Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File:                     EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier:          lP7iTwBkOyPQVoxdpuETtK1h9zX5Q0SpF6Cpqr1QPl8=
Subject key identifier:   18:5A:48:1D:EA:AD:91:6B:60:DC:A0:4E:59:49:DF:B0:F0:89:F2:9E
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       0124
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number:          0122
Signing time:             Sun 01 Mar 2026 06:42:01 +0000
Manifest this update:     Sun 01 Mar 2026 06:42:00 +0000
Manifest next update:     Sun 08 Mar 2026 06:42:00 +0000
Files and hashes:         1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: gNdTbDvJ/VZdF0wb1BXsMsu8mHCdcx+dkL5iKxgrYZM=)
                          2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: UXnC/XoVUkLq/3kEuo54UNzjcpY8CVmcAHE/kWC3Jds=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Mar  1 06:42:00 2026 GMT
            Not After : Mar  8 06:42:00 2026 GMT
        Subject: CN=69a3dfb9-52b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:09:99:16:1a:96:e9:fe:6d:ea:93:b2:3b:
                    48:bb:5c:24:08:5c:2e:29:9d:4b:29:18:dc:af:a4:
                    71:f5:7b:1c:e3:9c:c6:4f:af:56:7a:68:00:1f:18:
                    72:ba:ca:43:b4:38:cc:78:0e:0a:69:28:45:f7:85:
                    59:33:5a:7d:5f:5d:b7:7d:36:20:9b:71:a6:74:7d:
                    85:ea:9d:b7:95:fd:80:12:e7:10:aa:d0:82:ac:85:
                    d8:89:59:9a:e0:41:65:bd:4f:28:e6:1e:21:d0:30:
                    4d:08:47:eb:35:d7:82:71:cd:a0:fb:c5:24:21:7f:
                    4d:d6:95:44:93:d2:8c:f8:cb:75:b8:54:04:cd:c6:
                    e0:b1:dc:b4:58:03:a8:79:5d:c6:35:b5:a2:ef:ed:
                    22:3d:4c:d4:a1:8b:44:d8:28:90:89:95:73:aa:55:
                    2b:cb:5b:1c:90:ce:60:c9:88:14:7a:00:22:e5:70:
                    f6:21:58:33:49:c0:e4:a4:f1:41:fa:a7:c9:30:2a:
                    e3:1e:39:52:ed:12:00:73:88:95:f7:ba:97:7d:99:
                    74:a2:23:7c:be:c0:9e:a8:cb:af:2c:e9:6b:67:3d:
                    f5:c3:2f:f5:8a:01:79:84:6f:1d:16:75:ef:65:5c:
                    b1:06:37:eb:e4:8c:f6:9c:34:e2:98:f5:d8:05:bb:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5A:48:1D:EA:AD:91:6B:60:DC:A0:4E:59:49:DF:B0:F0:89:F2:9E
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6d:97:d5:09:dc:fc:5f:17:78:13:fc:c2:c2:42:91:9c:c9:
         36:26:d3:6f:2f:3b:09:d6:64:a3:4c:b0:32:07:3d:62:d2:34:
         7d:25:01:f3:8e:50:f2:ff:dd:92:d8:7c:d3:f5:bd:e0:59:de:
         4e:72:3e:ee:b7:50:72:eb:11:97:e6:a1:4f:33:1c:61:f4:95:
         78:e1:c6:81:b2:8b:86:6d:ed:c5:58:e8:2d:70:2c:08:7a:d1:
         9a:80:38:82:fc:ce:fd:81:00:0e:ee:64:e6:ce:b4:d0:56:fc:
         55:3d:a0:d0:50:08:39:ee:7e:54:43:bc:0d:bb:b9:f7:ea:00:
         67:e3:1a:95:f2:5e:cc:5e:7b:8b:76:03:02:d0:74:b2:43:02:
         a8:7d:e8:1b:0f:4f:a1:39:0a:18:59:be:00:dd:5c:8d:94:c3:
         ae:40:f9:a2:cb:26:13:75:f5:e9:56:e7:be:14:9d:bc:8f:a5:
         af:fd:da:ac:c2:b3:30:62:fa:82:71:6f:fc:9a:7f:20:8a:cc:
         15:62:07:7f:d1:9b:94:d1:1a:3a:ae:9f:11:9f:dd:c5:4e:69:
         b5:df:9e:39:c3:30:85:c3:08:ea:4e:46:0c:92:a4:04:be:6e:
         bb:1d:bd:13:d6:97:43:fc:30:00:e8:e0:91:e1:c0:17:db:ce:
         27:15:73:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:39:05 2026 by rpki-client