Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
File:                     eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft (raw, json)
Hash identifier:          wS3efqzdL7s1NpWbs2Y5oeAFHXAQSHpBZK93TwTHioY=
Subject key identifier:   FC:57:F5:B1:4D:35:F8:51:5A:27:54:14:3F:E2:E4:C6:29:BA:26:17
Authority key identifier: 79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44
Certificate issuer:       /CN=A9128992/serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
Certificate serial:       2400
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
Manifest number:          23E6
Signing time:             Thu 16 Apr 2026 15:46:33 +0000
Manifest this update:     Thu 16 Apr 2026 15:46:32 +0000
Manifest next update:     Thu 23 Apr 2026 15:46:32 +0000
Files and hashes:         1: eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl (hash: yygK1FlwSTaVM07wesyuO8P8op/qIEQ3wg4rEO73RNU=)
                          2: C6D6646ECB5E11F0BCC7A882C4F9AE02.roa (hash: aCr2ZrH5f1RnZmTmyJ5g/z1LtQRu33OI656p6b8Gmu8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl
                          rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9216 (0x2400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9128992, serialNumber=79014A5F07319F0460FCD04FC4AAABCCE09ED344
        Validity
            Not Before: Apr 16 15:46:32 2026 GMT
            Not After : Apr 23 15:46:32 2026 GMT
        Subject: CN=69e10458-de60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:28:a1:18:d7:9c:4e:e1:ed:27:7c:a0:93:53:
                    cb:97:72:7a:7e:77:ac:32:fa:b9:18:61:fd:4b:d8:
                    01:d5:3c:8d:53:f7:80:d5:e3:a1:cb:80:1c:fc:b8:
                    a0:af:01:5b:4e:7a:10:ca:47:eb:24:da:b2:f0:ec:
                    f1:7c:32:30:0f:ec:3b:9e:a7:a0:87:df:b5:8a:2c:
                    d2:7e:a6:49:ab:49:29:49:4b:e7:55:53:c7:b4:77:
                    00:a2:7c:bb:d3:2d:1c:3b:5c:56:f4:0d:92:08:be:
                    0b:e5:17:3c:97:1c:6d:e1:c6:fa:d1:56:51:b5:c6:
                    ea:0d:93:81:b3:5b:d8:d6:70:85:14:e4:ac:b0:38:
                    5f:0c:8b:70:3b:6c:72:2c:57:07:0d:45:81:4e:dc:
                    4c:93:28:32:23:57:9c:be:da:15:a0:f1:98:e6:2c:
                    88:a3:3c:cb:d9:dd:15:11:be:49:47:74:fd:ef:d2:
                    94:fe:8a:ea:de:3d:bc:cb:c8:70:af:e3:e8:bf:7c:
                    ae:18:d1:95:f0:32:23:00:a2:30:5d:2a:7a:21:bd:
                    fa:38:df:d9:4c:ee:ac:9b:89:c9:f1:22:01:49:e4:
                    e9:81:2d:39:fb:ca:19:dd:3c:90:dd:18:fa:fe:b0:
                    d9:6c:f5:4e:7d:5e:fe:2b:79:c3:17:9e:a3:d3:34:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:57:F5:B1:4D:35:F8:51:5A:27:54:14:3F:E2:E4:C6:29:BA:26:17
            X509v3 Authority Key Identifier:
                keyid:79:01:4A:5F:07:31:9F:04:60:FC:D0:4F:C4:AA:AB:CC:E0:9E:D3:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQFKXwcxnwRg_NBPxKqrzOCe00Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128992/FADBC56C87A111E5AEB47F4DC4F9AE02/eQFKXwcxnwRg_NBPxKqrzOCe00Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:4a:b3:cc:a0:0c:04:c1:7a:73:d7:0a:20:68:e6:02:04:
         e7:86:67:1a:1e:5f:b9:49:c6:3c:c5:45:a1:49:5b:6b:fe:dc:
         22:e2:3c:aa:1f:8b:44:d6:a8:7b:b4:19:68:5b:05:8a:c3:3d:
         29:a6:e0:a8:7a:32:10:4b:0d:ba:3c:79:9c:b4:5b:bc:10:97:
         9a:b1:9a:cf:04:a0:98:ac:08:c4:ad:40:af:b7:7c:1e:80:85:
         07:76:cf:b0:6d:ba:04:ad:71:9f:06:d5:58:bd:c3:75:07:a9:
         ae:dd:71:f5:17:b2:cb:5b:4f:86:9a:a6:ec:90:56:0f:07:a1:
         fd:8a:e9:2d:e2:be:60:a9:e3:c3:32:41:c0:27:ce:ea:f9:0b:
         85:29:8c:77:4c:bf:03:5c:a3:a9:b2:a2:a4:2e:e3:db:8f:4f:
         96:4c:9c:67:f0:bb:d1:d4:59:67:ba:e9:e7:91:49:92:66:91:
         ed:01:9f:5b:7f:e5:8b:c7:40:53:58:c8:8f:71:a8:23:a5:7c:
         57:6c:00:3b:a5:6c:2c:25:7d:ad:06:9e:66:23:51:04:5c:7d:
         c6:6b:2b:f4:c6:a9:e3:58:0e:49:b4:6d:ef:f3:ff:e0:6f:28:
         c6:88:44:d6:2f:45:a5:31:34:9d:62:97:f2:7c:c6:7f:f9:18:
         27:97:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:50 2026 by rpki-client