Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier:          60fxqWbuQhv8bF0wo6mnXT2pVInX5rl9btWWVSdfRs4=
Subject key identifier:   B5:83:F9:3A:5F:5B:B9:31:83:EB:FA:AA:3C:E4:F0:B8:72:C1:EB:87
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer:       /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial:       0190
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number:          0189
Signing time:             Fri 17 Apr 2026 04:14:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:14:38 +0000
Manifest next update:     Fri 24 Apr 2026 04:14:38 +0000
Files and hashes:         1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: h2Kqf4BlEIX+TRev6jQK3BsUkCQENdl0G7NbYBX0ljM=)
                          2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
                          rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Validity
            Not Before: Apr 17 04:14:38 2026 GMT
            Not After : Apr 24 04:14:38 2026 GMT
        Subject: CN=69e1b3ae-9fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:3c:05:ff:1b:91:bd:04:bb:74:f2:dd:36:
                    af:ac:9a:c4:68:1a:bb:eb:0c:88:55:64:fc:43:10:
                    e2:bb:e5:34:b4:20:f5:17:ee:e7:22:c7:7e:2c:f8:
                    70:0e:e2:11:e0:49:3b:05:4c:70:ff:3e:e1:1a:40:
                    0b:e9:a9:3d:2c:54:c5:7f:3e:8c:4e:2b:cd:0f:b7:
                    2d:56:fd:ab:07:34:6d:e3:28:3d:66:57:be:31:e0:
                    32:56:58:79:50:5f:48:fa:08:d5:c3:48:e3:91:7e:
                    e7:67:2b:00:c4:41:de:53:c8:ce:58:16:a3:bb:8e:
                    75:d8:36:f1:69:9a:e6:99:9d:ef:1f:7a:d1:2d:85:
                    c0:82:78:92:8a:9d:9d:a9:b7:be:71:bc:a1:e7:ae:
                    ad:fe:5e:1f:f1:fd:75:3c:e2:2f:26:c9:6d:de:5d:
                    53:9a:21:f3:48:c0:de:9e:09:d3:35:79:23:56:55:
                    98:a5:67:2d:0e:0e:0a:04:0c:21:e7:9b:4b:08:7a:
                    23:5e:0a:dd:a4:12:f4:a6:06:88:76:1d:79:d3:5a:
                    25:59:24:43:02:a3:0f:51:f5:06:2c:06:3e:be:cb:
                    e4:a0:48:00:2c:50:22:22:7f:89:d6:e6:f0:36:dd:
                    c7:98:23:8b:5f:65:21:32:e9:c1:bd:1f:94:1e:0d:
                    96:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:F9:3A:5F:5B:B9:31:83:EB:FA:AA:3C:E4:F0:B8:72:C1:EB:87
            X509v3 Authority Key Identifier:
                keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:4c:3d:25:96:92:2a:7b:31:5a:38:c7:0f:46:06:74:d5:8e:
         c7:cc:c4:0f:88:29:99:76:b1:f1:85:ea:61:cd:27:cb:74:e0:
         be:c6:4f:af:9e:94:fd:0e:12:b9:85:17:a4:eb:a1:87:22:67:
         05:eb:c3:54:7e:79:4f:25:8f:88:1b:46:fc:dd:40:95:da:de:
         00:b9:de:c8:4f:86:64:4c:b2:81:ca:51:51:c0:29:34:e5:d1:
         17:23:d6:db:17:af:3f:8c:53:41:32:43:23:03:df:7a:1f:1c:
         55:a8:f5:e4:a5:4a:fe:69:1f:52:33:1e:b6:55:54:41:ac:e7:
         16:9f:8f:7f:fd:7b:4e:73:b9:a8:d3:b1:aa:aa:e2:c8:bf:06:
         5c:fa:ea:b9:9c:0a:d6:16:4f:5d:bd:8f:e9:8d:cb:2b:a5:eb:
         51:f7:38:19:36:94:38:a8:1c:bb:25:89:e8:35:95:6c:95:71:
         07:c6:11:4e:c7:02:fa:54:e7:72:0a:0d:b8:ee:0a:4b:01:9a:
         d2:45:ff:e1:ba:d0:39:be:1a:57:ff:3d:b6:43:f6:f7:15:78:
         d0:97:d0:82:f0:ea:9d:ad:f4:98:12:a0:30:5e:74:93:1b:9a:
         a0:5c:4d:92:c8:bc:39:5c:7a:b8:6e:96:e6:a5:5a:00:76:7d:
         36:a8:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:07 2026 by rpki-client