Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
File:                     eSD4yoTskTxpqY1UNxIJtDTDMZE.mft (raw, json)
Hash identifier:          aYq98SPiRPqwO6lb4rgo31hhVYxqMPwXt2QIgBU+QDU=
Subject key identifier:   25:98:A9:E3:27:BD:2E:72:6D:D5:B1:5F:3D:BA:62:D1:F8:5E:21:D2
Authority key identifier: 79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91
Certificate issuer:       /CN=A914A554/serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
Certificate serial:       012D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
Manifest number:          011B
Signing time:             Fri 17 Apr 2026 05:35:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:35:00 +0000
Manifest next update:     Fri 24 Apr 2026 05:35:00 +0000
Files and hashes:         1: eSD4yoTskTxpqY1UNxIJtDTDMZE.crl (hash: kx0HTHaF9qfuCiKo/auxeRgXCZlhZtgstePpWCYVMSU=)
                          2: E188EE7A935711EFBE98944CC4F9AE02.roa (hash: +BzmtEHFPYhJd7eBI+fhK9pFudklIV0KEa7Qtl+OyT0=)
                          3: F561A3BE935811EF97E1194EC4F9AE02.roa (hash: eH0IL4ttz3YsPdM6Yy4322cKAtAuMUPayUG/Znc6O7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl
                          rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A554, serialNumber=7920F8CA84EC913C69A98D54371209B434C33191
        Validity
            Not Before: Apr 17 05:35:00 2026 GMT
            Not After : Apr 24 05:35:00 2026 GMT
        Subject: CN=69e1c685-39f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:ce:7d:a7:b8:0d:36:df:e7:e9:80:95:8f:
                    8b:0e:e5:89:61:0f:0e:3e:bd:04:bb:b8:6a:3f:8a:
                    57:bb:3a:72:db:db:7d:b0:60:0d:ff:0b:96:cf:5e:
                    e8:89:c9:6d:d7:9f:45:17:46:75:c8:84:6a:7f:64:
                    91:26:84:09:dd:6f:1f:c0:9e:d9:6a:f9:f3:f6:a1:
                    eb:72:a4:b5:04:60:e8:f7:d0:33:c8:e3:91:1a:7a:
                    68:44:3b:0d:eb:ed:99:38:c3:1c:b2:98:9a:7b:56:
                    82:e8:44:d9:80:eb:b8:79:c0:3d:49:9f:c8:d6:9d:
                    85:9d:75:d1:71:48:31:ed:40:e4:20:58:06:2f:73:
                    0b:d4:74:36:0b:59:b2:c2:30:8d:4c:84:e9:be:3d:
                    10:87:a5:1e:60:30:7d:64:32:2e:86:4a:e1:98:d5:
                    d5:8c:9a:74:31:9e:d0:88:9b:e8:a1:b3:ee:e5:e2:
                    8f:9d:1f:10:84:3d:6f:26:94:52:e2:e4:2f:3b:a8:
                    38:9c:ea:8a:1c:83:b0:a8:29:a4:17:15:d4:5e:65:
                    0b:31:56:ab:46:6e:ed:3a:55:5e:ec:cf:cb:c2:59:
                    a0:e2:cc:41:96:09:b1:3a:57:98:70:41:78:55:4e:
                    44:51:2f:59:c0:75:17:b1:9f:05:da:68:57:e2:63:
                    e0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:A9:E3:27:BD:2E:72:6D:D5:B1:5F:3D:BA:62:D1:F8:5E:21:D2
            X509v3 Authority Key Identifier:
                keyid:79:20:F8:CA:84:EC:91:3C:69:A9:8D:54:37:12:09:B4:34:C3:31:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSD4yoTskTxpqY1UNxIJtDTDMZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A554/79F89982935611EFA8EDEB33C4F9AE02/eSD4yoTskTxpqY1UNxIJtDTDMZE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:80:1b:43:2b:eb:23:09:c6:8d:6e:93:8f:90:e7:b7:f0:b8:
         a3:74:96:f8:f0:fb:62:61:21:e4:4e:df:53:aa:18:41:df:71:
         8d:d9:56:45:d0:14:6e:f3:e3:4b:4f:ef:dc:01:be:a5:23:12:
         49:df:31:63:e8:9e:d8:2a:f5:0b:7a:fd:18:4b:ea:42:32:d1:
         a1:72:95:7d:2f:02:a4:91:05:d4:4f:4f:1a:30:18:a9:c7:b3:
         4a:cd:1a:81:34:de:d6:fb:07:46:f3:3a:95:a3:e2:80:d4:6e:
         9d:05:30:c3:65:07:c8:96:cf:a7:29:bc:96:bb:28:54:fa:b7:
         57:f0:64:1d:09:23:93:e9:0e:28:8d:5e:9b:84:9d:2a:67:8a:
         cd:de:32:ab:5a:d0:da:35:82:a7:59:3d:d7:9a:28:a8:ce:f1:
         2f:90:1c:52:20:db:dc:23:8e:8b:43:64:3e:28:0f:f4:df:d6:
         fb:be:12:c4:0a:b8:9e:06:f2:e9:92:56:cb:7d:d3:9f:e7:61:
         8d:6a:bb:b8:11:82:c8:11:a9:9a:be:2e:91:fe:c7:2c:76:19:
         a5:7b:96:1b:64:c3:9b:9d:ef:62:89:ca:88:fc:65:e2:8e:5c:
         d1:ee:c3:81:4e:b5:88:a1:c9:6a:45:9f:29:c0:75:76:8b:a2:
         ef:1e:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:17:31 2026 by rpki-client