Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          6sBuEcIOf33JEgQcAsDt3VCDIUW79L3BuUnVc4qbFhw=
Subject key identifier:   B4:4C:00:5D:78:14:0E:2E:1E:33:EB:71:70:7D:CB:42:CC:04:5E:55
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       04DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          04D5
Signing time:             Sun 01 Mar 2026 00:27:09 +0000
Manifest this update:     Sun 01 Mar 2026 00:27:09 +0000
Manifest next update:     Sun 08 Mar 2026 00:27:09 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: hjnO+PqyYEk/wm6Fre6C7Kq5ZUrWxXMSQgDIpk+DI50=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: l8fLmMSk/DnNzXLnjLGhCq/saPEmEN6St/FpFqUG3SE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 00:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Mar  1 00:27:09 2026 GMT
            Not After : Mar  8 00:27:09 2026 GMT
        Subject: CN=69a387dd-691c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:23:e6:6c:55:a9:d7:fe:8a:83:de:e8:e2:
                    57:16:84:ad:82:27:16:68:ee:b5:0b:b1:70:5c:1d:
                    7f:31:88:d6:9c:71:a4:78:4f:ed:6f:c4:22:11:4e:
                    e2:c1:e7:a1:ae:b6:92:0b:72:fa:5a:0d:f2:42:25:
                    05:92:bf:24:c9:02:29:f3:0b:29:5c:f1:ee:6d:d5:
                    b7:d5:83:4e:5d:2b:b3:38:b7:8e:99:bd:78:0a:de:
                    0f:57:68:48:ff:b0:34:33:30:96:48:90:a5:49:5d:
                    ec:09:72:77:4e:04:c9:2f:8b:fb:6a:63:b7:78:92:
                    ec:46:86:e8:9c:8d:0f:8f:55:6d:7a:47:50:41:dc:
                    39:e2:74:fe:ac:9f:9e:5d:34:c6:c8:6f:e6:d2:e6:
                    17:59:9c:c2:06:e8:e0:65:18:2f:0c:73:19:76:25:
                    cd:37:87:7a:c4:4e:18:9d:5d:75:50:f2:41:28:39:
                    73:f1:5d:10:8e:38:cf:b4:e8:09:15:9b:9b:51:24:
                    42:7c:33:ca:d2:b2:d9:a5:d8:54:02:35:db:3e:e6:
                    73:0f:69:33:e5:52:21:98:cb:2d:e9:e4:3e:11:8d:
                    c6:f5:a5:f4:4c:30:03:e1:4d:a4:0f:eb:fb:3a:90:
                    6d:e8:e1:9d:6d:43:79:65:ea:6c:4f:dd:d8:4a:37:
                    ca:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:00:5D:78:14:0E:2E:1E:33:EB:71:70:7D:CB:42:CC:04:5E:55
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:31:2f:0e:90:81:75:40:83:82:f6:e8:6a:b1:9c:92:34:09:
         f2:f8:80:b6:ad:f0:7c:86:e5:a2:23:2a:de:95:e1:66:34:14:
         3b:f3:8f:d0:45:0c:6f:ea:0f:96:36:49:c2:8a:23:5b:0c:e6:
         b0:6e:22:9b:94:78:ba:42:21:f1:fa:fd:7b:bc:af:56:52:f9:
         79:1d:95:33:49:66:c6:49:a4:50:34:21:2b:ff:f3:68:54:70:
         51:34:01:9c:51:c7:e2:ae:95:2b:7b:e2:eb:65:c0:7f:53:ba:
         2c:23:e9:2e:d2:45:f3:70:81:ad:01:bc:55:e3:75:f8:85:ee:
         7b:15:1b:6f:b7:00:66:86:62:e7:04:a7:f5:93:2f:a8:c6:68:
         d6:37:41:50:a2:e2:a7:cb:11:48:4f:43:c9:80:54:29:ea:a1:
         24:d5:b1:8d:d6:70:e6:2d:58:a9:32:78:b1:25:0a:72:15:4a:
         40:9d:39:20:2d:6c:06:eb:9e:f4:68:48:62:f6:29:7f:59:e8:
         dc:e0:77:8e:95:d6:7b:c2:75:dd:fa:e5:50:19:81:40:9e:4d:
         48:8b:10:b9:21:74:62:c0:3f:2d:05:18:20:5e:9f:d7:ff:b1:
         d7:cd:ab:b4:d7:1d:60:d7:b2:fa:01:65:bf:28:0c:a6:4f:f7:
         0c:7e:9b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:35 2026 by rpki-client