Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
File:                     eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft (raw, json)
Hash identifier:          en+AsU4xngUvoLvihzVrGZgN5D2GdiIwariDFxOkoGA=
Subject key identifier:   C2:FB:8D:30:2F:20:78:54:7A:05:0A:BB:E4:DB:2E:E7:67:53:47:18
Authority key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
Certificate issuer:       /CN=A9136359/serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
Manifest number:          46
Signing time:             Sun 01 Mar 2026 09:45:33 +0000
Manifest this update:     Sun 01 Mar 2026 09:45:32 +0000
Manifest next update:     Sun 08 Mar 2026 09:45:32 +0000
Files and hashes:         1: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl (hash: 4BYt4hW8nm+9CV2b/1v+7wTSR4cMEx0qvnkyxgUKX4Q=)
                          2: 698A914EAE2711F096416455C4F9AE02.roa (hash: y+r9i7TzL2RD/9MvqzeTGW3javTKIi4osSyKTznpviY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl
                          rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
        Validity
            Not Before: Mar  1 09:45:32 2026 GMT
            Not After : Mar  8 09:45:32 2026 GMT
        Subject: CN=69a40abd-2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:13:5c:60:e2:36:1c:25:a0:86:62:ff:42:1e:
                    bf:64:2b:89:b4:d2:ba:f4:13:3a:c9:62:8c:97:5e:
                    96:45:59:7f:23:9a:e2:58:aa:af:c7:7d:22:b7:40:
                    93:5e:c7:e7:10:39:5c:d2:97:ff:b2:e9:60:c4:6e:
                    a4:c6:59:a6:6b:c9:68:de:26:01:7f:a6:9d:d9:07:
                    87:40:c9:c7:0e:dc:ca:37:24:e6:15:e5:94:cf:ee:
                    19:93:94:8f:ee:b2:37:0f:82:c5:45:e4:e4:7e:5f:
                    6b:ad:ed:71:f3:6c:fc:c2:bb:89:48:10:72:aa:0c:
                    2c:ee:e1:88:19:ac:81:d4:23:0a:b4:92:f0:0a:b6:
                    4f:2a:13:a7:d9:2b:64:36:7e:aa:df:78:3c:43:0d:
                    1e:9d:34:ce:ee:2b:f5:dc:18:1d:10:c2:a6:e9:47:
                    0a:7a:10:ec:38:e8:20:64:be:14:d4:81:65:ef:4b:
                    0f:05:c5:e7:10:55:a2:ed:80:de:ba:62:86:68:0e:
                    a8:d3:b5:99:1f:2a:f0:9b:d1:8e:70:d7:5c:a3:e6:
                    e2:9d:10:fa:d9:f5:65:30:2c:bc:bd:91:3e:f6:83:
                    79:08:70:04:55:72:9f:a9:5c:59:53:c6:f5:b7:60:
                    d5:7a:1c:71:b3:a0:bc:6e:55:57:50:6f:7d:73:9d:
                    29:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FB:8D:30:2F:20:78:54:7A:05:0A:BB:E4:DB:2E:E7:67:53:47:18
            X509v3 Authority Key Identifier:
                keyid:79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b3:8e:88:4b:60:77:47:44:33:e3:2d:c9:7e:42:45:1b:c5:
         59:a7:8e:e8:be:b4:05:d4:15:de:54:c8:07:b7:ad:0b:1e:02:
         68:af:0a:8c:15:b3:6a:03:10:93:95:ad:56:d7:88:0e:6d:09:
         ab:e3:d7:f5:40:96:42:a9:bb:5a:59:25:38:8f:cf:2d:0c:80:
         b8:5d:c2:c4:03:b1:82:14:22:29:87:c3:19:1f:28:25:30:e5:
         42:6f:93:06:65:51:11:55:70:f5:e5:11:53:7d:b7:0e:52:c9:
         43:32:29:bc:8d:1f:40:ef:ce:63:d2:a1:c8:49:d8:55:29:f9:
         8f:45:a5:04:11:d5:8f:c5:cb:95:75:c7:a0:8a:0b:61:38:60:
         d1:df:de:8c:49:0c:67:d5:d4:c9:c4:d8:1b:73:67:64:89:93:
         16:4d:f6:ac:64:67:a0:3b:f1:61:0d:a1:3f:ba:c1:75:af:7b:
         a6:29:07:fc:f7:2a:d1:90:44:de:a3:97:64:df:de:f4:05:10:
         a5:bc:26:9e:57:bf:64:d0:11:a8:e4:60:e9:dc:4f:f8:88:f5:
         67:31:5b:32:5f:a0:8e:e2:ec:ab:be:73:89:90:a2:90:03:82:
         cf:1c:c1:8b:82:4d:ad:3d:d2:99:96:31:9e:73:2a:49:29:c9:
         d9:7b:59:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:26 2026 by rpki-client