Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
File:                     eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft (raw, json)
Hash identifier:          OqcjjN+DHvOTeBWt8+axsLYB9lLClLhqQgj7jzbo4SU=
Subject key identifier:   35:8D:81:27:09:82:2E:0B:95:57:70:FC:22:51:87:CE:B3:25:A3:02
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Certificate issuer:       /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
Manifest number:          EF
Signing time:             Fri 17 Apr 2026 06:19:28 +0000
Manifest this update:     Fri 17 Apr 2026 06:19:28 +0000
Manifest next update:     Fri 24 Apr 2026 06:19:28 +0000
Files and hashes:         1: eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl (hash: GXm5o+Al7actX5Vk0X+TizG0yQh+OgjnwH3koPQrsUg=)
                          2: D02660DECE9A11F08236E30AC4F9AE02.roa (hash: jdzxGGu/M6c61RPiVVGIskn36UKBuddsHFy8dvK2STk=)
                          3: 3317EBC2B68611F0BC9B1221C4F9AE02.roa (hash: pxHMzhLX7W6d9atV9rx4OgoqWGloZVP3oD8xnL/ZV1E=)
                          4: 28393F1411E211F1A80167F20C3D8C67.roa (hash: J0yLTt5l2Cgh6Y+Q/baTwl4H39BuMDi2DFqmq2r3dew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
                          rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
        Validity
            Not Before: Apr 17 06:19:28 2026 GMT
            Not After : Apr 24 06:19:28 2026 GMT
        Subject: CN=69e1d0f0-9e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:5f:48:8a:55:e1:5d:27:3b:a7:78:66:e7:
                    13:62:64:93:52:5f:0f:3e:5a:a5:10:4e:fe:b7:c1:
                    3a:56:66:f1:d9:0b:bf:43:a7:58:b2:f4:18:29:4f:
                    f4:4f:03:32:30:00:9f:8d:ff:b9:c9:c6:1e:49:89:
                    29:a8:e6:01:55:6c:01:54:61:d0:f1:da:66:fe:cb:
                    a1:19:00:5c:22:20:f5:3b:d3:f0:78:96:e0:07:17:
                    8d:be:eb:8d:7a:72:e4:21:fd:e9:01:9a:42:39:25:
                    0c:12:0e:85:ce:03:7b:ab:db:9a:04:1d:ce:78:cc:
                    ae:af:de:64:af:50:0b:ae:a7:e9:c0:b9:12:bd:44:
                    2d:72:71:a3:55:bc:e3:62:32:bb:3f:37:21:4d:6e:
                    6d:92:c0:ad:27:47:db:43:8b:91:2d:72:f1:60:44:
                    76:24:b6:3e:43:34:2d:ce:77:62:dd:59:76:c2:d8:
                    53:7f:91:43:f6:50:81:f2:de:cc:dc:31:1d:ad:e5:
                    74:04:36:f0:55:8f:9a:f4:18:c9:76:42:70:25:70:
                    70:00:09:39:b2:ea:0e:f4:7f:51:9e:a4:a2:8a:a5:
                    8b:fd:4e:e6:d8:f5:c0:c5:d7:38:f3:fd:d8:82:ce:
                    1c:e6:dd:90:e5:ba:03:e1:88:68:7e:2b:bb:f0:09:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:81:27:09:82:2E:0B:95:57:70:FC:22:51:87:CE:B3:25:A3:02
            X509v3 Authority Key Identifier:
                keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:96:d7:b2:9b:d8:94:e6:1b:05:fc:a7:e8:97:cf:da:a3:ac:
         12:4f:24:f4:bb:69:a9:fa:ca:86:b6:bf:4d:6d:f6:ff:d0:c2:
         7a:44:0d:7d:36:e0:cf:f7:6f:84:25:d3:05:65:70:a6:c3:bc:
         b8:4b:5b:63:60:b8:58:dd:cb:9b:23:fc:2b:08:16:6f:22:a3:
         9d:a5:be:5a:18:bc:11:b2:63:10:59:04:ed:8d:f8:f6:58:fe:
         b1:14:cf:49:e1:49:39:5f:48:ec:52:0b:d4:ca:10:d8:d6:5d:
         9a:cc:9b:8a:eb:a7:00:c9:66:7c:e7:4d:78:50:ae:07:76:bb:
         fe:bb:bd:c3:02:fc:bc:3a:26:f8:52:e1:00:62:99:74:42:fb:
         02:e5:e1:5c:fc:36:e3:96:9a:b0:d8:b8:85:d2:e5:07:d5:8e:
         21:81:21:7d:3e:3e:85:73:b1:6b:ba:a1:1b:19:a6:5d:f4:d8:
         36:e4:7e:96:aa:13:72:de:93:6f:c1:33:69:37:b8:9a:ba:3b:
         78:d9:1e:aa:2d:f1:18:1c:a7:bb:15:31:6b:1e:00:69:e4:38:
         ec:04:6b:bd:e9:e4:3e:8a:ed:ca:28:60:e6:31:c3:85:b1:88:
         c3:f4:59:a1:0d:2a:65:6e:c4:8f:0d:a6:01:56:3a:af:d5:62:
         43:4c:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:51 2026 by rpki-client