Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          k4MCTAsv7LvEwaeSbiXd6FnkElHT+NmqRkBsa/9TXE4=
Subject key identifier:   E5:31:03:FF:73:03:4C:65:99:FD:03:B9:96:1E:B5:A8:84:48:17:51
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          04EF
Signing time:             Thu 16 Apr 2026 23:38:53 +0000
Manifest this update:     Thu 16 Apr 2026 23:38:53 +0000
Manifest next update:     Thu 23 Apr 2026 23:38:53 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: uxAUPOPOhEopIUpaOFz9IWOC7TZ0ARiLWD0YqVhZg6U=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:38:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Apr 16 23:38:53 2026 GMT
            Not After : Apr 23 23:38:53 2026 GMT
        Subject: CN=69e1730d-b0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:d0:37:32:1c:63:aa:c6:a1:58:24:51:a6:
                    eb:12:f6:17:af:ab:17:6e:32:17:1a:1d:91:a3:a8:
                    95:63:c4:b8:9d:42:6e:b3:1c:b1:93:28:85:98:20:
                    21:09:e9:65:43:9e:11:1c:26:c8:1e:7f:37:9d:80:
                    2d:f3:a0:00:97:3a:54:9e:21:dc:6b:4a:af:2c:e9:
                    83:3a:26:1a:47:cc:6e:d2:26:10:00:41:db:4a:14:
                    9b:0a:85:a8:71:75:08:99:73:d9:94:fa:bd:b7:88:
                    84:35:7e:9e:8b:e1:cb:46:78:9d:c8:b4:c8:f5:b8:
                    34:51:a8:f7:17:64:82:1a:3e:09:87:27:76:0c:5c:
                    96:da:a9:9e:d5:eb:42:47:bd:3c:99:b5:1e:46:ec:
                    08:13:f8:7c:2e:01:d5:a0:e7:de:ed:57:a2:c3:04:
                    44:b9:2c:c7:29:66:16:0c:47:1f:4e:f1:5c:69:76:
                    36:d9:22:6e:36:fa:1f:fa:3b:d6:19:7d:90:81:e3:
                    9e:6d:2e:9a:51:ff:13:d3:a2:3e:8f:5d:ac:dd:ec:
                    30:23:ae:d9:f1:e0:61:70:55:73:05:d7:99:dc:3a:
                    ee:ff:3a:8e:4b:eb:79:8d:1e:21:6b:24:cc:1b:2e:
                    a0:bd:3f:8e:74:ad:0e:1f:bd:a7:1f:50:49:39:31:
                    79:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:31:03:FF:73:03:4C:65:99:FD:03:B9:96:1E:B5:A8:84:48:17:51
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a5:44:ed:ca:1a:a0:5c:e2:12:45:e2:57:24:6e:31:90:c7:
         b5:95:af:00:55:92:71:56:1f:fb:27:14:33:67:1b:a2:1e:b5:
         8c:c9:c9:21:4c:30:ce:af:38:bd:15:48:0a:ef:d6:6c:67:4e:
         a7:cb:d0:9b:44:ce:a2:76:23:2a:4d:02:29:21:04:a4:32:fa:
         44:80:68:b9:9b:6b:a6:8a:16:6f:1f:06:f5:17:c3:39:21:34:
         13:18:9b:00:7c:b5:3a:10:1c:7e:87:b9:2b:00:75:2a:16:2e:
         84:00:6f:b4:1f:23:41:85:e0:c5:a6:74:a6:a9:7d:58:d1:0a:
         8c:82:24:af:fc:32:78:f7:7d:f6:31:f4:0d:14:ee:13:ef:c6:
         25:dc:c7:4a:e0:8a:b2:86:e7:a8:6b:76:ca:4d:b8:30:0f:57:
         d4:54:fa:50:ad:45:26:07:6c:b7:d6:5d:1b:27:5a:3f:97:bb:
         50:a0:8d:89:91:82:da:b4:49:44:b5:ef:67:b6:64:16:9a:39:
         1b:de:c9:a3:ca:dd:ee:53:cf:2b:74:30:58:10:bb:02:9d:fd:
         05:08:25:09:b4:b0:f7:bd:5a:d8:91:7b:92:87:eb:0d:8d:c0:
         24:b7:5f:22:e7:12:10:20:c9:70:df:f9:fc:9b:a3:bc:9c:69:
         f7:f8:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:29:59 2026 by rpki-client