Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
File:                     ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft (raw, json)
Hash identifier:          WejmJ1B4sEZSU+CCIq8wHb0z5LnlWAWgVj5W4iRlUP0=
Subject key identifier:   5B:8B:C9:80:EA:2F:C6:E2:91:31:FC:03:D2:FC:59:FE:93:5A:2C:E3
Authority key identifier: 7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F
Certificate issuer:       /CN=A919A285/serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
Certificate serial:       0919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
Manifest number:          090F
Signing time:             Thu 16 Apr 2026 20:11:44 +0000
Manifest this update:     Thu 16 Apr 2026 20:11:44 +0000
Manifest next update:     Thu 23 Apr 2026 20:11:44 +0000
Files and hashes:         1: ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl (hash: He8TpHFs7ZYitbFyoCJrOB33Sgl5ZgH2RiWIzoS+O6g=)
                          2: 1DCABC72C57811EA950A8643C4F9AE02.roa (hash: XhJImk0f3rdjl6tuslw+Eu9p0gwLpm2LdQJmPczKSfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl
                          rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A285, serialNumber=7A31D5739798B064A6007133AA3E5B9CD0EED45F
        Validity
            Not Before: Apr 16 20:11:44 2026 GMT
            Not After : Apr 23 20:11:44 2026 GMT
        Subject: CN=69e14280-57f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c6:b7:d6:a7:fa:d3:90:ba:35:ff:f8:d7:00:
                    a7:7c:0e:82:1d:4b:50:c6:97:fb:61:e7:9a:b1:39:
                    e5:54:62:02:c4:b3:98:8e:37:8a:a9:f2:ab:d2:4c:
                    e2:f6:88:0a:e2:9e:84:40:23:2b:06:6c:0e:f6:a4:
                    b1:7b:af:fd:03:29:12:6d:73:d8:50:db:c8:9f:7f:
                    8f:91:02:55:f1:b9:58:f8:67:7e:ba:c8:40:fc:42:
                    7b:94:bf:06:6a:2f:02:de:d4:51:56:fc:13:6e:2e:
                    40:74:0a:4a:32:61:28:31:9e:21:0b:0b:d8:c1:39:
                    2a:fb:e2:39:2d:df:8e:a3:d5:ab:43:65:2f:ef:c0:
                    4f:26:13:96:ad:77:c1:75:13:ec:6f:81:6c:d6:ac:
                    7c:22:93:06:0c:3e:3b:21:5d:f8:b5:83:84:6b:52:
                    36:29:7d:13:9c:11:e6:2f:ad:7a:b5:9f:ff:28:c3:
                    aa:a2:47:38:4a:43:f4:06:13:f4:c7:ad:20:78:f5:
                    00:77:73:1e:bc:d4:e3:38:b9:40:9e:81:df:43:c8:
                    bc:46:d5:30:5f:8d:de:07:e0:a6:70:fe:b0:d3:3c:
                    09:6c:19:a9:85:d2:b9:42:8a:60:7c:12:86:ab:e5:
                    5f:a5:08:82:99:79:ce:47:fb:30:70:d6:0d:55:f6:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8B:C9:80:EA:2F:C6:E2:91:31:FC:03:D2:FC:59:FE:93:5A:2C:E3
            X509v3 Authority Key Identifier:
                keyid:7A:31:D5:73:97:98:B0:64:A6:00:71:33:AA:3E:5B:9C:D0:EE:D4:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ejHVc5eYsGSmAHEzqj5bnNDu1F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A285/DD6289AAC57511EAA5581C40C4F9AE02/ejHVc5eYsGSmAHEzqj5bnNDu1F8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f6:80:63:cf:94:d3:46:45:fb:85:de:bb:1a:1a:7c:b2:2b:
         dc:6f:bf:28:8b:49:92:d3:c6:ae:bf:96:92:13:c4:87:6c:aa:
         17:6f:fa:66:73:b8:6f:0e:1a:1d:53:b9:0b:59:c3:26:5f:f6:
         0b:c8:e0:96:c9:87:c4:c0:ec:c0:e7:5d:00:a8:50:b9:e1:88:
         47:d1:2a:84:8c:76:8b:31:fa:eb:47:51:d6:ae:ca:d5:48:ec:
         59:83:e1:5b:ee:f3:2a:d0:8c:d9:68:a5:e3:7c:80:2f:ce:bb:
         c4:7c:88:5f:81:c6:37:19:65:e8:88:98:f5:e0:8a:23:87:c5:
         e4:e7:6c:2d:93:41:7c:b4:de:ce:e2:45:8d:d6:21:f7:28:c1:
         51:1f:0e:b2:74:bf:e2:a6:5e:4e:2b:1f:65:2c:4e:98:ef:74:
         f2:45:35:77:e3:d8:be:2d:f3:60:fc:12:6e:23:bd:39:9d:99:
         9b:bf:bf:8e:64:93:ec:d8:33:8a:3c:b9:4b:28:ab:89:8f:dd:
         5b:de:86:ab:5a:db:7b:eb:63:88:3e:fd:08:fc:7a:ff:01:87:
         48:61:fb:84:f8:44:ab:0d:9a:7f:a9:a3:11:f2:66:95:8b:9c:
         ef:a5:58:8e:37:f1:03:5e:d8:21:39:83:81:df:4e:c4:2a:42:
         b4:51:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:54 2026 by rpki-client