Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
File:                     emYQUZRc4uj7SubeY7KEeLDO014.mft (raw, json)
Hash identifier:          5GAp6fTeJuihGTsNexz0U2XZ5cbpSyEK2c+7aujbXY8=
Subject key identifier:   54:38:58:09:F6:24:1D:01:77:6D:97:BE:51:6B:31:AD:DF:8D:11:26
Authority key identifier: 7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E
Certificate issuer:       /CN=A9165FF3/serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
Certificate serial:       3539
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
Manifest number:          3531
Signing time:             Thu 16 Apr 2026 14:59:01 +0000
Manifest this update:     Thu 16 Apr 2026 14:59:00 +0000
Manifest next update:     Thu 23 Apr 2026 14:59:00 +0000
Files and hashes:         1: emYQUZRc4uj7SubeY7KEeLDO014.crl (hash: TsTImfu9DDB6NwUo9TP23coaiu18Ax4dJAklJ9rBKnk=)
                          2: 5FBB084EAE6A11ECAA9D756AC4F9AE02.roa (hash: rVRbPt1BenVXJcwysqQm7AgwLvDB5H+rVBMsAeEXCxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl
                          rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13625 (0x3539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165FF3, serialNumber=7A661051945CE2E8FB4AE6DE63B28478B0CED35E
        Validity
            Not Before: Apr 16 14:59:00 2026 GMT
            Not After : Apr 23 14:59:00 2026 GMT
        Subject: CN=69e0f934-4444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:61:74:09:ee:b7:3b:20:ac:01:f1:aa:79:02:
                    6a:4c:c7:df:f6:c1:37:77:6f:3b:f5:d6:00:33:16:
                    8f:a0:d1:99:aa:95:54:f5:f6:70:24:bf:c7:71:dd:
                    62:f0:c7:54:a7:7a:8c:1f:8e:6e:59:12:a9:cc:db:
                    47:0e:cc:3e:6b:26:d9:c0:e0:70:2b:33:ac:e8:fa:
                    6f:19:f7:c6:e2:c2:d6:da:cd:03:2c:44:11:06:62:
                    db:20:e3:cd:b5:7b:9e:c2:25:1e:58:72:80:1c:a6:
                    32:5a:9d:9c:69:d8:0c:5d:11:f9:db:45:5c:39:ac:
                    30:98:f5:df:0a:fc:76:b8:cf:64:51:7e:41:d6:1b:
                    25:e4:b8:bf:fb:b3:f6:f3:70:c8:3c:fe:b4:29:7e:
                    79:ed:9e:a5:ac:58:20:dc:fd:ec:cf:ce:ea:da:a1:
                    f6:50:ce:04:cd:9f:7f:93:9e:15:40:74:8c:8e:98:
                    c2:df:42:3c:db:2c:55:02:29:79:4b:26:cc:d7:a6:
                    14:82:1c:42:99:6e:06:c6:42:89:6d:bd:7d:ce:ad:
                    fd:a4:f4:92:87:05:5f:6a:89:ee:7a:40:87:58:5a:
                    d4:82:2f:b8:b8:bb:9b:c8:ae:a2:3b:5a:58:98:a4:
                    28:b0:2f:a2:90:1b:8d:8a:3d:d0:e8:39:48:d6:41:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:38:58:09:F6:24:1D:01:77:6D:97:BE:51:6B:31:AD:DF:8D:11:26
            X509v3 Authority Key Identifier:
                keyid:7A:66:10:51:94:5C:E2:E8:FB:4A:E6:DE:63:B2:84:78:B0:CE:D3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emYQUZRc4uj7SubeY7KEeLDO014.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FF3/CEABB4E61D9D11E28EAF4D8D08B02CD2/emYQUZRc4uj7SubeY7KEeLDO014.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:26:f9:39:1b:44:8b:a4:01:58:73:80:01:93:ac:a3:9d:03:
         59:53:2b:6d:99:88:ad:e3:11:70:2e:61:e3:7e:2a:dd:c3:e5:
         99:ad:b0:b0:3e:77:82:64:30:44:5b:8d:c1:af:47:95:bd:87:
         41:3f:91:d6:7e:d5:5d:70:d1:aa:ae:0a:6a:4b:e8:c5:3d:8b:
         93:60:8c:5a:48:46:e3:0c:b3:73:6c:18:0b:f1:cb:87:b2:76:
         da:e5:2f:38:d9:37:5c:d4:8f:84:35:bc:b8:95:82:30:20:b5:
         b3:a1:7d:6b:f8:32:98:e7:c7:2c:50:23:40:b5:55:c2:4f:39:
         f0:7a:94:fa:e1:46:dd:4b:c7:32:bc:e6:71:4c:37:79:ee:8d:
         51:e9:0f:92:cf:cd:ed:00:0f:f5:75:a4:b8:27:90:80:a5:2e:
         84:1f:43:e4:12:f1:6d:1f:fc:df:fc:ad:72:c7:8a:1e:70:f4:
         95:29:9d:82:1a:62:ed:37:fa:cc:d5:2a:35:6b:8f:75:8d:ff:
         c1:64:6b:b9:92:f0:bd:04:f3:b8:74:98:35:69:3b:1a:16:9b:
         1e:cc:bf:54:79:14:ea:2b:e2:43:85:8b:34:f8:94:ce:fe:0e:
         9c:a4:d0:32:43:fa:16:52:f7:d1:12:03:89:cf:15:f2:8f:42:
         80:db:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:54 2026 by rpki-client