Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
File:                     EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json)
Hash identifier:          z1/6U0wgNcPl1lRaCApijLcJPJkdBwtpJxJtbXN+3lQ=
Subject key identifier:   55:EE:D1:18:48:36:EE:50:FD:DA:40:12:C0:E6:91:9C:EC:4A:65:5D
Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF
Certificate issuer:       /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
Certificate serial:       0120
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
Manifest number:          011A
Signing time:             Fri 17 Apr 2026 05:33:21 +0000
Manifest this update:     Fri 17 Apr 2026 05:33:21 +0000
Manifest next update:     Fri 24 Apr 2026 05:33:21 +0000
Files and hashes:         1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: ltSuENMC7tuOEavJoxevBuO+GbJvw//6BDiU637ju3c=)
                          2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: rVa/wWPzr3OwQnrIVB/RLkiVW7fhkqdwgET1KnDvQTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
        Validity
            Not Before: Apr 17 05:33:21 2026 GMT
            Not After : Apr 24 05:33:21 2026 GMT
        Subject: CN=69e1c621-01a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:dc:63:49:c0:a4:4b:3c:d3:bb:82:6e:9f:
                    51:8d:30:2f:7f:9f:5f:ee:a3:3b:a9:cf:c5:fe:fd:
                    bb:ce:10:61:d3:0e:1f:4d:ee:6a:fa:bb:31:45:d7:
                    38:3c:65:7d:e7:5d:b0:f3:ec:ef:0d:d2:a0:1d:cb:
                    63:b3:1e:0f:db:95:c2:ef:9a:e3:71:b8:96:34:78:
                    16:05:a8:f2:fd:c9:54:25:c9:79:5d:1d:18:1d:73:
                    6f:58:5f:34:e0:8a:95:8c:be:06:be:3f:45:ec:3e:
                    fd:2a:74:68:bd:6a:a5:01:d2:44:a8:54:57:68:cc:
                    60:b6:df:48:6d:b8:94:a2:ba:04:04:45:07:04:a7:
                    e4:27:e0:b0:6c:8d:f8:2e:21:6d:4d:f2:28:4a:89:
                    6e:35:50:e8:e5:aa:96:94:a6:fd:6e:df:54:ae:75:
                    f4:37:e4:8d:62:fc:5c:22:b0:05:4f:da:d4:e3:cd:
                    ef:ac:32:3d:10:83:d1:cf:af:68:bf:9b:b4:d6:ff:
                    7b:95:10:4b:fa:9c:58:70:ce:12:cc:e6:13:88:cc:
                    be:c1:dd:24:76:bd:d6:76:5a:81:2b:e0:47:75:43:
                    3f:ad:40:62:80:06:d0:9b:02:ff:d4:cd:0f:bb:ed:
                    12:fb:d4:ae:ee:04:dc:ca:28:fa:c0:99:71:a7:04:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EE:D1:18:48:36:EE:50:FD:DA:40:12:C0:E6:91:9C:EC:4A:65:5D
            X509v3 Authority Key Identifier:
                keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:61:b8:7f:0b:03:75:db:92:9d:a7:70:0a:1a:98:20:62:39:
         9f:f7:5b:c4:83:c5:10:88:af:58:07:f8:eb:9b:26:80:65:c9:
         75:8a:75:60:ae:4b:cc:71:a4:54:e1:54:68:0f:9b:b7:32:26:
         63:4d:8a:30:ac:d7:16:66:e3:f8:9f:24:83:83:f9:62:d1:10:
         fb:37:8e:e6:05:ba:4f:ca:23:c6:b4:4b:54:08:f7:fa:47:ec:
         8d:c3:eb:c8:84:9a:c5:7c:ac:da:51:ea:dd:50:54:2d:7a:e1:
         0e:e4:cc:e2:88:55:50:01:4a:62:80:ec:59:5e:fb:f5:28:69:
         41:68:92:b1:eb:3f:83:87:09:ef:3d:87:90:bc:0e:b9:eb:06:
         78:e0:1f:11:32:c6:83:30:b3:ab:ce:19:32:78:cb:0d:81:3a:
         e2:60:99:d5:f0:c0:46:8f:6a:dd:99:c9:23:cc:58:cd:6c:ed:
         fb:5f:99:87:01:42:2f:d7:d4:2e:bd:a7:78:59:f3:e6:70:1e:
         15:c2:84:35:23:f3:ae:b5:c1:18:97:29:66:53:9c:53:16:2a:
         9f:83:95:fa:e9:8b:2b:4d:9a:41:d1:d1:26:e8:7c:86:56:75:
         70:35:f2:b1:56:83:09:3b:ad:eb:18:59:8b:1b:6e:88:7f:5f:
         8b:18:66:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:05 2026 by rpki-client