Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File:                     EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier:          ZMV6oB7u9HSAEazoNrL3lJEoOpXbhHE4ACzVca3+WBE=
Subject key identifier:   85:65:B1:5B:70:68:B3:58:3D:AF:D0:67:34:C3:8C:BF:07:BD:BE:BE
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer:       /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number:          0188
Signing time:             Fri 17 Apr 2026 04:12:32 +0000
Manifest this update:     Fri 17 Apr 2026 04:12:32 +0000
Manifest next update:     Fri 24 Apr 2026 04:12:32 +0000
Files and hashes:         1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: 31qQRm0hkxEgcdxUgWC3zROWBoxZH/OUlOJDg5MSeoE=)
                          2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: qHKPAO+iCN/5xje+tGrEHy5PZ4Gr8KsPsnqdqu/3QUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
                          rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:12:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
        Validity
            Not Before: Apr 17 04:12:32 2026 GMT
            Not After : Apr 24 04:12:32 2026 GMT
        Subject: CN=69e1b330-3040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:68:bf:c2:fc:14:3f:03:b2:91:f3:da:e8:
                    da:53:bd:dc:81:b3:5f:8d:28:bd:46:6f:fb:1e:a1:
                    92:ae:28:d6:cd:4d:60:5f:a5:85:95:05:25:b5:ee:
                    a4:7f:81:a5:a8:6c:13:16:8a:c1:21:45:fd:d5:0a:
                    d6:7d:58:3d:08:57:9b:1c:be:0e:ff:ed:3b:9d:e9:
                    71:66:30:6c:1f:b0:7d:cc:0d:5a:55:a1:9b:3f:e3:
                    cc:74:81:84:19:e4:03:6d:4b:a0:39:c2:e5:7d:7d:
                    0f:ad:e2:d8:84:82:52:68:c0:18:c6:5f:42:ec:b2:
                    36:e4:56:4d:ba:e0:ee:53:6f:2f:52:9d:4b:d8:69:
                    e3:a7:0e:dd:29:d8:70:ce:63:05:58:7e:25:56:dd:
                    fa:b5:8a:82:6c:6c:2b:47:2e:84:a9:3a:ba:f3:db:
                    73:05:7a:8e:8b:f2:81:3d:19:31:d1:cf:4d:fd:33:
                    2b:f7:33:d6:34:91:7d:13:d2:7b:23:55:cb:ad:22:
                    f4:4d:5f:5e:47:c4:aa:6a:e4:ee:d2:b7:92:1c:b3:
                    ea:dd:f9:3b:98:ff:c3:c4:68:9a:e3:10:75:3f:b6:
                    e5:36:de:0a:53:45:c5:05:b7:fa:fc:d4:8e:bc:1e:
                    5b:97:48:d0:bd:95:9f:75:eb:5f:3e:af:6e:e1:6d:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:65:B1:5B:70:68:B3:58:3D:AF:D0:67:34:C3:8C:BF:07:BD:BE:BE
            X509v3 Authority Key Identifier:
                keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:78:33:b7:80:37:ac:68:fb:41:a9:34:30:f3:b5:5b:79:57:
         8d:4e:e6:3a:46:09:60:86:b5:3e:8d:f0:ba:3e:45:ee:fb:50:
         01:1b:97:9d:f0:39:19:9c:20:d5:e5:1c:93:52:c6:bf:61:09:
         61:3b:0e:4a:ab:bf:f0:13:1c:ec:83:c0:6e:51:ae:ee:73:be:
         02:f4:ac:34:a3:9a:8c:af:26:71:37:1b:db:da:69:1c:c5:73:
         13:af:69:d7:8a:d7:42:be:f5:46:9e:07:f4:fc:03:3d:57:2a:
         7b:0a:a3:ff:9d:ca:ef:1a:e1:0d:16:42:ca:56:e6:93:af:8c:
         f6:bc:0c:20:76:8b:b0:4e:ea:20:49:48:be:d4:64:fc:8c:bf:
         94:8d:75:16:ce:72:f1:f2:57:a3:34:b6:6f:38:16:b0:ff:7c:
         d4:6a:11:52:a0:b4:1c:cc:c6:f0:c8:93:70:be:0a:83:b8:fe:
         63:6b:80:55:ba:f5:d8:80:df:96:8b:18:11:9a:ff:25:e1:0f:
         67:57:82:6d:98:4f:a2:18:a8:60:c5:52:5b:bb:89:f1:a4:c0:
         90:82:bc:0f:c9:63:0b:ab:3b:ae:e4:12:29:61:87:fe:8f:45:
         fd:58:ee:17:8f:c4:39:0b:50:1a:43:c8:53:c6:02:cf:91:b3:
         5d:b0:71:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:18 2026 by rpki-client