Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
File:                     EpTEi8aWr-ggvRWC80NnutqwJDI.mft (raw, json)
Hash identifier:          BJsJ07MTjgm6w9Mk72KDP2d2YRutLMR+GY6bcyd7x7E=
Subject key identifier:   73:E4:AA:46:72:D3:79:E0:1E:64:93:8F:34:B4:E9:97:E7:77:36:F5
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
Manifest number:          050F
Signing time:             Thu 16 Apr 2026 23:33:04 +0000
Manifest this update:     Thu 16 Apr 2026 23:33:03 +0000
Manifest next update:     Thu 23 Apr 2026 23:33:03 +0000
Files and hashes:         1: EpTEi8aWr-ggvRWC80NnutqwJDI.crl (hash: L38UyTEEfKxl55Ru6OX5jZc2e8J/zAB7pa6Q3wqqBko=)
                          2: 2A84118CE0A311EC9CF2B738C4F9AE02.roa (hash: 5pzE/DEK+uZ2gUdloRUaMZ5/Ny9r+z2BlO/k/Ebfld8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817, serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: Apr 16 23:33:03 2026 GMT
            Not After : Apr 23 23:33:03 2026 GMT
        Subject: CN=69e171b0-8a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:69:f6:9b:4c:51:3c:5d:c6:6a:a1:54:ed:0f:
                    f1:50:aa:58:e0:a8:ad:12:3b:15:2a:78:40:d8:f4:
                    b5:b4:76:66:10:0e:f7:5e:3c:6d:dd:2f:7a:52:08:
                    b3:c2:5a:d7:de:ff:0b:c0:96:b8:28:a9:12:be:b4:
                    5b:dd:a1:3b:c4:c8:ea:ac:17:f3:32:a4:2b:39:1f:
                    7c:0f:d3:c7:8a:06:c8:0f:73:49:4e:30:6f:ee:41:
                    6d:07:ef:f1:5c:61:5b:c2:5c:e0:c1:ac:83:f4:48:
                    43:0e:3c:38:a0:40:9c:b1:9f:0e:01:30:aa:cc:ab:
                    2d:c8:e2:42:33:4c:b6:67:e7:ec:09:3b:1d:99:b6:
                    63:a4:d1:19:90:2b:2f:f2:db:07:24:3c:3e:3d:09:
                    82:15:ce:16:e3:18:26:c0:00:05:62:d7:6f:b3:ab:
                    37:23:3c:fb:56:28:5d:31:86:37:59:67:f3:fb:21:
                    4b:a5:43:f0:be:b2:3b:5e:17:e1:d2:93:a9:83:2e:
                    2d:4e:1f:e4:1e:54:d7:d2:c3:84:4a:4d:01:29:7b:
                    88:b1:5b:34:db:71:ac:01:42:94:34:e2:bb:d6:99:
                    2e:59:39:98:7c:27:26:e3:c7:2b:2b:a5:fa:7f:91:
                    15:10:c9:74:c5:c0:6b:a1:a9:50:b3:5a:d2:f9:04:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E4:AA:46:72:D3:79:E0:1E:64:93:8F:34:B4:E9:97:E7:77:36:F5
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:c8:2b:c8:69:05:96:fd:6f:71:08:2f:3b:72:fc:a1:f2:
         60:a9:e3:28:53:10:75:78:27:96:a9:a9:4c:cc:22:32:60:29:
         17:6b:29:a2:b9:2d:2a:74:c6:a7:53:d3:0e:1a:96:fa:ce:d1:
         4a:a8:eb:4a:bc:22:63:37:a0:6a:79:08:39:ad:9d:46:d0:3b:
         e2:35:cc:2d:ff:42:5f:de:c7:7d:88:49:49:8d:42:a3:c0:38:
         fb:c6:de:95:a0:a2:3f:4b:90:ed:6a:27:32:ce:6e:3e:12:ad:
         e7:91:cd:4e:2a:fe:0f:fc:16:a4:d9:12:e2:4a:26:fe:c8:d7:
         e8:7a:36:fd:78:a5:7a:b5:7e:fb:0c:c7:15:24:70:0b:ab:0c:
         4f:d9:27:ab:10:a5:f5:59:8c:75:8e:ab:22:96:9e:29:30:b8:
         0e:18:11:ab:b6:b1:45:9f:5c:6e:8c:88:82:3a:51:68:81:66:
         ad:c0:44:29:fe:09:8a:cf:76:1f:55:b1:0f:71:0a:fa:0e:c3:
         36:a5:ac:ff:82:95:8a:67:a9:5d:57:db:c5:86:e8:ec:12:20:
         c3:1d:9e:6f:e6:5a:80:ae:46:c7:2a:61:84:78:f6:93:e2:c8:
         75:83:76:8c:2f:c5:f0:f9:29:f1:41:94:84:20:83:70:1a:c7:
         7f:04:49:7d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4MTcxMTAvBgNVBAUTKDEyOTRDNDhCQzY5NkFGRTgyMEJEMTU4MkYzNDM2N0JB
REFCMDI0MzIwHhcNMjYwNDE2MjMzMzAzWhcNMjYwNDIzMjMzMzAzWjAYMRYwFAYD
VQQDEw02OWUxNzFiMC04YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmGn2m0xRPF3GaqFU7Q/xUKpY4KitEjsVKnhA2PS1tHZmEA73Xjxt3S96Ugiz
wlrX3v8LwJa4KKkSvrRb3aE7xMjqrBfzMqQrOR98D9PHigbID3NJTjBv7kFtB+/x
XGFbwlzgwayD9EhDDjw4oECcsZ8OATCqzKstyOJCM0y2Z+fsCTsdmbZjpNEZkCsv
8tsHJDw+PQmCFc4W4xgmwAAFYtdvs6s3Izz7VihdMYY3WWfz+yFLpUPwvrI7Xhfh
0pOpgy4tTh/kHlTX0sOESk0BKXuIsVs023GsAUKUNOK71pkuWTmYfCcm48crK6X6
f5EVEMl0xcBroalQs1rS+QRtZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHPkqkZy
03ngHmSTjzS06Zfndzb1MB8GA1UdIwQYMBaAFBKUxIvGlq/oIL0VgvNDZ7rasCQy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzgxNy8wNjgzRUI3MDRE
QUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3ItZ2d2UldDODBObnV0cXdK
REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VwVEVpOGFXci1nZ3ZSV0M4ME5udXRxd0pESS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzgxNy8wNjgzRUI3MDREQUMxMUVDODU3MTYwMjNDNEY5QUUwMi9FcFRFaThhV3It
Z2d2UldDODBObnV0cXdKREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXk3IK8hpBZb9b3EILzty/KHyYKnjKFMQdXgnlqmpTMwiMmApF2sporktKnTG
p1PTDhqW+s7RSqjrSrwiYzegankIOa2dRtA74jXMLf9CX97HfYhJSY1Co8A4+8be
laCiP0uQ7WonMs5uPhKt55HNTir+D/wWpNkS4kom/sjX6Ho2/XilerV++wzHFSRw
C6sMT9knqxCl9VmMdY6rIpaeKTC4DhgRq7axRZ9cboyIgjpRaIFmrcBEKf4Jis92
H1WxD3EK+g7DNqWs/4KVimepXVfbxYbo7BIgwx2eb+ZagK5GxyphhHj2k+LIdYN2
jC/F8Pkp8UGUhCCDcBrHfwRJfQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:25 2026 by rpki-client