Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
File:                     eI-02WtgHbphbd3JnP5GXWDDjyE.mft (raw, json)
Hash identifier:          3YsANfIYpI7vh244fXiAQPaDAStil099UvWGrUUllFk=
Subject key identifier:   C6:34:2F:4E:71:E6:5D:11:B9:6B:69:7A:A3:83:2E:72:82:32:FA:46
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Certificate issuer:       /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial:       0115
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
Manifest number:          07D3
Signing time:             Thu 16 Apr 2026 23:41:18 +0000
Manifest this update:     Thu 16 Apr 2026 23:41:18 +0000
Manifest next update:     Thu 23 Apr 2026 23:41:18 +0000
Files and hashes:         1: eI-02WtgHbphbd3JnP5GXWDDjyE.crl (hash: 1Gpx25RprLKFI5ece/On7mUJFvU9SvMbnFwxMQpBPDY=)
                          2: 960BB902A6F111EF9E720A74C4F9AE02.roa (hash: STUdH7Ao2bba9m0LEPqkF49NPCbvUAEM5+0HmE9haeE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
        Validity
            Not Before: Apr 16 23:41:18 2026 GMT
            Not After : Apr 23 23:41:18 2026 GMT
        Subject: CN=69e1739e-ae5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:cb:5b:3c:03:d8:29:92:59:f6:33:44:ad:
                    b9:18:e7:41:7c:6a:e6:13:62:5a:c0:ee:8b:8d:91:
                    e8:db:19:b2:ee:3c:3d:0b:8f:0f:48:47:75:6f:db:
                    7e:d9:94:cf:24:57:3f:44:b8:b3:f8:89:d7:53:d2:
                    a1:23:5b:93:5e:01:cf:57:af:4a:a4:96:4c:bd:51:
                    72:97:cb:33:73:df:1e:04:f5:94:a8:95:77:c3:ca:
                    6b:28:de:d9:d6:99:5c:c3:a3:15:e7:43:87:75:67:
                    3e:49:ac:22:db:1e:e3:49:ff:1e:7d:9d:2c:88:94:
                    de:a1:f2:7f:3e:20:6e:b2:a1:7b:39:a3:af:a4:10:
                    94:72:13:f7:b4:55:5a:3f:af:81:86:5e:4d:ed:4a:
                    25:97:23:e4:3b:90:96:ce:07:1b:52:a3:19:39:51:
                    05:30:92:c8:38:0c:4d:7c:33:e3:00:83:91:7a:32:
                    71:d3:72:a0:5b:a1:62:15:87:39:e4:0d:86:b4:a4:
                    a0:34:68:0b:9f:61:06:28:ab:b2:c4:3c:5b:4e:e8:
                    f1:2d:f4:44:ed:f2:c5:e2:23:a8:02:01:e2:65:33:
                    b3:9e:a6:16:9c:a8:b5:e7:2a:a1:a4:43:57:29:a0:
                    75:a9:56:73:0f:9c:a2:26:2e:63:a7:45:73:19:44:
                    a5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:34:2F:4E:71:E6:5D:11:B9:6B:69:7A:A3:83:2E:72:82:32:FA:46
            X509v3 Authority Key Identifier:
                keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7e:bc:96:a0:eb:7b:c8:1c:f1:ae:b6:1a:91:e3:af:af:e9:
         24:2d:d7:03:85:ab:56:46:2c:f5:69:dd:91:02:c3:0d:1f:26:
         4c:69:7a:ac:7f:3d:90:fc:9e:1e:ff:ca:86:68:52:0a:45:dd:
         21:28:8f:71:17:20:f5:ce:56:a5:24:b7:d7:93:c3:97:3a:4d:
         44:14:14:25:6a:e8:82:e4:48:a4:76:03:69:02:d9:ab:49:d5:
         df:73:d0:79:cd:f2:74:8c:d0:f4:f9:34:36:b1:a4:8f:d3:39:
         33:98:60:a7:2b:66:cd:db:4c:a9:f4:cb:9d:18:6d:d7:85:d1:
         c2:2b:79:c7:43:2a:93:68:50:a8:90:4d:12:71:06:d0:92:be:
         2c:43:83:ea:b4:0f:d2:94:45:01:4a:0d:27:b2:a7:c9:7b:1e:
         d4:3d:61:67:e7:d9:65:15:51:13:c0:94:88:c4:06:b6:cb:a3:
         da:50:d5:d8:5e:20:cb:19:ee:8e:00:50:ad:73:ba:9a:e0:7e:
         a4:78:71:47:31:bb:a7:82:f5:24:49:41:1b:03:3a:99:11:68:
         22:ad:ad:0b:db:1c:08:8e:7e:b6:f0:a1:6e:4e:02:2d:d3:50:
         da:44:2a:a3:9f:bf:b7:8a:14:37:2e:3b:d5:b0:49:fb:8e:46:
         14:b8:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:06 2026 by rpki-client