Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          SvMRhAvwJ1LtlJbNOlhwcJMvmquyl3+GfDDBkqJ7CHQ=
Subject key identifier:   94:22:67:3D:8A:EB:11:E9:98:96:1E:3F:C4:7E:D2:4F:B0:7C:6C:3A
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0447
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03DB
Signing time:             Sun 01 Mar 2026 01:41:23 +0000
Manifest this update:     Sun 01 Mar 2026 01:41:23 +0000
Manifest next update:     Sun 08 Mar 2026 01:41:23 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: 2Bs3TrchEB6NlzZH4junqZOs+CTDn7FUKrczgYK9e1E=)
                          2: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: xv079pIs1/FClxeBMzqshHl5DkculedgPqtxk3+pWSM=)
                          3: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: q0o0blyQ81NictXAsmCb5KMZ0BzFrp/mj7hc480MWyw=)
                          4: 7CCE329266F711EF86880681C4F9AE02.roa (hash: 6anx6+tUYpCyea4W0BqwQSGkyUCAr4k+8K9NAhmwsJE=)
                          5: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: rjo+bi3dT0jsXGyAaC/7THKFQ/vbxvn37jUfycsRuPY=)
                          6: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: R2aXqdXv/YYWTDm0Zg9mXpEwW7/LQ+rx9k+rQWKBQEg=)
                          7: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: PO28TqT7JFAgsJS4OG8H4ivCR2vG+AQUGdE3hSyf+fM=)
                          8: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: R17w/Fkdvp/1oePeXfLYVtvseH7RLcT+pcv0SXzugK4=)
                          9: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: QdBFtLVQnvTC0U8ce4xfWA4Knfofq/bGhnYdWQPREvM=)
                          10: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: ABW3By8YU2W6olwHz1/qOoSOHNFidR8eMB8CQ1rCUFk=)
                          11: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: KY39ZDloooDTLSWdSYEfYOluFdXRey3d+9IwjJV7kvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 01:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Mar  1 01:41:23 2026 GMT
            Not After : Mar  8 01:41:23 2026 GMT
        Subject: CN=69a39943-7aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:29:69:b6:bf:ea:8c:b3:7d:50:b5:d6:63:
                    e5:63:5f:ff:43:99:68:68:80:92:36:13:5f:d8:40:
                    03:0c:ce:d4:ca:be:af:a3:c2:56:c0:97:b6:a4:77:
                    53:54:a6:03:2e:6d:a5:cf:a3:48:57:eb:cf:27:eb:
                    26:7d:61:67:34:a2:29:7a:2e:b4:51:27:a7:fd:d1:
                    76:b2:7b:e7:b1:de:d5:31:eb:bd:f4:26:fd:8a:95:
                    ea:86:ca:c6:e1:32:bf:34:8b:b5:fc:5a:a9:82:62:
                    35:e0:fb:1d:b9:01:32:d5:7e:71:47:8a:45:f6:f5:
                    37:5f:f9:90:10:f5:bf:18:8f:e6:e2:6c:b2:36:d0:
                    ae:3e:8c:7e:fa:4b:03:2b:52:ec:a7:cb:1f:04:ff:
                    87:a2:49:57:89:1a:2f:ec:6b:e0:ab:37:0f:90:29:
                    66:aa:77:80:58:a6:56:4f:47:7c:d1:f9:3b:00:ef:
                    db:bd:6b:9b:2f:0c:f2:b2:25:fd:73:d5:9b:07:95:
                    a3:cb:85:13:0f:e4:0a:2a:87:79:ca:58:9e:d3:5c:
                    f2:95:14:73:20:97:0e:c2:01:57:ce:0c:f8:a1:b8:
                    76:b9:47:ac:d1:ac:0e:8b:b5:e7:40:94:9d:dc:9b:
                    72:04:cd:7d:27:78:4f:79:c2:99:59:32:68:7e:7c:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:22:67:3D:8A:EB:11:E9:98:96:1E:3F:C4:7E:D2:4F:B0:7C:6C:3A
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e8:84:45:06:5f:26:e0:ae:a8:1c:a9:e3:5d:49:5f:d6:e0:
         94:4e:27:61:6c:72:f5:23:14:f2:7c:44:d5:62:d5:43:6a:89:
         e4:35:ab:78:26:42:7d:b7:b2:ff:86:88:d6:4f:e3:74:02:58:
         ea:e0:7e:e9:73:15:3c:1a:cd:db:e8:fe:06:f8:e6:d0:c5:e7:
         7b:32:9b:62:4b:58:5d:26:ed:26:20:a8:6e:4a:50:29:e3:45:
         27:52:68:9e:07:4d:46:bf:d0:6c:28:18:e3:1a:fc:20:3b:1f:
         52:aa:d7:f6:18:ac:e4:d4:df:69:65:ea:bd:89:2b:c0:41:8c:
         b8:39:ab:07:04:da:2e:75:49:17:d3:a1:fe:45:c2:e5:89:ef:
         bc:b4:e3:84:c5:bb:04:ad:cb:9d:7f:52:74:74:da:91:05:9d:
         7d:2e:e7:1e:54:a4:d0:04:4a:73:be:98:3f:6e:8a:d3:22:41:
         d1:ba:5c:bf:81:37:29:dc:5c:68:76:eb:40:a9:85:d0:07:f3:
         d5:aa:83:24:75:b6:61:e4:99:45:3e:08:ff:74:f1:b2:c3:d7:
         3e:86:84:ce:9a:90:db:fc:cb:30:b1:64:16:95:4e:66:47:d1:
         e9:6b:c5:e2:7d:60:0a:b7:0b:a1:02:78:84:56:a7:0e:e7:56:
         b9:10:72:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:47:53 2026 by rpki-client