Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
File:                     ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft (raw, json)
Hash identifier:          Rw5n+jLGXNZBmc+SOL+VSZy9jUXRGowGuhmw2Cn38kA=
Subject key identifier:   44:EA:EB:68:78:96:C6:F7:55:AD:DE:0B:E9:B0:B0:86:C4:98:0E:05
Authority key identifier: 79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2
Certificate issuer:       /CN=A918A1E7/serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
Manifest number:          FA
Signing time:             Sun 15 Nov 2026 06:31:37 +0000
Manifest this update:     Sun 15 Nov 2026 06:31:37 +0000
Manifest next update:     Sun 22 Nov 2026 06:31:37 +0000
Files and hashes:         1: ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl (hash: ROtGf0LDKB1UtaoABH4YHt2YTWFx2KgFtzH5qdv6PJw=)
                          2: 06239BF2677111F0BB789073C4F9AE02.roa (hash: T3OYTu/32SVxCdgICapazIRsBCFcGsOXoETc6LRjL4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl
                          rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 06:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A1E7, serialNumber=79BA51D96BFDC313C788AEC33073C9698E5D01C2
        Validity
            Not Before: Nov 15 06:31:37 2026 GMT
            Not After : Nov 22 06:31:37 2026 GMT
        Subject: CN=6af951c9-51be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d5:30:0d:06:8b:7b:9c:63:ea:d7:24:6e:ac:
                    ee:4e:06:30:44:03:81:bf:f8:22:69:d4:c8:83:15:
                    4d:68:6b:2f:c5:4d:d7:1c:37:08:92:54:45:96:8f:
                    58:69:02:27:4b:26:fe:30:ad:e8:3e:65:e9:0b:1f:
                    1c:87:e2:cd:1c:70:cc:d8:57:c2:8e:7f:43:41:36:
                    ae:55:8c:2a:29:b4:68:ac:c8:ae:00:16:c1:23:1f:
                    4a:1e:c7:73:ce:6f:50:24:cd:65:17:b7:30:2d:81:
                    ba:c9:29:cb:41:6d:d9:b0:73:3c:44:cb:08:d3:0b:
                    10:e4:2f:d4:d7:c2:d9:ed:07:53:84:0b:02:59:21:
                    d8:c5:8e:d7:3d:32:e3:87:98:ac:80:bf:40:7b:d1:
                    69:60:77:11:aa:2c:28:ee:f6:63:41:f3:89:19:0b:
                    da:84:2a:98:b0:99:db:44:0d:00:3f:e2:ec:94:3c:
                    d8:3f:bf:61:3e:75:37:1d:3e:75:93:41:a7:da:4c:
                    61:80:24:3d:d6:78:0c:c0:94:80:44:1a:05:71:00:
                    83:61:b8:52:1c:73:4c:fd:da:7a:72:bf:f0:e0:3e:
                    2e:7c:89:9b:4f:3a:4d:3a:96:ec:1e:16:66:a1:49:
                    ba:d9:0c:18:9d:63:ca:81:72:a0:99:f9:c5:13:ee:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:EB:68:78:96:C6:F7:55:AD:DE:0B:E9:B0:B0:86:C4:98:0E:05
            X509v3 Authority Key Identifier:
                keyid:79:BA:51:D9:6B:FD:C3:13:C7:88:AE:C3:30:73:C9:69:8E:5D:01:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A1E7/9A66757E677011F093D17472C4F9AE02/ebpR2Wv9wxPHiK7DMHPJaY5dAcI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:77:1f:8e:8c:d9:96:ba:bf:c3:e4:7f:e3:fa:c5:cc:f1:ca:
         d1:68:e0:07:fa:fd:9e:45:4f:44:06:55:dd:8c:58:49:65:16:
         2b:6f:1b:c3:5f:d5:90:bd:0d:ec:57:45:ae:85:fb:8b:2a:97:
         6b:35:02:0e:2d:46:c6:28:7b:1b:d6:f0:ea:4a:87:89:1d:f8:
         55:d2:e6:86:6e:10:c0:c7:bc:12:32:60:21:88:38:25:9b:f2:
         50:74:3b:c3:56:cb:58:9e:4b:8b:08:34:1c:37:5b:8f:a2:22:
         38:56:20:35:b1:fb:80:cd:94:d3:21:31:ad:d6:11:8d:49:b9:
         69:dc:49:10:e2:a4:8f:5e:d9:6d:c1:01:dc:a4:05:f7:c5:5a:
         57:60:24:95:18:ef:f7:e7:b8:c3:b0:55:7e:9d:b9:68:b0:0f:
         13:dc:3b:38:86:a5:68:cb:04:2e:c8:17:2b:a2:8d:65:a1:78:
         08:1a:11:a6:25:4c:93:83:8f:e1:11:ce:d7:e4:23:fb:1a:c8:
         3c:bd:22:0e:a8:3a:09:53:72:fa:26:36:84:5b:ff:06:09:e1:
         08:35:01:c6:53:c0:15:65:68:f9:7a:af:36:a9:4c:b9:0c:6a:
         b0:26:7a:96:74:f1:b2:de:62:52:f4:c0:db:ad:95:30:1a:1f:
         7a:3f:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:15 2026 by rpki-client