Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
File:                     EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft (raw, json)
Hash identifier:          jd22ott1R6yMjTcxKlEbanU/3EpE3kgW7ku1bfd96H0=
Subject key identifier:   CA:46:1B:CD:18:39:0F:8A:2A:92:E9:6C:46:97:3B:CF:69:79:2A:D8
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       3619
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
Manifest number:          3599
Signing time:             Fri 17 Apr 2026 14:13:03 +0000
Manifest this update:     Fri 17 Apr 2026 14:13:02 +0000
Manifest next update:     Fri 24 Apr 2026 14:13:02 +0000
Files and hashes:         1: EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl (hash: Zg5fUe2+tb/sizmXIMRfO/Gsb35ReN1sDf6gAuM6ZBI=)
                          2: 80B30FA48F5611EA9C04912BC4F9AE02.roa (hash: 3pjfJCyknREszv/FegN9CbVDErK4IM348Au5D7H+UZ4=)
                          3: A88A36D0003A11EEB8430127C4F9AE02.roa (hash: ac4P9h8lLDAof2k9ERCs9Yn8jJ76v4h2O4+ix7CVH8g=)
                          4: 187F92966F0911ED8A7BD268C4F9AE02.roa (hash: r71AZU/AGm0+my99KPYn1TXxS+UY3LlY1LswZtBbWGw=)
                          5: 5E5FD4943A3D11F1BA9A26A3A0833773.roa (hash: Jcy8NpWeyxlsek4l2QzVuwefebsXZYDny/VqxXJLrWg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13849 (0x3619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Apr 17 14:13:02 2026 GMT
            Not After : Apr 24 14:13:02 2026 GMT
        Subject: CN=69e23fee-7a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:f2:56:6c:64:de:32:fe:ad:8d:9f:e7:94:
                    77:44:81:0c:03:ce:d5:d4:21:8d:9e:c3:54:50:4f:
                    2f:e9:ef:33:48:7c:23:4e:13:b8:51:f4:72:ca:4c:
                    b3:fa:03:c9:49:0a:6e:ec:f0:60:a4:1e:95:81:45:
                    a2:4a:d1:ef:f5:0c:f1:8a:cc:f3:b1:a9:35:f8:b6:
                    3a:84:9c:0c:fd:9e:23:e4:9f:d6:82:74:cc:42:c5:
                    c5:c4:84:b7:7d:fe:2a:3f:44:1b:2a:4c:ad:2e:67:
                    80:55:85:f0:4d:ab:29:67:40:6e:3b:36:47:8a:61:
                    3e:05:f5:92:d5:09:1b:2e:71:20:99:83:cb:41:07:
                    97:0d:6f:68:77:56:38:a7:cd:d4:54:7b:59:e3:ec:
                    27:0b:bb:08:1f:3f:e5:d1:28:f9:fa:7a:bf:4d:48:
                    34:94:3f:8a:19:b8:01:8d:1b:b9:03:38:88:68:e8:
                    ba:d6:18:47:04:23:2c:57:9e:63:02:91:29:26:6f:
                    9a:7f:16:ed:6c:ea:3d:29:bf:d6:f4:5b:6f:18:5e:
                    1e:dd:40:17:f5:87:13:ca:b3:43:62:0d:e4:58:d3:
                    15:ed:05:c0:da:6d:1f:df:8f:f2:f9:32:91:b5:ae:
                    46:9b:52:b9:19:8f:ce:68:a4:69:09:b0:5f:35:99:
                    3f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:46:1B:CD:18:39:0F:8A:2A:92:E9:6C:46:97:3B:CF:69:79:2A:D8
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a1:56:8d:bf:a9:d4:b3:01:90:80:75:ba:2b:7d:91:b0:1b:
         ea:72:ba:1d:cf:2d:7d:16:8a:3d:70:6f:4d:2e:a7:50:97:ee:
         46:dc:8b:71:9c:2f:16:a7:a7:a0:9c:d7:33:7b:af:76:79:36:
         91:aa:cb:c5:4f:5d:a2:0d:5c:f5:63:9c:9f:46:24:c2:97:93:
         00:c4:23:a1:73:ca:b0:89:75:88:20:81:52:61:b8:ba:50:1d:
         1d:7a:2d:1d:8e:ea:63:35:a6:0b:6c:e1:c2:ea:59:d6:20:90:
         93:81:14:df:2d:3c:27:d1:fa:70:01:20:cb:ce:f9:07:b5:b3:
         36:66:73:b9:86:e2:f9:b3:69:1c:c9:4a:ad:ea:da:1f:0b:e7:
         29:e5:62:fb:9a:af:ac:b6:28:6a:a0:94:d7:d1:ed:53:3f:68:
         54:35:16:b4:f2:f1:71:40:75:ab:66:fe:2f:16:4f:00:90:96:
         96:22:9a:63:37:de:cc:9f:28:20:9f:a6:02:d3:b3:3f:d2:e8:
         b9:f9:5b:a8:6b:dc:3f:f5:7b:b9:db:14:4a:26:0e:be:1e:5e:
         5a:e7:c9:bb:4e:4f:b5:b5:fc:54:12:03:f2:e2:8d:1b:95:40:
         2b:81:52:8a:f7:68:d2:05:07:d2:71:40:56:d9:72:e5:65:2a:
         dc:0e:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:16:59 2026 by rpki-client