Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          G/bCKxC1T/jeICzG12JfcLuZLt6XSo1vsuTxJ2s44Bo=
Subject key identifier:   28:1D:5F:C8:D1:A2:FA:E6:ED:16:14:77:24:87:59:66:62:61:A6:D2
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          DB
Signing time:             Sun 01 Mar 2026 07:46:24 +0000
Manifest this update:     Sun 01 Mar 2026 07:46:23 +0000
Manifest next update:     Sun 08 Mar 2026 07:46:23 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: DCaBSWRhuPYgizNc3hHecj95e/kYu/tt0of2s0xXFYQ=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: Mar  1 07:46:23 2026 GMT
            Not After : Mar  8 07:46:23 2026 GMT
        Subject: CN=69a3eed0-1940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0f:3f:fc:33:4d:c2:0b:d2:56:b6:13:3b:e4:
                    fd:e1:d9:23:0b:a3:17:67:f8:f5:50:77:c1:ac:37:
                    d3:10:a7:09:5d:ed:65:c0:f2:62:42:5c:c3:03:5a:
                    6b:de:b0:57:81:de:31:1c:bd:36:32:fb:b3:0f:06:
                    73:fe:57:7d:36:e5:47:7f:5a:ed:83:3c:84:ef:db:
                    bf:15:7f:62:ef:49:64:c1:ed:66:e2:48:a0:65:4e:
                    56:38:2e:b1:d6:d9:e0:85:33:e1:3f:68:b8:49:b5:
                    20:d4:08:43:87:0a:4c:e6:25:7e:2a:7a:37:b9:a8:
                    76:e2:e9:7b:f0:67:5a:ca:74:71:7b:23:e3:db:00:
                    e5:67:ee:15:70:c6:32:86:b0:6b:9a:cc:10:37:ce:
                    b4:ef:d1:80:bb:d5:8f:c8:74:2b:10:fe:91:38:2a:
                    3b:e4:e8:d3:15:19:07:cf:18:ac:65:bc:58:69:9b:
                    81:4e:68:ac:bb:e6:d2:09:a2:79:e5:2e:ff:15:a1:
                    50:7c:38:b6:cf:2f:1f:b1:c8:1f:46:5b:77:7d:4b:
                    60:43:8b:92:de:68:8b:91:76:94:37:07:cd:bf:8b:
                    1e:a2:1b:a0:2f:5b:4a:77:da:d7:3d:90:93:c4:31:
                    43:04:11:02:a4:9e:10:d0:5d:c3:65:ef:05:0d:ae:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1D:5F:C8:D1:A2:FA:E6:ED:16:14:77:24:87:59:66:62:61:A6:D2
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:02:22:75:e6:e2:81:21:6a:94:9b:17:4f:2e:cc:d1:5c:14:
         f0:8a:34:3c:07:13:60:b0:9e:31:c9:a5:cd:23:59:c6:de:0b:
         ec:f5:fb:47:d6:83:e6:b2:34:33:6c:f1:11:5a:c9:91:63:ea:
         47:c8:fe:2a:39:28:14:05:ea:af:96:e5:20:be:52:0e:d3:f2:
         04:44:9d:39:34:4e:83:95:af:7d:e6:12:32:3d:38:69:8e:f4:
         6c:89:48:68:f0:3e:ff:eb:1f:a6:3b:9a:6d:9f:b8:e4:17:65:
         2f:3d:fc:ff:68:4f:04:8d:63:16:2d:a4:03:a0:ec:a5:eb:a8:
         a5:72:ae:ca:7f:be:c5:ca:4b:ab:19:0c:0c:3e:cc:17:06:03:
         5d:b1:a1:69:3c:a6:c8:c7:34:eb:f9:a5:81:2e:06:1d:fd:2f:
         65:61:ff:74:bf:be:1c:f0:a9:b6:a7:08:55:6a:1c:b8:4a:ff:
         b7:13:f0:09:b7:6b:cc:7f:ed:33:1d:01:26:f9:3b:90:99:70:
         2e:ec:cc:3d:9b:69:cf:15:78:3b:b1:6c:8d:2c:74:28:e9:79:
         a9:4e:40:c2:28:35:78:06:68:95:a3:68:d3:d4:48:64:b6:25:
         44:bc:7a:00:71:44:d1:c0:94:f4:1a:46:bb:23:f0:26:79:0c:
         f4:a1:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:02 2026 by rpki-client