Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
File:                     GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft (raw, json)
Hash identifier:          dBAsl/AKTf65NH1CT98O7O5oux/876Llu/TSKgHs7is=
Subject key identifier:   79:80:09:2F:E5:A5:17:4B:B0:8A:A1:42:24:2F:00:FB:E0:75:EB:50
Authority key identifier: 18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8
Certificate issuer:       /CN=A917EA7F/serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
Certificate serial:       0845
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
Manifest number:          0837
Signing time:             Thu 16 Apr 2026 20:49:21 +0000
Manifest this update:     Thu 16 Apr 2026 20:49:20 +0000
Manifest next update:     Thu 23 Apr 2026 20:49:20 +0000
Files and hashes:         1: GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl (hash: BMZ7AlIDWc3tBYinOeT9Fie1ed9l3m3LbJfasceIxuo=)
                          2: 1994E0780B5B11EB80C8B15FC4F9AE02.roa (hash: FnoWXzNWJjjpdfPVYZMnHGoZQsfGs0O6OuWkpNH6Ba4=)
                          3: 18E7B6C80B5B11EB80C8B15FC4F9AE02.roa (hash: 6HBwnAdSSFtnjaGJ508w7iBxRC6Y0SWJe0qRKEHH2Og=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl
                          rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2117 (0x845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917EA7F, serialNumber=18442A116C30101BEC8C89F4501978C092036BB8
        Validity
            Not Before: Apr 16 20:49:20 2026 GMT
            Not After : Apr 23 20:49:20 2026 GMT
        Subject: CN=69e14b51-d462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:63:fc:78:ec:ab:15:37:b4:19:74:b2:3b:
                    03:a0:cc:6f:3e:cc:f1:e6:9a:e5:4b:1c:d2:8c:23:
                    6c:61:ab:82:34:d5:68:2d:ae:f0:5a:ed:64:26:d9:
                    5c:16:66:47:90:58:64:6e:db:05:82:1a:3f:64:ae:
                    a0:e5:d4:8c:17:4a:57:cc:a1:19:f5:6a:5b:ea:ad:
                    8b:6f:a5:28:47:6e:3e:9a:47:68:55:42:2e:d3:b7:
                    91:38:3d:9e:ee:47:eb:29:51:24:5b:cd:72:c0:20:
                    0b:eb:2f:30:70:07:ca:7e:33:74:75:8b:1f:6c:6e:
                    a1:a7:77:7c:e2:9b:5e:8a:a9:83:31:4f:19:10:16:
                    a9:f5:6d:21:d2:c1:1b:4c:39:ea:c4:2c:18:bd:56:
                    b4:b1:66:d4:84:66:a4:46:2f:7a:54:48:96:57:f3:
                    c5:e8:9a:85:30:c0:a6:00:30:e5:28:7b:f3:1d:b4:
                    07:9e:5c:6c:ec:d9:1a:a4:6f:5e:ad:5a:a1:cd:67:
                    29:cf:03:00:1f:08:50:24:88:0c:2a:94:86:78:2e:
                    e5:e1:db:96:0b:ea:40:94:17:62:01:75:a2:80:58:
                    ee:ef:95:d9:9c:01:3a:cb:ae:fe:97:af:b4:4d:e0:
                    8a:81:fb:f6:27:16:66:3d:45:74:9c:28:86:ef:87:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:09:2F:E5:A5:17:4B:B0:8A:A1:42:24:2F:00:FB:E0:75:EB:50
            X509v3 Authority Key Identifier:
                keyid:18:44:2A:11:6C:30:10:1B:EC:8C:89:F4:50:19:78:C0:92:03:6B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GEQqEWwwEBvsjIn0UBl4wJIDa7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EA7F/E964AF4C0B5911EB93590A5FC4F9AE02/GEQqEWwwEBvsjIn0UBl4wJIDa7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:7b:de:6e:a2:e1:26:a1:b8:ca:f0:36:f7:9e:44:87:ba:
         d3:4e:59:f8:1a:b6:82:c4:b1:ae:68:a6:ce:99:22:a5:92:7a:
         aa:17:06:b2:c5:79:4f:6d:39:07:d6:8c:93:4e:2e:23:2e:b2:
         3c:89:54:4b:3b:11:ad:5b:2b:02:a9:bb:93:a2:6e:66:ff:8b:
         8c:fa:b8:ef:28:ce:1b:19:f6:af:85:8d:ac:f7:a0:f6:65:3d:
         f6:36:65:50:1e:0e:53:d2:4d:78:4c:b9:f7:8a:54:5e:3f:dc:
         39:7b:b2:be:d0:b3:1d:18:7f:61:01:61:3c:2e:8c:94:0a:b5:
         e2:2c:ca:06:01:f4:29:ac:23:81:59:39:3d:9f:0f:69:5c:12:
         1c:07:f3:db:cd:a2:1e:e0:8d:a1:65:d2:b4:46:bd:2e:f9:53:
         17:bc:db:82:72:fe:d3:f1:0d:f9:0c:41:dd:3c:c6:6c:14:08:
         df:13:07:ff:4d:5d:d9:a5:1a:14:c2:f5:ef:d7:db:53:0b:d9:
         0b:d9:8e:c7:c4:8b:a8:87:79:79:0f:61:bc:eb:96:de:9d:39:
         a8:34:ea:86:87:4f:52:f4:ee:8f:f1:9a:67:e9:3e:6b:12:36:
         43:be:72:2d:ae:de:68:aa:03:83:f4:55:dc:31:ea:2b:90:66:
         3a:55:6b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:04 2026 by rpki-client