Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File:                     EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier:          xZehttSTeRNUUGXCGt3/n5ZqmIyddGbh3LMPWd8hcu0=
Subject key identifier:   89:F2:8A:E8:14:58:41:38:C7:C4:C6:22:04:EE:95:D7:2E:A4:30:D3
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer:       /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial:       014E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number:          014B
Signing time:             Wed 15 Apr 2026 04:47:56 +0000
Manifest this update:     Wed 15 Apr 2026 04:47:55 +0000
Manifest next update:     Wed 22 Apr 2026 04:47:55 +0000
Files and hashes:         1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: Ovu3Rm+mF8hCwl6S7gVQn/VBJmx+No5MBxJUy8q34VA=)
                          2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
                          rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
        Validity
            Not Before: Apr 15 04:47:55 2026 GMT
            Not After : Apr 22 04:47:55 2026 GMT
        Subject: CN=69df187b-1a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:04:d1:34:53:9a:e3:cc:43:5f:9b:e0:85:61:
                    3f:4b:69:36:36:b0:f6:68:6e:49:2f:83:b9:1a:1c:
                    7b:a0:c5:a1:f6:03:b7:0b:75:33:ab:3c:55:56:63:
                    da:2d:7b:38:aa:3a:06:bb:70:9c:2b:14:04:3d:94:
                    c3:32:6b:91:ce:76:7e:ab:20:7a:3c:cd:49:1e:57:
                    47:3d:48:f4:a0:00:70:05:2a:3c:a5:37:44:4b:c5:
                    75:66:e0:eb:2d:1e:64:29:49:63:58:0b:6c:c1:cd:
                    1a:4f:b3:75:b6:1d:bd:58:b3:7e:a4:8d:87:9e:2c:
                    42:4a:e2:b1:36:fb:a6:b3:aa:fc:92:cc:b4:c4:ec:
                    ee:d0:7d:76:c7:65:63:4b:eb:24:80:06:44:80:3b:
                    f1:8c:f7:e9:cc:64:0e:a2:80:c8:9d:91:5f:34:bb:
                    e8:6a:f6:7e:42:fb:23:50:50:a5:05:7c:3b:55:62:
                    bb:72:37:ec:bd:81:bc:41:1a:ca:f2:a9:f1:51:e1:
                    36:2f:09:91:5c:77:e4:90:f4:60:69:10:e4:32:7d:
                    f8:e0:67:b4:17:cc:a9:d8:fa:f0:60:ec:96:7f:f7:
                    01:8b:2b:07:be:ab:b5:12:55:d5:5b:1c:b1:c1:35:
                    d6:93:a6:5b:e8:6b:05:de:65:cd:01:bf:8d:b3:91:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F2:8A:E8:14:58:41:38:C7:C4:C6:22:04:EE:95:D7:2E:A4:30:D3
            X509v3 Authority Key Identifier:
                keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cc:37:0c:5e:14:42:03:d8:3c:ff:e7:07:03:70:ec:c9:f6:
         39:ff:da:4e:f8:7e:13:09:c7:a3:81:7b:ca:5b:81:1f:f1:5b:
         05:66:de:00:8b:da:37:d9:1a:30:b7:0a:67:7f:ae:2b:06:b0:
         00:06:2f:d3:80:39:23:40:bb:87:62:60:a9:c2:23:f4:02:3c:
         d4:ef:db:be:cc:d5:78:01:23:9e:a1:7d:a5:15:6e:15:b4:21:
         d2:b6:32:e6:e7:fd:86:1b:09:23:f7:e5:4b:83:6b:83:4d:34:
         16:53:22:c6:79:a0:6a:f8:9b:e8:0b:c7:06:8a:23:7b:db:68:
         50:85:31:a1:0a:85:50:cc:17:3d:1b:76:0d:c1:d4:3f:da:0e:
         d6:d7:27:c5:cb:bf:ff:cf:5b:18:e8:38:03:61:39:12:38:df:
         83:c0:7b:b9:34:4e:f2:d2:40:40:8a:cb:34:ee:16:ef:83:a3:
         63:46:d4:94:2f:68:79:7c:02:65:dd:68:ba:a8:6c:3c:9d:f7:
         19:e3:b4:67:e2:8a:98:bc:3d:ea:15:c4:60:98:9e:a1:c8:7f:
         6d:bc:7b:d1:c3:a9:cf:d5:be:da:43:61:ea:37:d0:18:78:58:
         25:21:4c:5f:5b:3b:ea:75:eb:1d:b7:29:8a:98:b1:8d:cf:56:
         4e:8e:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:50 2026 by rpki-client