Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
File:                     EawzZ40YMzz-vUmJK1aJnifqY0g.mft (raw, json)
Hash identifier:          qnr6uxSfewUAkeCiVz4dv8yacHUoB0SYXhfTLqcrSpA=
Subject key identifier:   0C:91:3D:EE:B7:85:27:92:B0:56:91:B3:53:B3:0C:A9:3E:7A:F9:24
Authority key identifier: 11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48
Certificate issuer:       /CN=A919DA26/serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
Certificate serial:       0254
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
Manifest number:          024E
Signing time:             Mon 02 Mar 2026 01:14:34 +0000
Manifest this update:     Mon 02 Mar 2026 01:14:32 +0000
Manifest next update:     Mon 09 Mar 2026 01:14:32 +0000
Files and hashes:         1: EawzZ40YMzz-vUmJK1aJnifqY0g.crl (hash: MDhLJ9wh4EG6hTC754/NrdoJvLpopM33CtjzOnLkvdo=)
                          2: A7119C2E8FEE11ED83F3C543C4F9AE02.roa (hash: FvyHMarOz25InZt6YctOwt9XRbwIcy8gaQ8eogmzCSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl
                          rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 596 (0x254)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DA26, serialNumber=11AC33678D18333CFEBD49892B56899E27EA6348
        Validity
            Not Before: Mar  2 01:14:32 2026 GMT
            Not After : Mar  9 01:14:32 2026 GMT
        Subject: CN=69a4e479-0084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:50:01:a0:b3:41:93:5a:4a:c8:6e:b0:de:3c:
                    54:9a:7d:a5:4f:53:5f:07:9e:85:da:2e:4c:b3:61:
                    a7:73:3f:f1:e0:0c:c3:3c:0b:9d:7b:48:06:ee:2c:
                    6d:e5:2c:22:50:be:5f:cd:e8:02:8e:21:8c:c1:32:
                    e5:31:cb:d2:f1:4f:46:7c:e1:4a:50:f1:09:cd:60:
                    af:d7:e4:19:8e:33:e5:5a:f8:ff:4a:98:9e:4f:4f:
                    eb:63:f1:f7:3d:9d:02:15:62:a6:9e:4c:6c:32:4e:
                    5e:de:b6:76:18:78:f7:e5:e3:5c:9a:fc:ec:03:00:
                    a0:fc:c5:5a:15:5d:c7:89:20:74:9d:88:2e:fa:5b:
                    7e:68:1e:c1:97:99:98:8b:fd:ca:67:fe:6e:c8:f5:
                    cf:26:f5:28:b9:77:9a:53:7f:45:8e:20:a7:57:97:
                    b9:ea:c1:ad:aa:76:e1:da:0b:24:c6:42:8b:60:5d:
                    2b:71:6c:6c:4e:1a:5c:3e:3f:30:68:d9:13:6f:a0:
                    d6:46:0f:01:01:1e:71:82:15:7a:b2:72:f6:23:8d:
                    a9:54:2a:af:10:63:4e:68:90:2b:3e:06:29:6c:1c:
                    b0:c6:fa:62:d1:19:ec:d1:a0:fb:1d:2d:0b:1c:35:
                    b1:11:95:0c:05:a7:a5:4a:23:d9:55:f8:a0:e7:27:
                    d2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:3D:EE:B7:85:27:92:B0:56:91:B3:53:B3:0C:A9:3E:7A:F9:24
            X509v3 Authority Key Identifier:
                keyid:11:AC:33:67:8D:18:33:3C:FE:BD:49:89:2B:56:89:9E:27:EA:63:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EawzZ40YMzz-vUmJK1aJnifqY0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DA26/9B0720A48FEC11EDB901A743C4F9AE02/EawzZ40YMzz-vUmJK1aJnifqY0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:2c:f3:c7:14:8c:c2:c0:d6:bc:38:22:47:0e:d7:70:80:
         51:fe:f8:cf:b2:8a:26:b6:d7:7b:ac:ab:45:12:48:07:b5:62:
         6e:84:b5:60:52:82:29:07:58:88:e9:c2:dc:fa:ce:74:2c:f9:
         50:19:13:38:cf:e7:ea:3e:b3:c0:a2:db:94:7a:d0:e1:14:0d:
         ea:56:30:de:b9:9f:44:0d:3c:05:49:f3:78:fa:83:ed:dc:9b:
         04:42:b4:31:89:4f:20:29:7a:4a:24:e1:0d:fb:48:1e:3d:c3:
         7f:1b:8a:88:aa:9d:8a:ff:1d:85:a8:52:ba:a3:66:b9:fc:b3:
         e9:3f:ed:a9:70:9e:fc:ae:73:76:10:6e:46:04:d4:1c:63:f3:
         a1:f4:3c:19:42:57:f2:b4:c7:72:00:0f:91:75:8d:dc:da:54:
         14:6f:3b:40:14:39:d9:9c:cf:eb:c0:6c:0c:e4:79:37:06:2b:
         7b:7a:af:29:bd:e7:9e:80:13:b3:a2:b3:08:47:0f:56:fa:2b:
         36:f0:00:b7:6b:45:36:ff:54:fd:8b:fa:90:61:42:a5:e1:64:
         c2:56:ab:8c:c2:ca:dd:e3:06:98:78:1a:0c:3d:dd:64:a7:4a:
         5c:28:9a:0f:15:45:40:33:52:e2:d1:1b:4e:15:fb:d0:f6:81:
         29:cd:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:17:25 2026 by rpki-client