Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          PslasAjw+K4MiM5Lccdty3h7TCxfooollSbJZ7dfV64=
Subject key identifier:   BF:07:5B:58:79:E2:2D:9C:EF:D6:B5:EE:37:B6:C0:83:F2:A2:2C:EA
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          F2
Signing time:             Wed 15 Apr 2026 05:54:39 +0000
Manifest this update:     Wed 15 Apr 2026 05:54:38 +0000
Manifest next update:     Wed 22 Apr 2026 05:54:38 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: /fUS8YoQ0ZSXpMCs7cweKMa6/u5BHszOXwuM+EAj3E4=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: Apr 15 05:54:38 2026 GMT
            Not After : Apr 22 05:54:38 2026 GMT
        Subject: CN=69df281f-8b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:db:a0:60:84:d5:55:c9:f1:78:d9:46:de:1b:
                    46:64:c0:98:76:6f:07:91:0d:9b:ee:8a:e3:8a:cd:
                    30:1d:7f:0f:31:3b:40:84:b1:63:9a:3c:2b:bd:15:
                    d2:93:2a:f0:d9:6b:5b:c7:43:7f:fe:92:f1:f0:e7:
                    25:7c:a1:12:1a:1e:31:65:40:80:42:c7:b8:fd:e6:
                    22:d7:3e:4d:10:a3:9c:72:a8:52:b6:79:d6:44:8c:
                    b9:85:b8:a2:d9:7d:3b:4b:50:88:35:06:ed:22:2e:
                    05:a0:0c:46:05:79:8f:6a:45:4a:60:35:05:08:88:
                    92:79:9f:b9:3a:62:e2:d9:85:8b:88:d3:27:be:2b:
                    ed:6d:59:05:22:60:ac:4f:0b:44:0c:10:4b:a7:85:
                    d5:84:0b:cf:a7:4c:44:f8:a0:91:3e:ce:7d:de:c9:
                    a0:cd:29:d7:4f:43:a0:a4:21:9e:6b:ef:12:e6:c0:
                    88:2d:d0:0b:cb:17:88:45:ae:f1:c0:b0:0c:8a:3d:
                    1e:38:4c:52:8d:5c:4a:5b:39:8d:b9:15:c6:e4:70:
                    75:0c:56:e9:24:51:cf:7d:0f:4a:19:86:cc:aa:a9:
                    cb:5c:d2:2a:f2:9a:96:94:8c:99:23:f2:f7:28:43:
                    ab:bd:ea:f2:c7:94:ed:a4:b3:5b:a4:00:98:17:bc:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:5B:58:79:E2:2D:9C:EF:D6:B5:EE:37:B6:C0:83:F2:A2:2C:EA
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d6:b5:3d:c0:8a:4d:00:35:2d:cb:20:5e:1e:63:e0:97:cf:
         f7:4a:94:1b:ad:f3:53:c6:86:98:7b:99:4e:fa:b9:d6:c3:3a:
         d9:6e:f6:47:43:8c:87:a4:71:f1:48:e0:fa:f3:e0:50:20:8c:
         86:14:ee:8d:f4:dc:f3:cf:bf:15:63:c7:a8:41:81:fd:0a:1a:
         b6:26:e1:55:d8:62:f0:8a:3a:cc:73:2d:4c:b3:0f:11:00:2f:
         da:6e:42:6e:11:aa:25:9d:fc:12:04:02:2e:8b:22:47:b4:45:
         81:2d:35:ce:9f:47:1c:c6:2b:d3:48:fd:43:31:e2:8a:84:2a:
         56:1c:33:e2:b0:97:8d:b2:6f:77:92:b1:0a:fc:28:2b:7d:8f:
         9a:bf:ab:77:c2:70:9d:a2:be:96:78:ae:d2:60:8c:d5:3c:49:
         b4:86:6b:07:2b:6a:bb:4e:d8:42:34:15:66:80:92:3e:a3:d6:
         94:40:d4:74:63:51:1b:36:b5:05:64:00:52:aa:60:a4:fc:f1:
         92:ec:0c:58:4e:d5:56:54:a1:83:dd:52:ce:8c:7b:98:ed:22:
         7d:a3:ec:6e:e2:49:89:0e:8e:6c:9a:cb:3c:00:15:6b:6a:c8:
         e4:1c:bd:73:20:f2:d5:22:10:dc:8b:18:70:e3:95:87:74:84:
         28:d8:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:05 2026 by rpki-client