Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          o7Acj7O9SiJoYb6qna6mJVWaRziuexJkCAUyccviMHc=
Subject key identifier:   FE:58:AE:43:40:18:03:0E:93:AC:84:8C:E5:2E:29:6A:42:75:00:9F
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          0117
Signing time:             Fri 17 Apr 2026 05:37:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:37:44 +0000
Manifest next update:     Fri 24 Apr 2026 05:37:44 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: ugqCezDh3+cLMLocg4NiUr/XbnmojK9krXj9S73wSzE=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: XBhJyYS78iAwLwaisddHiLLfaefoeg69NKzL67ACpjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Apr 17 05:37:44 2026 GMT
            Not After : Apr 24 05:37:44 2026 GMT
        Subject: CN=69e1c728-6c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:17:fa:ae:ed:1e:63:4f:25:19:a3:06:3b:
                    91:71:15:40:28:65:26:61:a6:3d:b3:a3:5d:92:23:
                    cb:d3:25:12:f2:4c:a4:ed:5c:84:03:12:e0:08:df:
                    cb:10:9f:48:7e:67:11:2b:e7:77:98:ad:b1:92:55:
                    3a:e6:90:43:7d:b4:b5:92:e0:62:a8:96:85:91:f2:
                    a5:8a:62:a1:7f:97:5c:30:b6:f9:8d:e9:6c:8e:10:
                    b4:c7:6a:ee:69:88:35:b5:10:f5:9f:4b:1e:cc:ca:
                    62:f0:8c:3b:f7:fa:fd:2c:1f:af:6d:0d:92:0f:df:
                    48:40:df:bd:58:21:43:2d:39:0c:b0:37:85:ac:79:
                    49:64:64:7c:d6:92:6a:8b:46:a9:ea:7c:b5:69:ac:
                    b3:3c:a8:2e:1e:66:aa:16:29:0c:d4:b7:35:0f:a3:
                    3d:f6:80:c9:95:a3:a9:6a:07:75:c1:d3:6e:14:4e:
                    80:54:73:6f:0c:2d:5f:49:0f:8f:e5:6a:c1:5b:d0:
                    52:d0:92:18:03:2d:e9:85:7b:7d:6e:d9:0b:48:ae:
                    10:4e:bf:be:86:dd:3a:ba:20:0c:59:7c:01:58:a7:
                    ec:d5:5e:bb:fa:57:43:dc:06:c7:e1:0a:42:79:01:
                    95:05:dc:3c:a2:71:6d:b4:03:ca:0e:d6:40:2d:21:
                    bf:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:58:AE:43:40:18:03:0E:93:AC:84:8C:E5:2E:29:6A:42:75:00:9F
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1b:07:08:6d:3f:c3:57:34:77:36:6a:a5:2c:eb:5e:13:f8:
         d5:0c:9b:a4:9f:0b:4a:2b:83:04:f0:69:98:58:31:81:40:2c:
         0f:a2:e1:c6:2a:5c:eb:2f:97:ad:f1:75:87:c7:c3:76:fb:9e:
         b2:75:7f:c1:fa:aa:41:ea:8f:de:01:a5:c7:1d:c9:e0:9d:d5:
         65:c4:9b:a8:59:dd:af:f1:89:4d:2f:34:e1:14:bf:47:37:16:
         e5:c1:36:00:26:78:5b:a1:64:09:a8:40:d3:a8:35:c2:bb:59:
         2e:35:c0:7f:09:a0:09:d9:8c:15:17:1b:cc:fe:06:7c:10:36:
         81:44:31:a8:76:f0:15:51:a9:c3:92:7a:5a:38:85:d3:ba:8f:
         6b:28:76:60:5b:fa:ab:5a:3d:b0:ff:53:2d:e2:41:9a:96:41:
         5a:8a:01:d0:43:1d:39:4a:25:58:00:93:13:1b:8d:36:84:68:
         00:90:44:e3:01:92:ba:a1:ef:86:27:5f:3d:ad:03:1b:37:09:
         6f:93:f1:a0:27:c4:ef:eb:75:c1:52:38:a1:bb:67:06:9e:6c:
         50:74:42:34:0b:de:80:0c:82:10:d1:e3:96:68:35:be:0c:60:
         1a:9c:5f:09:60:8e:a5:1a:e2:15:c9:26:73:fa:72:2d:a8:98:
         0d:0d:93:e7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI0ODkxMTAvBgNVBAUTKDdBRUE3NzdDNkIxOTE1MTM1MzNCMEUyRURGMEYwRDg0
Q0I3MEJBMTEwHhcNMjYwNDE3MDUzNzQ0WhcNMjYwNDI0MDUzNzQ0WjAYMRYwFAYD
VQQDEw02OWUxYzcyOC02YzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLsX+q7tHmNPJRmjBjuRcRVAKGUmYaY9s6NdkiPL0yUS8kyk7VyEAxLgCN/L
EJ9IfmcRK+d3mK2xklU65pBDfbS1kuBiqJaFkfKlimKhf5dcMLb5jelsjhC0x2ru
aYg1tRD1n0sezMpi8Iw79/r9LB+vbQ2SD99IQN+9WCFDLTkMsDeFrHlJZGR81pJq
i0ap6ny1aayzPKguHmaqFikM1Lc1D6M99oDJlaOpagd1wdNuFE6AVHNvDC1fSQ+P
5WrBW9BS0JIYAy3phXt9btkLSK4QTr++ht06uiAMWXwBWKfs1V67+ldD3AbH4QpC
eQGVBdw8onFttAPKDtZALSG/0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP5YrkNA
GAMOk6yEjOUuKWpCdQCfMB8GA1UdIwQYMBaAFHrqd3xrGRUTUzsOLt8PDYTLcLoR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ4OS8zMjg5QTkwRTlC
RkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZSTlRPdzR1M3c4TmhNdHd1
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2V1cDNmR3NaRlJOVE93NHUzdzhOaE10d3VoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjQ4OS8zMjg5QTkwRTlCRkExMUVGQkVCOTg0NkVDNEY5QUUwMi9ldXAzZkdzWkZS
TlRPdzR1M3c4TmhNdHd1aEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAvhsHCG0/w1c0dzZqpSzrXhP41QybpJ8LSiuDBPBpmFgxgUAsD6Lhxipc6y+X
rfF1h8fDdvuesnV/wfqqQeqP3gGlxx3J4J3VZcSbqFndr/GJTS804RS/RzcW5cE2
ACZ4W6FkCahA06g1wrtZLjXAfwmgCdmMFRcbzP4GfBA2gUQxqHbwFVGpw5J6WjiF
07qPayh2YFv6q1o9sP9TLeJBmpZBWooB0EMdOUolWACTExuNNoRoAJBE4wGSuqHv
hidfPa0DGzcJb5PxoCfE7+t1wVI4obtnBp5sUHRCNAvegAyCENHjlmg1vgxgGpxf
CWCOpRriFckmc/pyLaiYDQ2T5w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:52 2026 by rpki-client