Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
File:                     Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft (raw, json)
Hash identifier:          l3xYvBOkER6e/wSmOX6GEH8hRlgfPF2fqXkkVVzs5ug=
Subject key identifier:   30:D5:E4:0E:F8:B8:6B:30:54:BF:FB:E7:40:6D:3C:5B:5E:F1:7C:68
Authority key identifier: 12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76
Certificate issuer:       /CN=A91B778A/serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
Certificate serial:       0205
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
Manifest number:          0201
Signing time:             Sun 19 Apr 2026 02:48:04 +0000
Manifest this update:     Sun 19 Apr 2026 02:48:04 +0000
Manifest next update:     Sun 26 Apr 2026 02:48:04 +0000
Files and hashes:         1: Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl (hash: d2+0VlmAj7b99auuTWzgYjzRk21rPhKBa4+LKz+t5kU=)
                          2: A60B75F62B7B11EEA4D0FA24C4F9AE02.roa (hash: ocUuo0Pd7oEcfjFgJBHu4piz7iYa1dvhSOXGt1zva+I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl
                          rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B778A, serialNumber=12ABBE9D4E5998585981349A5FA9B75FDABC5876
        Validity
            Not Before: Apr 19 02:48:04 2026 GMT
            Not After : Apr 26 02:48:04 2026 GMT
        Subject: CN=69e44264-f118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:69:eb:80:2b:09:9b:45:d8:aa:0d:71:15:
                    d4:da:6e:9e:3b:d1:bb:9a:03:f6:57:10:d7:85:57:
                    45:3d:bf:12:b2:64:d6:e2:5a:69:13:d4:6d:62:6f:
                    47:ff:e2:ee:58:a5:ef:69:00:17:69:61:d4:33:33:
                    ec:89:85:48:00:6e:4f:4c:eb:68:94:15:ee:8d:1e:
                    69:28:e7:6f:28:a6:97:71:69:75:1c:50:6e:b4:ec:
                    75:eb:d6:29:f9:cc:98:9c:df:d6:0c:f1:64:8b:e1:
                    e2:31:8c:96:be:c5:72:b9:36:f9:aa:3e:ba:90:54:
                    c7:2d:13:d4:83:0a:6d:33:81:fd:8b:84:cd:94:af:
                    8f:cc:01:b9:73:3c:fc:b8:26:41:43:16:ab:3e:f0:
                    31:f1:48:cf:71:86:2f:66:f5:c5:da:d2:0f:77:de:
                    3e:85:03:47:9c:ac:6a:3c:14:c4:0d:d5:ba:15:6e:
                    ce:78:b3:fb:55:8b:19:f8:ff:0a:2c:3a:56:cd:e4:
                    db:e2:ea:96:8d:8e:49:ef:f7:3e:bf:92:cc:3a:ca:
                    e0:cb:3f:1d:c2:5d:41:62:30:a5:6d:44:8c:c3:f4:
                    50:54:74:00:50:47:9c:4e:75:80:e7:b9:ee:0a:72:
                    d1:bc:14:83:8d:67:65:6e:39:2d:cd:0a:69:79:12:
                    47:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D5:E4:0E:F8:B8:6B:30:54:BF:FB:E7:40:6D:3C:5B:5E:F1:7C:68
            X509v3 Authority Key Identifier:
                keyid:12:AB:BE:9D:4E:59:98:58:59:81:34:9A:5F:A9:B7:5F:DA:BC:58:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B778A/902AAE982B6F11EEA4BA8F7CC4F9AE02/Equ-nU5ZmFhZgTSaX6m3X9q8WHY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:da:2a:50:57:45:e1:3e:4f:bc:17:9a:85:ae:0a:e7:f7:df:
         03:38:b0:03:11:7d:fd:08:86:ab:1a:1e:65:c8:cd:5b:70:fb:
         da:5b:41:0a:ec:9e:b1:eb:88:0d:dc:e0:34:2c:af:c5:79:dc:
         cb:84:65:0c:2a:61:92:f0:d6:a5:e4:1f:62:37:5d:b5:16:8e:
         e2:f0:8b:da:fe:9a:08:ff:3c:07:9a:28:58:16:8d:26:6f:02:
         69:1c:2a:b0:11:37:ec:68:49:72:96:bb:67:24:a9:94:0d:ea:
         3b:a0:cf:99:6b:72:6c:21:96:c2:7f:aa:44:45:ba:ce:c1:ae:
         42:92:49:3e:a0:cf:82:9f:c6:2d:69:26:ee:7c:ba:a9:4f:01:
         a2:39:0d:84:65:6b:c2:7d:89:45:9e:b5:35:67:af:04:c7:f5:
         83:6c:d7:78:ef:ff:29:26:2d:23:be:62:91:6a:86:d0:61:09:
         f3:17:d5:0e:ca:44:5b:fa:38:5f:7b:81:00:b9:24:69:c0:25:
         a6:9c:d9:1a:41:d1:9a:07:e1:f0:7c:2a:14:e8:b9:a4:1c:a8:
         4e:9b:6d:0c:8d:aa:a4:5d:1f:fa:99:f0:de:33:13:dd:03:ce:
         bc:4b:fc:f4:91:05:ee:1c:e2:cd:94:e7:66:79:f9:e2:08:06:
         ee:87:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:21 2026 by rpki-client