Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File:                     ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier:          SsqAgbB8GfozOcpjPp6d+r3a/QKHKU5OWyKb0whvVnc=
Subject key identifier:   A5:45:F0:71:F6:4D:0A:39:B5:4E:C6:08:DF:53:35:92:07:2E:2C:75
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer:       /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number:          0305
Signing time:             Fri 17 Apr 2026 01:08:07 +0000
Manifest this update:     Fri 17 Apr 2026 01:08:06 +0000
Manifest next update:     Fri 24 Apr 2026 01:08:06 +0000
Files and hashes:         1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: v8jJm12rE+5juEJqOxPOXqzAIFb20A7FcKCbsNEzIKo=)
                          2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: DPKmCzo8hJ9V5Pt+bf8wNdW3775xVd0a/v/XhzNF8ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
                          rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
        Validity
            Not Before: Apr 17 01:08:06 2026 GMT
            Not After : Apr 24 01:08:06 2026 GMT
        Subject: CN=69e187f7-f0b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a4:74:70:19:ad:03:7d:9e:18:4a:1c:db:74:
                    cd:5a:23:f2:4b:99:79:ff:3b:83:5b:24:31:ef:c3:
                    85:7e:8a:74:50:77:3a:cb:b3:09:00:35:4f:23:2e:
                    d0:44:6c:c8:a3:60:b8:4d:b7:57:21:1b:b0:a3:30:
                    b8:00:5b:96:73:3a:aa:c3:43:c3:aa:a3:03:3e:c6:
                    1c:c3:b9:f4:ff:d2:4c:83:59:e1:58:bd:f5:fe:d0:
                    59:59:fe:17:70:f7:cc:53:63:91:ff:37:7e:b3:93:
                    c9:b8:a0:0e:5d:46:91:cd:f0:29:83:29:48:4c:d8:
                    cd:19:38:db:8e:62:ac:ee:16:e2:b7:e4:6e:3b:b8:
                    d8:88:57:7a:70:bf:58:c0:b2:47:a3:13:00:a6:5a:
                    de:38:8a:5c:35:fc:b7:4e:05:fe:6e:03:7a:0c:40:
                    d4:79:9f:49:6d:94:65:c5:7d:6a:6e:3c:a2:88:38:
                    ae:da:d5:02:df:22:2f:90:25:91:eb:a2:5d:1a:60:
                    e7:83:61:e9:cd:e4:bb:53:33:b5:37:58:0a:a3:c0:
                    0a:2b:74:46:0d:af:93:89:32:83:8b:4d:38:91:53:
                    3a:e8:9f:63:3e:3a:8d:77:89:ae:16:c3:97:2c:01:
                    8d:2d:94:48:b2:7a:66:88:2f:67:f2:26:cc:7a:97:
                    60:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:45:F0:71:F6:4D:0A:39:B5:4E:C6:08:DF:53:35:92:07:2E:2C:75
            X509v3 Authority Key Identifier:
                keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:48:46:e9:30:97:1d:1e:ad:d5:94:ff:1e:ff:1f:93:f1:
         44:11:06:de:77:b6:dd:04:4c:ff:22:e1:ed:55:8f:b0:17:33:
         ab:05:d9:c1:a8:1b:00:05:d4:dc:01:6f:1d:b4:40:74:30:2d:
         ac:5c:8b:6f:87:48:d5:7c:66:6b:c5:4e:70:d5:02:3e:4b:67:
         29:15:e7:e6:c4:94:aa:4b:24:a2:dc:c7:ab:ff:f3:72:15:0a:
         eb:11:e4:69:b0:01:d0:55:d5:33:cf:de:6f:19:e9:2a:cb:ab:
         e6:5d:b7:37:eb:20:94:9e:12:84:f0:35:ee:ba:14:db:63:a5:
         8c:6b:d3:7d:17:fc:72:a4:e5:e2:5f:8c:e0:27:1f:3c:b1:00:
         47:c4:01:3c:7f:b6:a4:97:f7:f2:2e:51:c1:f9:56:df:7b:c2:
         b8:c7:44:6b:4b:14:82:7f:18:03:e2:18:2b:2b:c8:76:4c:a6:
         42:c4:0d:71:4f:b6:92:51:b0:45:65:77:08:3f:af:d8:ad:75:
         b3:8a:27:fb:61:13:d0:07:77:62:39:67:cc:0f:b4:36:14:bf:
         28:ba:7a:c2:23:10:33:bf:dd:9b:18:7f:45:19:66:c3:01:ac:
         e2:45:f5:ce:6b:b3:a1:24:25:a6:8a:d0:0c:61:be:19:6a:c4:
         8a:b7:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:34:08 2026 by rpki-client