Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File:                     EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier:          6yloM1j0cG2pqbjcMm1QhLfcq1zLknnf9UvNgej3lH0=
Subject key identifier:   3F:E0:26:E5:10:C4:96:AF:BB:2B:40:BB:3D:17:65:B2:8D:D0:DB:F9
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number:          D1
Signing time:             Sun 01 Mar 2026 07:57:41 +0000
Manifest this update:     Sun 01 Mar 2026 07:57:41 +0000
Manifest next update:     Sun 08 Mar 2026 07:57:41 +0000
Files and hashes:         1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: dAxKkR2j7YSWlKFqS/ZEQOCXwNZkInI08JSuu/VZtcA=)
                          2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: X/F/VIP7MU7PxI/U+F3IMTIFv5orEEI5ux2V2I7dVFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Mar  1 07:57:41 2026 GMT
            Not After : Mar  8 07:57:41 2026 GMT
        Subject: CN=69a3f175-2b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:7b:1f:76:cb:83:63:9c:cf:f1:56:d3:9d:
                    78:0c:6b:16:5b:82:52:86:77:e3:d7:c9:b6:72:76:
                    10:02:54:58:b7:f5:01:ef:c3:af:e1:fd:83:d4:38:
                    83:42:35:f1:5b:70:e2:f9:c0:2a:48:4b:8d:b7:bc:
                    d3:cf:89:b0:47:4d:b4:89:b9:46:e9:33:cc:9a:0e:
                    68:61:fd:95:01:b8:34:91:63:ce:e9:28:2a:96:4a:
                    a0:44:9d:58:ad:5d:45:09:3c:ee:f0:78:65:2b:6c:
                    54:8e:28:ef:31:5e:8d:81:4f:7e:c3:a3:93:ed:28:
                    1a:1c:3b:65:5b:74:ac:00:76:68:67:bb:2f:0d:89:
                    a9:c1:81:74:81:76:73:b1:ff:cf:10:a6:b4:28:c1:
                    f4:cd:e8:d3:d7:94:02:2b:c7:a3:27:e7:46:e3:13:
                    a9:46:54:7c:da:97:d7:d6:d0:bd:1b:2d:1b:1a:6b:
                    53:17:00:96:84:06:21:a3:f5:f9:50:6a:f0:a2:d5:
                    ec:c4:61:8f:2f:0c:c6:52:32:5d:cc:f3:2d:0f:f7:
                    0c:35:70:99:4b:d6:67:5a:05:34:d0:fd:0d:ea:dc:
                    12:6a:a7:ad:a2:22:5c:2d:e1:13:32:3a:83:57:87:
                    80:52:54:2d:f7:37:85:93:02:fc:a6:67:88:7c:c3:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E0:26:E5:10:C4:96:AF:BB:2B:40:BB:3D:17:65:B2:8D:D0:DB:F9
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a9:36:07:e5:a6:89:3c:28:a4:2b:3e:5a:6a:f1:61:ea:2b:
         17:06:62:3f:04:52:01:a3:c4:b7:9f:2c:a0:29:db:45:51:24:
         c4:52:f0:d0:ec:6e:65:80:aa:2d:8a:6e:bd:04:25:5f:38:11:
         13:c2:e7:c2:8e:b5:11:fe:c8:4d:19:3e:54:47:6f:45:27:3e:
         d0:3d:d9:11:20:32:4d:1e:f9:fa:d0:35:24:11:96:7b:56:57:
         7f:a4:a0:da:16:58:45:d2:e1:e4:a8:b5:af:6a:4f:2e:1f:82:
         7e:1b:9e:ae:df:cd:1e:60:61:21:59:8e:c3:19:56:09:01:26:
         9d:c3:fa:2b:9f:73:04:7c:af:e5:fe:27:2d:16:4b:36:20:03:
         e3:da:ca:52:f0:30:87:e0:75:c7:81:41:15:12:9e:96:eb:07:
         9a:cd:75:67:67:9b:ac:cf:6e:cb:43:17:ea:40:78:fb:e4:cb:
         34:a6:c0:2a:fc:6e:b1:dd:6c:7b:b3:2c:11:91:89:60:79:39:
         87:d1:6d:89:af:27:30:5f:dd:0f:a6:64:4b:5c:0a:36:ba:ee:
         74:b9:b3:95:3b:55:60:1a:a6:c2:8e:1f:30:4e:57:8d:3d:8d:
         f2:fe:2b:7f:3c:e9:ae:91:d9:86:3e:8d:a2:2f:e7:a6:3a:85:
         4a:71:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:45 2026 by rpki-client