Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          PYCXvaw9JpsqBy0OOO4TisMamAdVJOYYATCW618tYHk=
Subject key identifier:   64:17:42:37:A8:53:78:93:6F:BD:6F:5E:E4:0D:56:8B:F6:8C:4A:37
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       08BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          089B
Signing time:             Mon 02 Mar 2026 01:09:47 +0000
Manifest this update:     Mon 02 Mar 2026 01:09:46 +0000
Manifest next update:     Mon 09 Mar 2026 01:09:46 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: 1cXOASyhPeE4LLEIFGNwu3iFwbhhZiTYNBffCPIBb90=)
                          2: C664689AE0F511EABB96D531C4F9AE02.roa (hash: IuNSCN6yrNlc/0wSwd/g4xZGin/ZqKczpvImaghk0B4=)
                          3: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: FzAXOXMg8ypDm7weH1JrGkQxJTnIfLB9Zd0EsKEe/7c=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: oW2JhsPjI+GKnJ32ROir3XwQDxUOtlZsdWGXqlOBZI0=)
                          5: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: UM57hSN5aLzJ1miAi0WEBED5Yq0amggNMnfYd46Qpgk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Mar  2 01:09:46 2026 GMT
            Not After : Mar  9 01:09:46 2026 GMT
        Subject: CN=69a4e35b-6a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d4:ba:74:db:42:c9:34:e1:e7:80:3d:93:72:
                    25:7c:3e:66:04:b7:5c:b6:b1:1c:7c:4c:7a:1c:b8:
                    a8:4c:2d:4b:43:e5:e8:9f:14:dd:89:1c:ca:d3:c2:
                    53:4a:7b:f3:3f:1b:68:50:3a:49:20:37:61:49:fb:
                    2c:c7:2e:41:8b:7c:06:81:06:36:67:ff:e9:13:6b:
                    e1:dd:5b:ac:0c:ff:45:3b:3a:35:4b:f4:62:23:d0:
                    50:bc:8c:4f:88:c3:3a:be:dd:37:6f:96:98:1a:2f:
                    62:21:97:6f:48:73:7e:16:d6:6b:9b:22:69:f4:a9:
                    74:2b:97:19:9a:29:9a:07:74:92:de:83:2b:06:2c:
                    8e:2c:25:50:14:6d:5d:cd:85:0c:32:75:9e:73:ed:
                    f6:d2:84:7f:22:01:f6:f3:26:45:66:62:a0:09:21:
                    c5:89:f5:1a:3e:17:2e:8c:28:7c:e5:d3:fa:90:e9:
                    98:e2:a4:86:c1:0e:6e:29:f9:b4:72:43:88:ed:a5:
                    d1:20:4f:b0:2a:0c:f4:ac:ff:17:50:39:e4:a9:2e:
                    a1:d0:ed:72:09:4d:09:71:76:3d:b4:47:b6:0e:b5:
                    32:99:4c:72:21:94:f7:7c:82:c7:2e:cd:cd:58:3d:
                    ea:17:41:d6:f9:5f:6e:8f:0a:a7:f4:3b:8c:26:0d:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:17:42:37:A8:53:78:93:6F:BD:6F:5E:E4:0D:56:8B:F6:8C:4A:37
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:31:62:7f:37:fd:91:77:52:92:ab:0a:9f:2e:06:ca:0e:
         bc:04:f6:f9:07:7d:8a:e2:9f:0f:18:09:98:a1:86:54:d4:65:
         7b:59:2f:c4:47:dd:8c:f4:45:e9:4c:bb:7c:b1:9b:de:88:98:
         ae:1f:53:44:d6:5d:66:f1:6e:18:e4:9d:61:35:8d:ae:c0:e1:
         88:dc:08:c0:c5:47:80:5f:a5:8a:55:81:6b:e7:1d:92:ce:ae:
         83:c2:a9:25:18:96:26:b2:2e:60:df:8f:0f:ea:d2:05:68:2b:
         bc:4c:0c:76:97:ce:0f:fb:48:2c:be:86:2b:f5:ad:67:ae:94:
         13:19:f1:b8:bf:df:d8:ff:c4:d2:55:6c:e5:5e:4e:c7:a7:53:
         12:d4:7b:c9:54:58:6c:07:af:ca:62:b0:51:c5:c2:39:80:89:
         6d:74:c2:38:bd:17:b8:ef:a8:6e:c9:b8:09:df:57:84:8e:f9:
         d7:af:fd:a3:1d:5a:9f:43:b1:99:06:fe:59:7b:31:05:d0:6c:
         2d:13:d7:4d:29:63:85:6a:0c:9d:af:be:81:53:82:51:7e:44:
         9f:91:64:88:63:6a:90:3c:c3:2c:93:21:b8:1c:5f:c8:ed:39:
         6b:64:01:5f:4d:8e:54:91:9b:16:1e:94:1c:25:ca:75:0c:fc:
         78:af:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:32 2026 by rpki-client