Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          hYL9D3U9d3qAzx9lJZb6DcKNph5QKkxL/LymSE7Beww=
Subject key identifier:   C8:B0:69:F0:F5:3E:09:4B:4B:98:76:D8:4B:5E:73:6A:E0:D3:E8:49
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          75
Signing time:             Sun 01 Mar 2026 09:13:10 +0000
Manifest this update:     Sun 01 Mar 2026 09:13:09 +0000
Manifest next update:     Sun 08 Mar 2026 09:13:09 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: C+4nvarpShVD9a0vEJ2Em9ihg8SN9idJXFbVFP+2gUQ=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: ZEiyTfU7RbfvPc28RELNIE+Hy2mvvU85jmuWJWVYc2Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Mar  1 09:13:09 2026 GMT
            Not After : Mar  8 09:13:09 2026 GMT
        Subject: CN=69a40325-437e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:30:b8:79:a4:36:ce:24:de:b3:a3:db:95:3f:
                    4e:dd:6a:be:83:5e:0c:ed:f4:95:fa:de:a8:7e:32:
                    76:a3:e4:fc:05:5c:d3:f8:b5:2a:3b:5b:3f:5b:6e:
                    bc:72:43:9e:91:03:48:c5:42:e3:e1:64:9d:57:20:
                    b0:1b:a6:0b:67:4f:6b:83:d5:3b:db:bc:92:76:be:
                    97:03:bf:dd:2e:40:02:a5:85:2f:3a:7d:6a:78:98:
                    70:58:e8:bb:8c:04:bb:24:fc:82:18:74:b9:fb:31:
                    91:a8:22:c3:9e:ae:ec:19:45:6f:f6:c4:81:91:e1:
                    d9:67:f9:8c:99:37:c0:cd:70:c5:24:09:e6:ad:87:
                    ef:eb:d8:51:18:2c:9a:d5:07:30:a6:72:fa:c8:e4:
                    a6:7d:30:fc:20:7e:54:f8:4f:94:20:ef:05:06:30:
                    a8:5a:6d:ad:ee:f9:e2:d2:ae:92:e6:ce:3c:2b:23:
                    f0:35:3b:ad:24:7d:c1:06:e8:76:cf:1b:a6:f6:88:
                    c9:78:b3:25:71:d6:ef:bf:c3:fe:68:0e:39:a8:42:
                    f8:67:4a:a3:74:e4:cb:04:c4:f2:ab:ab:7b:be:c5:
                    53:12:bc:a4:0e:d0:9d:9c:df:1d:85:f8:75:73:8e:
                    24:0a:1b:61:22:76:b6:62:6d:53:a9:92:d5:bb:38:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B0:69:F0:F5:3E:09:4B:4B:98:76:D8:4B:5E:73:6A:E0:D3:E8:49
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:7a:2e:44:a6:63:a3:8e:5d:c5:cd:19:8f:2b:c5:82:07:
         25:1c:bd:98:ee:43:dd:ab:e9:39:a7:14:f5:c0:22:dc:94:7a:
         37:01:15:6e:e5:c4:29:5c:1f:df:04:28:c0:b0:5a:b0:03:de:
         cf:21:38:70:85:e6:01:a2:e9:1e:dd:8a:37:d9:23:b3:1e:36:
         ee:eb:bd:a9:a5:f4:22:65:13:6f:4d:0c:cf:7f:87:81:d8:50:
         76:12:7c:57:a5:7e:f0:d1:2c:f0:37:8a:34:ff:b5:a6:32:23:
         de:4d:08:ac:fe:91:84:50:0c:33:92:26:94:f6:af:68:a5:7b:
         13:06:69:e1:ee:0d:c3:28:31:5f:76:02:b5:bb:8e:24:37:45:
         e7:ef:9b:a6:36:24:39:a0:e1:3d:d8:a0:a3:39:db:27:3f:3e:
         80:82:10:18:c3:a5:4f:11:17:1a:0b:83:76:b5:f9:50:57:82:
         0c:2d:77:2e:a1:7a:42:62:a4:64:4b:6b:93:29:1d:d4:c2:bc:
         f5:b2:53:49:a1:84:a2:4e:9f:09:0c:65:e2:78:89:ad:2e:f8:
         25:a2:d8:0a:59:9d:87:6b:d1:a6:03:c6:9c:0c:ef:9d:24:84:
         2c:39:29:87:5f:d8:ca:8d:8b:98:d6:e8:bd:bd:d8:88:c4:57:
         3d:3a:6d:ab
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy
RUJFNDJDODAeFw0yNjAzMDEwOTEzMDlaFw0yNjAzMDgwOTEzMDlaMBgxFjAUBgNV
BAMTDTY5YTQwMzI1LTQzN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIMLh5pDbOJN6zo9uVP07dar6DXgzt9JX63qh+Mnaj5PwFXNP4tSo7Wz9bbrxy
Q56RA0jFQuPhZJ1XILAbpgtnT2uD1TvbvJJ2vpcDv90uQAKlhS86fWp4mHBY6LuM
BLsk/IIYdLn7MZGoIsOeruwZRW/2xIGR4dln+YyZN8DNcMUkCeath+/r2FEYLJrV
BzCmcvrI5KZ9MPwgflT4T5Qg7wUGMKhaba3u+eLSrpLmzjwrI/A1O60kfcEG6HbP
G6b2iMl4syVx1u+/w/5oDjmoQvhnSqN05MsExPKrq3u+xVMSvKQO0J2c3x2F+HVz
jiQKG2EidrZibVOpktW7OHM9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyLBp8PU+
CUtLmHbYS15zauDT6EkwHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky
RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3
RDVCLzc5ODMzODVBNjkyRTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJ
cXhmUmFJbkVOVUM2LVFzZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBSzHouRKZjo45dxc0ZjyvFggclHL2Y7kPdq+k5pxT1wCLclHo3ARVu5cQpXB/f
BCjAsFqwA97PIThwheYBouke3Yo32SOzHjbu672ppfQiZRNvTQzPf4eB2FB2EnxX
pX7w0SzwN4o0/7WmMiPeTQis/pGEUAwzkiaU9q9opXsTBmnh7g3DKDFfdgK1u44k
N0Xn75umNiQ5oOE92KCjOdsnPz6AghAYw6VPERcaC4N2tflQV4IMLXcuoXpCYqRk
S2uTKR3Uwrz1slNJoYSiTp8JDGXieImtLvglotgKWZ2Ha9GmA8acDO+dJIQsOSmH
X9jKjYuY1ui9vdiIxFc9Om2r
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:39 2026 by rpki-client