Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          yt3Vte2qhc/a4IceDcAPXLGe25HDq9FtIDzHCwYxqLg=
Subject key identifier:   80:BB:2F:7F:3D:13:49:98:55:F0:A3:09:09:1A:73:99:8A:5A:16:12
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       046D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03F6
Signing time:             Fri 17 Apr 2026 00:40:28 +0000
Manifest this update:     Fri 17 Apr 2026 00:40:28 +0000
Manifest next update:     Fri 24 Apr 2026 00:40:28 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: CWI4g80NeAlOs078Xw4ysUQAuC5cPb8iqrHQf/JkRjM=)
                          2: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: f8lGC/TQI+v4wy9cX9FY3fSgK/i2T8wCtptDQYjU/lo=)
                          3: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: /c+DOCRTYY/llMZH2mW34+F7qtixtEHbGr1z8QLrDSQ=)
                          4: 7CCE329266F711EF86880681C4F9AE02.roa (hash: P7aOwAoQCD24agMwYkDuPM/PBiY4l/nBmbknOmgKu4U=)
                          5: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: FHMw7TIkQ5w3jytcpOZYdMbiPYWeOiZ6Fey0Hmv9PZw=)
                          6: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: a0RqWFhlleo0IJ3svANvJek4iA+KU/t4gkcKeF2xAQk=)
                          7: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: Ng6ZAHZjd8iEWPNufSxg02ATrLWYufmfc+mSm42j+M4=)
                          8: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: C8pVkBYnSVefXoeGXotgcKUylbtPsOzrObp6L/3rmVE=)
                          9: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: WxRqUacvVA6NIvqL4tzKH3OPAsoLWQLxol9FjYHJSPU=)
                          10: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: 0SOkm+BXSDSpdPzUTvjh1AEylkmoBHEkQgyOqkC+tHQ=)
                          11: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: 6gmB7e2/TTgQSWx3VnY7mRENxpPMfy8g2P+EnTlXmso=)
                          12: E2F3761026F711F1AF0DDFE09A833773.roa (hash: KvJp9/1v13YVV/oraphet/np4fZaB19AQnIg7wKUY88=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1133 (0x46d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Apr 17 00:40:28 2026 GMT
            Not After : Apr 24 00:40:28 2026 GMT
        Subject: CN=69e1817c-9676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:dc:b9:05:b7:69:66:4c:8f:21:0f:6d:01:
                    dd:82:f9:5d:d2:3a:28:a9:1f:5b:1f:0f:78:0b:1f:
                    da:92:5c:cd:4e:8e:c9:4c:10:8c:5e:bd:a2:94:82:
                    f7:89:3a:a6:9c:fe:0a:f2:09:b0:40:29:0a:82:51:
                    95:5a:06:72:9f:d2:23:4a:c4:34:33:fe:d3:c7:b1:
                    45:80:db:6f:9b:b7:7e:2a:d5:33:6a:9f:5d:eb:68:
                    22:e4:31:ff:69:e5:58:04:be:5f:bc:2c:45:dd:a5:
                    2e:93:25:37:e7:7e:82:4a:d8:01:4d:55:bd:17:ee:
                    01:7e:57:13:a0:8e:af:82:3d:50:43:61:7a:a4:80:
                    bd:35:76:2f:8d:6a:f2:2e:66:13:4d:65:ef:19:5a:
                    14:f5:cd:ac:6e:98:16:4f:70:d8:47:ba:07:4d:b4:
                    00:c1:31:31:0d:5e:e6:8c:d7:db:4e:8a:00:39:7e:
                    90:56:b9:d7:ed:eb:12:d5:ec:ac:23:67:2a:8c:77:
                    bb:2f:7c:a9:01:c4:e2:c6:82:e1:aa:bc:27:de:df:
                    2f:57:48:55:44:ab:82:89:e9:54:e1:06:51:7d:03:
                    9e:b1:7a:9b:32:c3:9a:0b:26:a9:3c:96:4b:fa:82:
                    e3:2f:28:40:93:bc:31:e0:df:b5:90:86:a5:a1:b2:
                    91:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BB:2F:7F:3D:13:49:98:55:F0:A3:09:09:1A:73:99:8A:5A:16:12
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:40:15:26:a1:bb:27:3c:74:a3:1b:f3:45:70:b4:f8:97:
         1d:43:b9:96:68:b6:35:9e:91:2f:4c:6c:6a:c9:df:7e:35:e7:
         02:48:25:6f:2e:82:27:81:ce:12:4d:0c:e9:6c:81:02:ed:dc:
         ab:a9:27:ee:39:b3:5c:f8:22:c8:c8:ad:02:d4:28:21:63:fa:
         0e:d2:ce:87:07:23:52:ff:0c:d1:b4:75:01:44:5d:2f:4e:9c:
         6f:a1:cd:6a:0b:6c:e9:05:f7:11:39:5e:ec:96:05:36:03:e1:
         92:57:62:c2:7c:b0:8a:84:88:91:c8:2e:d4:ac:0b:31:61:2d:
         01:64:bc:35:b4:64:53:ba:31:fe:b2:56:3e:83:f0:bc:4e:f7:
         10:6d:d9:b2:75:ee:f6:c6:94:fb:ee:21:c2:76:d5:42:b1:ab:
         6b:e5:50:31:8b:89:4d:78:14:7d:ce:6d:7a:72:e6:80:82:44:
         21:df:c2:b4:6c:3c:61:4c:54:a0:4f:d3:1c:d1:e8:dd:9c:4d:
         09:aa:c8:24:af:b7:5f:04:86:99:1d:5f:61:0f:f2:b5:90:b7:
         f8:29:7d:47:bf:66:64:aa:91:ca:c1:cf:76:13:e3:87:d7:9a:
         86:34:b2:dd:b8:61:ef:f1:d6:47:65:77:40:e2:b7:70:2c:37:
         c2:30:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:11:10 2026 by rpki-client