Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
File:                     eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json)
Hash identifier:          6CSfBTMNq5oKFaQNkWDKasDrmKRWjSod99z6iwhEBBs=
Subject key identifier:   03:9F:57:5B:71:55:BE:3E:27:F9:13:38:4D:0E:E1:D0:31:67:6A:14
Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
Certificate issuer:       /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Certificate serial:       F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
Manifest number:          EA
Signing time:             Fri 17 Apr 2026 06:13:40 +0000
Manifest this update:     Fri 17 Apr 2026 06:13:39 +0000
Manifest next update:     Fri 24 Apr 2026 06:13:39 +0000
Files and hashes:         1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: z7HpLgLIZJE5g6LOkY5JhBbFNOJk+M1n9nEqXSvaruA=)
                          2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: yY5W8QHlOVcNFdNHN5tf5xhCqQSWa5PPR1EloS7CLPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
                          rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:13:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
        Validity
            Not Before: Apr 17 06:13:39 2026 GMT
            Not After : Apr 24 06:13:39 2026 GMT
        Subject: CN=69e1cf93-5caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:72:27:5a:fd:81:c0:67:bc:e8:1c:5a:f1:
                    3b:3f:e7:1d:33:fb:ae:ff:a8:51:90:26:2c:c7:de:
                    7d:f0:f0:04:6a:44:44:bd:3b:52:c2:53:80:3e:47:
                    ac:97:ff:5d:1d:4b:80:26:0a:3f:f2:68:79:fe:df:
                    0c:5c:79:c7:8e:66:52:43:0c:52:6b:1d:37:5f:7f:
                    13:67:2d:7c:c4:71:c0:67:a0:d5:34:6c:60:22:fc:
                    ab:52:5a:32:1e:ab:44:a8:fc:c8:d0:5a:3b:2e:51:
                    98:ac:5a:0c:e6:b3:ce:d6:84:22:a6:49:50:4a:ee:
                    7b:9e:eb:91:1d:6e:57:ac:02:e2:4e:d2:49:d4:08:
                    74:18:f4:a0:44:97:eb:ad:16:8f:a9:71:a7:66:c5:
                    38:85:a2:58:02:86:ca:81:de:cc:f3:e9:da:1b:ef:
                    c0:21:f5:58:47:57:ae:54:c5:d1:fe:ab:12:2d:dc:
                    44:e2:cc:3b:03:5c:a1:6d:07:43:f0:6a:2d:6a:f3:
                    89:42:28:32:a9:4e:23:3c:58:e3:11:ac:fd:da:cc:
                    1e:c3:76:27:a7:d4:e7:3f:8d:32:94:e8:fd:85:6b:
                    5c:2a:55:b3:2d:77:1d:99:14:a8:72:5d:1d:1a:02:
                    ae:c7:db:81:58:8c:30:b4:ba:58:23:87:8f:91:b6:
                    e9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:57:5B:71:55:BE:3E:27:F9:13:38:4D:0E:E1:D0:31:67:6A:14
            X509v3 Authority Key Identifier:
                keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:d9:5d:c4:ff:e2:78:25:c5:7f:0e:b7:76:18:1d:31:aa:
         cd:ac:ad:f3:22:98:af:3d:60:ac:4b:27:40:16:05:fb:49:b7:
         9e:83:3d:23:38:4d:75:cf:22:bb:33:4d:6a:e7:7c:86:df:7a:
         0f:6b:9c:a3:45:92:0d:0f:7d:12:5b:d4:99:fb:e0:49:35:15:
         36:8f:75:9b:43:48:75:54:1f:70:7a:d7:4a:6c:17:66:42:f3:
         24:a6:a5:de:b8:7a:37:61:bf:69:a6:6a:1a:ee:9d:74:c4:c6:
         e8:e8:ae:24:aa:e6:fd:da:9e:9b:8a:f0:f5:ef:92:71:2b:65:
         4d:ca:20:25:e0:eb:7b:7e:4d:e7:e6:4e:c1:d0:c3:b8:ad:7c:
         03:ca:39:44:0f:70:db:e3:6b:a4:39:94:24:ea:52:aa:2c:9e:
         ef:24:ac:53:9c:59:85:d7:d9:62:59:88:5c:70:06:e7:55:a5:
         ac:63:a4:f5:01:fb:bf:f6:8b:bd:41:fa:95:87:71:0f:93:c4:
         4b:88:da:3f:35:20:b9:b0:3a:cb:f0:86:e7:21:51:e0:49:73:
         0d:02:d1:ed:ab:82:18:01:72:e7:05:1b:95:96:e8:dd:c5:79:
         37:0f:c3:c7:dc:38:a6:a8:2f:91:da:e4:64:68:a1:18:1e:e1:
         31:ce:eb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:11 2026 by rpki-client