Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File:                     EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier:          HVylwBX0e+fXIFNf/++7SJlSliHzo3TcbWsK1H7WqV8=
Subject key identifier:   4D:8C:A4:6C:F5:77:DD:A5:5C:27:0F:78:C2:35:F0:99:06:14:69:3C
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       018D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number:          0189
Signing time:             Sun 01 Mar 2026 22:38:41 +0000
Manifest this update:     Sun 01 Mar 2026 22:38:40 +0000
Manifest next update:     Sun 08 Mar 2026 22:38:40 +0000
Files and hashes:         1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: SRJExstaO6jSUZOoGbmZIysgpJan5Zoy56xYCeNvMCA=)
                          2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: hdm5NSSq5sJFtyZvDEbZoDanmDdY91BFML+/UHmDt8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:38:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Mar  1 22:38:40 2026 GMT
            Not After : Mar  8 22:38:40 2026 GMT
        Subject: CN=69a4bff0-2b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:5b:4a:5e:23:6a:e7:09:4b:71:1d:57:31:
                    9d:54:cf:26:75:b4:f1:a5:93:82:79:5a:b1:d6:9e:
                    21:19:d9:0d:2d:05:1f:ba:28:5b:e4:9e:96:42:05:
                    25:c5:ab:28:c9:2c:2c:cb:6d:82:4e:89:47:ad:a2:
                    d6:40:c6:b8:46:4f:0a:12:c4:57:ff:97:46:b1:e1:
                    ec:a1:95:be:0b:72:71:26:d7:2f:5d:76:52:95:86:
                    9c:76:05:27:da:ac:fa:3d:04:02:69:95:b6:de:d8:
                    7c:04:f4:6d:96:a7:1c:73:5f:45:c7:88:f6:51:ab:
                    d9:fa:12:55:7d:85:ef:ac:5e:9d:8b:5d:cf:ae:f1:
                    50:cd:7b:60:21:34:1a:17:53:4a:51:96:cd:43:ca:
                    f8:f9:c4:88:7b:46:eb:37:87:26:42:64:b4:a4:e6:
                    86:93:5e:55:8d:1b:77:56:f2:3b:f1:a7:64:9a:12:
                    8d:a1:5e:72:2d:01:cb:54:49:16:28:ce:42:8d:d6:
                    33:8d:08:e6:12:78:d3:aa:4a:30:98:6e:fa:ab:0e:
                    f8:dc:17:77:52:13:4c:8d:25:0f:0d:f4:ea:d0:d5:
                    65:95:7a:54:c3:33:1e:82:3c:2c:e6:ff:53:83:14:
                    ea:d0:7b:4c:3b:1d:42:b6:55:12:c2:c8:52:9a:0d:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8C:A4:6C:F5:77:DD:A5:5C:27:0F:78:C2:35:F0:99:06:14:69:3C
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:15:54:10:cf:61:fa:08:bb:fb:0f:3c:ca:64:3e:53:b6:cf:
         02:5f:11:7d:b0:31:f7:dd:4f:84:3a:01:e5:ef:94:99:10:dd:
         28:4f:ca:bc:33:e1:c6:30:40:d8:94:11:94:ba:3e:12:c2:04:
         66:3d:e3:50:a7:e7:95:cc:63:80:45:c6:be:0c:e5:f1:58:30:
         9c:c0:02:28:fc:3c:3c:4a:86:17:6c:34:01:9a:0c:77:0e:2e:
         63:eb:27:3f:00:4c:aa:52:49:61:4b:64:78:46:c4:52:ea:92:
         dd:de:a3:55:e9:a2:1e:2d:f9:99:2e:98:02:e9:fe:a2:22:a1:
         f7:31:28:88:7f:10:0a:f2:a7:41:f3:52:da:07:e7:d6:40:70:
         e1:0e:a6:24:de:d9:f3:f1:6f:c6:36:f7:39:7f:2a:56:48:e8:
         c4:30:90:4f:66:4a:1e:0b:d6:fb:26:7f:d9:43:f8:b9:80:9d:
         40:78:e2:2a:bd:ba:f6:46:8f:1b:48:7f:cf:dc:66:42:e6:1c:
         b2:66:1b:90:a3:f5:5e:a0:3b:82:ce:7a:3d:3e:de:f1:ad:41:
         5a:10:5e:8a:08:7b:81:63:df:49:a2:96:c3:fe:d5:47:35:a1:
         df:e9:e4:45:ba:bf:12:a1:a3:f7:23:7f:36:0c:6e:2e:e1:96:
         fb:d0:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:55:07 2026 by rpki-client