Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
File:                     EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json)
Hash identifier:          ol2SUiRIbqomFx0/OcCd3uqafM12/Uq8mtCS4Bn5FEM=
Subject key identifier:   7C:83:F1:34:E5:92:06:A2:82:74:88:62:D8:FE:88:AD:30:8C:A9:04
Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF
Certificate issuer:       /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
Manifest number:          0101
Signing time:             Sun 01 Mar 2026 07:14:28 +0000
Manifest this update:     Sun 01 Mar 2026 07:14:27 +0000
Manifest next update:     Sun 08 Mar 2026 07:14:27 +0000
Files and hashes:         1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: sKaLpWfCAC4p5dI5p0t2oJqz9DgtTLuCz96pT4yQgsY=)
                          2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: AtI/2Ua9nQqNbzSJOCRvMvTqRCV50QJmjGrd4yNCBfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:14:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
        Validity
            Not Before: Mar  1 07:14:27 2026 GMT
            Not After : Mar  8 07:14:27 2026 GMT
        Subject: CN=69a3e754-a606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:21:bf:8b:99:1c:4f:9a:b5:03:a2:63:fa:
                    69:15:24:63:ca:fc:e4:00:a8:9d:eb:ed:20:09:9a:
                    28:33:8f:02:f0:ab:32:63:95:3c:76:f3:40:ba:7f:
                    ad:f5:cf:56:e7:30:67:3f:48:7e:22:f3:8a:80:65:
                    b2:ae:3a:97:41:91:cf:d0:07:6f:ea:80:45:e3:6b:
                    09:11:49:08:e9:ba:c8:40:fb:46:8e:c2:63:54:a8:
                    eb:5f:de:80:0e:16:15:26:9a:da:2f:6f:d0:da:02:
                    ed:f9:fd:8b:ee:b8:6e:0b:29:a7:c0:b0:6e:b7:49:
                    d9:c2:17:dc:a9:1a:bb:4a:5b:2e:f6:07:3e:26:39:
                    60:c5:12:b9:ab:23:de:34:48:3a:ee:6c:9b:73:2e:
                    ed:e2:4c:1c:7e:49:ef:97:5c:e7:66:7e:23:3d:23:
                    c0:51:4f:09:fb:81:7a:bf:af:6e:c4:b2:4d:6a:d7:
                    e1:7d:27:b2:f6:2f:04:0e:37:85:9b:f1:d3:f2:2c:
                    16:f1:e4:14:64:a6:75:c0:43:58:97:86:14:cf:03:
                    14:45:df:1e:06:35:36:1a:be:1a:f6:f6:18:10:65:
                    0a:dc:e6:c7:69:84:ea:b4:e7:ae:40:bd:18:c9:83:
                    d8:b3:1a:de:63:d0:2a:ba:64:23:b9:ad:c1:1c:8c:
                    64:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:83:F1:34:E5:92:06:A2:82:74:88:62:D8:FE:88:AD:30:8C:A9:04
            X509v3 Authority Key Identifier:
                keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:e1:93:7a:dc:1b:ba:f0:7d:d5:ba:45:55:df:c9:02:85:
         32:f5:31:30:7c:27:97:75:a0:0e:3f:96:4d:23:43:fc:e6:88:
         16:e0:75:65:a4:90:e6:40:08:d8:f0:b4:f3:4d:f5:7d:6a:7e:
         fb:af:d9:14:61:0b:8a:9b:1b:d3:fa:e2:8f:fd:f2:a1:cb:1f:
         ce:ae:95:4c:5e:3d:32:6c:60:9f:a3:a5:8b:e8:1f:0b:7a:f5:
         e7:9c:7f:9f:89:ff:9d:cf:70:5a:2e:f0:ac:d4:01:8b:a5:fa:
         58:8c:0d:ed:ca:70:76:05:eb:d5:ad:53:88:6b:c1:b5:ba:45:
         8a:44:28:ef:e4:fd:6f:55:02:1a:7c:7e:b9:cd:07:0a:0b:24:
         56:33:7f:e1:c7:4f:4c:d7:53:6a:6d:78:99:64:53:57:81:94:
         88:b4:f5:97:d2:3d:e3:0f:2a:2f:f2:e3:84:57:ac:30:8a:7f:
         ae:b9:5d:21:3d:49:33:b3:b5:2b:dc:1a:1d:3d:a0:d7:a8:4d:
         6f:30:fc:5e:87:6c:51:97:fc:b6:a5:37:72:35:e0:4b:dc:08:
         aa:41:d5:87:ec:b4:ae:87:85:5d:a7:6a:8c:04:52:3d:27:4b:
         e3:fd:e6:88:9a:a6:a8:45:b6:24:71:17:ce:da:a3:ca:e7:ce:
         18:ef:0c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:12 2026 by rpki-client