Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          2hJx7gpJtucH1Z1Bl7lsRjn8fUlZIj6hH2ib25ovNQ4=
Subject key identifier:   E6:F5:71:C8:23:92:B2:EF:19:43:19:7B:AB:20:4C:51:B9:AD:2D:7C
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       01FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          01F7
Signing time:             Sun 01 Mar 2026 03:55:22 +0000
Manifest this update:     Sun 01 Mar 2026 03:55:22 +0000
Manifest next update:     Sun 08 Mar 2026 03:55:22 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: 4wR13MdfLSqNPIq03sACqW8tbXrGBLSxlzdFTfew9DI=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: 0vwZnVq6+4c6D/8J1aiiHDqlou0UwAPkCDM39Wg9hHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 03:55:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Mar  1 03:55:22 2026 GMT
            Not After : Mar  8 03:55:22 2026 GMT
        Subject: CN=69a3b8aa-0921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:08:1c:f0:e3:9f:7a:09:8c:70:cd:e8:ce:f1:
                    38:99:f1:75:e8:de:47:64:87:98:a9:bf:a0:40:fd:
                    57:b2:6d:c1:e8:a4:5a:2e:0b:4b:0f:42:55:13:af:
                    89:51:26:ac:6d:0f:29:c9:42:35:51:7a:cb:4d:89:
                    35:b3:9f:ec:ec:54:36:ea:f7:bf:ba:33:b0:7a:27:
                    74:ef:45:65:cf:36:e5:b2:dd:fe:7f:21:47:cb:c6:
                    4c:6f:ee:65:8c:88:81:a6:5b:a7:2d:b0:70:10:d3:
                    76:57:3b:3e:d9:c0:54:39:16:58:42:54:49:e6:ee:
                    b2:a1:c4:d2:6d:7a:cf:ee:5d:cd:4a:ba:16:4c:52:
                    56:a0:46:c0:f3:b2:69:d3:21:de:07:a1:ac:74:06:
                    47:49:7e:d0:a9:af:16:9c:ff:68:39:6c:66:29:fd:
                    f5:58:e7:61:d9:a9:79:08:be:bb:e4:79:f8:fe:0b:
                    92:8f:da:20:e1:b4:a5:72:37:10:30:3d:ad:11:03:
                    7c:7e:36:5c:8a:1a:42:4b:f2:9a:16:6c:64:6c:26:
                    03:eb:8f:f2:d7:5d:df:00:94:5c:88:d3:b2:15:a7:
                    97:61:b9:77:e2:fa:30:cf:cf:30:a6:de:b9:3d:be:
                    ba:56:31:79:b2:86:2f:8a:22:ea:6c:f0:15:fd:39:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:71:C8:23:92:B2:EF:19:43:19:7B:AB:20:4C:51:B9:AD:2D:7C
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:af:48:e5:ca:2f:11:d8:9a:80:d8:4d:ac:f9:46:ec:01:eb:
         c7:01:27:7d:61:cf:3e:45:f0:8f:f2:c2:3e:36:02:c0:79:92:
         6d:08:58:d1:d6:a8:c0:ad:eb:b4:50:11:4b:ee:6b:0b:44:7f:
         7e:4b:40:df:ba:60:ab:fe:f3:8e:15:bf:db:00:e7:e6:af:26:
         39:72:1a:1b:23:05:76:69:66:6f:34:85:57:c5:b3:2e:91:5e:
         72:f2:09:0f:0e:db:46:ea:c1:b6:bf:10:46:3c:ef:7b:2a:26:
         f3:30:e8:70:1a:c4:4f:7f:d6:ce:15:7f:b4:ba:20:22:6b:70:
         22:72:a3:df:b6:ec:68:16:d0:a8:7b:4a:ed:b5:7f:7c:6d:5f:
         d0:68:93:c7:64:e4:b6:ab:c7:2a:07:88:db:c8:81:e6:77:23:
         76:77:1b:4d:72:71:aa:93:4a:51:85:f2:f3:84:be:4e:c9:a5:
         c3:96:01:dd:94:54:86:ed:2f:a9:8a:74:82:09:7d:01:d7:66:
         d9:65:c3:d8:0f:fd:f5:83:13:ab:57:77:a7:9c:f8:0a:ae:10:
         a4:96:56:21:9d:3c:e8:86:60:e2:8e:b7:b2:68:ae:41:07:74:
         39:e2:f5:32:23:02:55:3a:93:12:8b:64:9c:d3:f6:85:b4:02:
         87:36:80:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:23 2026 by rpki-client