Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          EdcbPR2IUmmcAG9hCG61bnJvCrkUvazZN/EW6J1UCSo=
Subject key identifier:   AE:25:31:E0:63:00:1B:D4:77:03:2B:FB:C8:BB:E2:49:F2:C5:94:1E
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       06A0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          0698
Signing time:             Thu 16 Apr 2026 22:21:56 +0000
Manifest this update:     Thu 16 Apr 2026 22:21:56 +0000
Manifest next update:     Thu 23 Apr 2026 22:21:56 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: owl25mt9+4m6iBxPshQIZottpGNt+iYVoY9ug8bPnFY=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: BD9XvgbfGZGyT2mqJsZmkBVu9isJKAOPHUUx0vygtGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: Apr 16 22:21:56 2026 GMT
            Not After : Apr 23 22:21:56 2026 GMT
        Subject: CN=69e16104-be38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:63:5f:96:38:4f:81:f8:ec:df:32:91:2a:
                    4c:39:5f:08:c9:60:16:b9:8f:9b:14:42:70:6e:f3:
                    ea:b6:71:90:84:5d:bc:64:85:1d:62:2d:6d:0c:d8:
                    56:e5:b2:ec:81:03:ef:98:a9:c6:d0:4c:fd:f3:6e:
                    ba:88:14:9c:b0:96:72:40:4c:4f:57:07:41:ab:b2:
                    d0:6d:18:b8:32:38:49:1f:9f:e7:c4:3f:6f:e8:f5:
                    eb:f5:2c:1d:0a:c3:9a:54:74:f0:06:70:2e:d7:51:
                    fb:40:e2:81:4c:74:bd:ab:68:06:c3:a7:3a:dd:2e:
                    25:69:50:15:c1:d7:d4:bf:22:27:94:63:a4:3a:f4:
                    ae:85:46:c5:89:51:70:89:87:d0:dd:5f:c3:e1:13:
                    1b:7b:3d:ff:fd:ab:b5:dc:33:9a:73:fc:5c:85:5d:
                    47:6c:67:a9:ed:54:07:76:67:d5:3f:3f:81:4e:3e:
                    a3:55:b7:90:87:5a:74:ab:2c:1b:b8:be:e1:a4:e5:
                    8c:d1:31:c7:ef:ee:3c:20:4b:0c:b0:8b:6d:0e:d2:
                    1a:79:9b:cd:c5:59:b9:ff:cc:fa:3f:e8:5b:ab:1d:
                    52:85:d1:0c:34:f6:cd:31:43:7a:b5:47:60:a8:dc:
                    ef:d9:07:eb:b5:66:d2:50:1d:bd:1f:93:15:67:eb:
                    35:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:25:31:E0:63:00:1B:D4:77:03:2B:FB:C8:BB:E2:49:F2:C5:94:1E
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:22:5a:09:fe:99:cc:4c:ec:d0:c7:89:9f:da:e6:44:d3:
         6d:0a:b6:73:ee:e0:0c:d9:53:36:d3:4e:12:b3:2d:4a:5f:b3:
         e2:39:3a:16:3c:d3:87:81:7a:83:dd:8f:c4:f4:c8:a5:fc:5d:
         e5:9a:6c:5c:3d:61:0b:bf:75:a0:a9:e6:62:6f:f1:89:1a:0e:
         7d:fa:7b:89:e1:70:b0:a1:d9:dc:fd:26:5f:73:4a:dc:e2:b5:
         40:38:b5:7b:1a:f4:65:4b:cf:18:65:7a:8b:d5:87:08:f9:0d:
         3b:9e:31:51:5c:c0:e8:19:7d:2e:a7:f6:31:49:1a:79:2b:d9:
         9a:77:6a:98:f1:2a:3e:9b:ed:b9:01:21:a3:6d:74:b0:c0:fd:
         70:84:c2:06:e3:d3:06:46:a3:d2:62:26:6d:e3:ae:85:f0:06:
         a5:52:bf:18:8d:13:ef:b6:14:0d:82:1f:a2:d9:bc:09:62:9f:
         64:a2:25:9e:50:51:0a:25:2f:ea:95:4e:60:95:72:27:22:7d:
         6a:e0:3e:1b:15:44:b4:c3:98:5c:79:08:be:16:a5:64:6a:3d:
         69:14:f6:cb:82:47:a0:62:be:a8:fe:2f:d0:42:45:95:f0:49:
         bf:c9:78:af:ec:aa:69:86:87:00:fb:7a:ac:19:1a:75:7b:a0:
         83:81:07:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:33:57 2026 by rpki-client