:31:f8:99:04:6b:e0:4f:59:
         58:39:ee:04:5f:f6:7d:f3:e6:ef:19:7c:01:d1:9f:7a:04:04:
         87:f8:b8:2b:1a:95:4a:7d:08:14:40:b8:39:88:10:8c:80:47:
         df:ec:be:9a:82:53:db:79:96:29:65:db:ef:c0:3a:8e:5e:b1:
         ea:42:f6:af:e6:07:cb:10:a0:a1:5b:aa:52:2c:3d:a6:46:41:
         7a:91:61:27:e6:3a:c5:bc:9e:bb:58:80:3c:08:6b:07:d9:f0:
         78:64:00:07:6b:3a:ab:b4:7e:c5:1f:7c:02:22:9f:e8:4d:9a:
         e7:44:cd:dc:55:e0:85:28:fb:87:7c:c2:a2:0e:cf:dd:53:52:
         47:84:8a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:13:22 2026 by rpki-client