Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          LNeLz6hVYiysdgAibUO6t8/OoV4WmlfE26LcxW6N4t4=
Subject key identifier:   0D:00:97:21:8F:F0:FC:17:B2:F1:92:AA:EC:30:A7:ED:AA:9C:19:83
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       35C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          3575
Signing time:             Sat 28 Feb 2026 14:46:29 +0000
Manifest this update:     Sat 28 Feb 2026 14:46:29 +0000
Manifest next update:     Sat 07 Mar 2026 14:46:29 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: f4yp/B/Bo8tPnjhv9K4cKftm1/nmWbDB81I39jL0CiQ=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: fT98Wy1t5VScFWJuQupk2LhedSGkV+ojkzEZelCkDWM=)
                          3: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: d/7DMtiXfQBwX+8qOXb96W9MkSduRe+bpauiOZ+JfzU=)
                          4: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=)
                          5: 677C9A56DFD611F0B4BB7BAF516F56BC.roa (hash: 6lJtKi23LkePthTqcjWfYNBLjiWhHMrFyxcO0AXa4yU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13762 (0x35c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Feb 28 14:46:29 2026 GMT
            Not After : Mar  7 14:46:29 2026 GMT
        Subject: CN=69a2ffc5-4f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:0d:e1:5b:06:08:2a:01:79:42:20:0d:71:
                    3c:08:02:d1:82:88:cf:85:72:bd:fa:c6:0a:4b:8f:
                    6f:bb:23:cb:14:ae:64:80:a4:08:9b:a2:cd:3d:d4:
                    8f:a5:41:7d:d0:7f:ef:28:11:2f:93:5d:46:4a:d7:
                    dc:77:e5:5f:f0:00:81:9a:02:52:b3:0b:6a:c2:94:
                    6c:0f:c2:fc:49:e4:7a:28:62:b8:a9:fb:ac:34:8c:
                    89:8b:65:eb:09:54:71:10:a6:08:67:cd:da:c6:49:
                    e9:dd:31:30:98:1d:8f:2a:38:a6:48:ac:6a:4f:b2:
                    5d:b2:f4:ca:af:95:8a:0c:dd:d3:13:90:f4:9a:d0:
                    bd:05:06:a0:5e:e1:5c:e0:bb:3d:50:de:75:ff:ce:
                    dd:2c:99:1c:da:a4:b8:2d:68:58:c7:54:7e:97:b9:
                    c0:29:04:ea:11:1c:9f:41:67:1f:ee:0a:fc:9b:d8:
                    74:9b:31:e3:5f:e2:90:78:e6:c3:c7:c7:48:84:1e:
                    7a:1f:76:c3:dc:9f:56:7c:9b:a7:f0:0b:d6:c3:fd:
                    e6:f7:27:f6:57:26:35:12:a3:1c:f9:ff:d9:9e:ba:
                    a3:5b:5d:ab:3b:18:11:33:aa:39:e0:a0:c0:93:24:
                    8d:2a:40:9a:45:55:19:f0:38:6e:dc:d3:bb:9c:ad:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:97:21:8F:F0:FC:17:B2:F1:92:AA:EC:30:A7:ED:AA:9C:19:83
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:69:6b:e3:ed:30:5f:a7:79:49:ba:8a:17:d5:9a:2c:4f:48:
         fb:14:c4:d0:56:1e:68:e0:9c:bb:ad:89:8e:1b:99:6f:19:5d:
         28:eb:53:24:69:3e:5a:12:24:96:dd:1f:93:3b:be:5c:c0:24:
         99:0e:91:ec:b1:65:45:d7:dd:af:5d:b9:2b:e3:ec:87:cb:c1:
         9a:54:5f:fc:56:2b:90:b0:a3:30:2e:cd:e5:5b:59:d9:2a:94:
         de:4c:d6:21:f6:43:13:c6:bd:56:ea:7e:c6:24:81:ca:02:21:
         72:0a:16:74:46:68:fe:e5:b2:90:f7:83:6e:95:e9:72:bd:95:
         47:bc:f6:44:0b:73:6c:f1:24:97:9b:06:94:6f:59:b7:c7:60:
         e9:5c:6e:2d:2b:cb:d6:49:5c:b0:f0:99:a3:bc:d4:60:dd:8d:
         78:28:98:f6:b8:64:22:8b:7b:2a:42:f9:93:b8:fb:4e:ff:f4:
         4b:10:6e:6c:2a:31:e1:f9:a8:18:45:59:ea:ae:f9:38:55:14:
         92:b7:db:9c:e0:43:2a:8b:e5:03:c0:b2:6e:42:79:67:af:85:
         d1:02:de:c4:3d:13:af:de:db:67:98:c0:28:e0:f2:2a:f0:5d:
         bd:39:90:d1:7c:83:ef:e2:5e:5f:b2:65:79:21:ee:db:64:8c:
         00:41:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:18:13 2026 by rpki-client