Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
File:                     eVMBxo-H8Eofn0mb3y0p84RX-9M.mft (raw, json)
Hash identifier:          miHERXXeSLgkUyjqUE1qxh0oXfVOwDvUrU4/dhMx6jk=
Subject key identifier:   14:FA:7B:63:2C:98:C2:CB:9F:6A:C5:85:DB:FA:6C:B8:63:75:2D:2B
Authority key identifier: 79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3
Certificate issuer:       /CN=A91D5749/serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
Certificate serial:       0261
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
Manifest number:          025D
Signing time:             Sun 01 Mar 2026 02:47:06 +0000
Manifest this update:     Sun 01 Mar 2026 02:47:06 +0000
Manifest next update:     Sun 08 Mar 2026 02:47:06 +0000
Files and hashes:         1: eVMBxo-H8Eofn0mb3y0p84RX-9M.crl (hash: PbDZtwKgG+23QzAo5eoJy7m/vBzmRn3nVc/sqDIP6a8=)
                          2: FA57A19A72CE11ED9E7FF20FC4F9AE02.roa (hash: mYhlImP/Bz/2pGZezVVBYy4E3xPsiLCmI0XA+oZzf70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl
                          rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5749, serialNumber=795301C68F87F04A1F9F499BDF2D29F38457FBD3
        Validity
            Not Before: Mar  1 02:47:06 2026 GMT
            Not After : Mar  8 02:47:06 2026 GMT
        Subject: CN=69a3a8aa-a672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2b:28:10:3b:6e:82:c2:73:c3:79:f3:2a:40:
                    bb:59:ea:cb:0f:3e:56:f6:03:2c:0c:9d:66:6c:43:
                    f3:3c:76:6d:a4:d8:22:2e:75:36:46:58:56:f7:97:
                    61:b1:b5:2c:f4:e1:c0:05:08:ca:df:bc:23:08:59:
                    21:7f:07:50:64:8b:0c:01:e7:33:b6:2d:a7:03:ae:
                    8f:8d:bb:33:7e:58:1d:f1:df:43:e4:bb:f7:6b:e4:
                    bb:37:c8:ba:9a:8d:51:3e:4c:4e:c5:10:e5:81:38:
                    09:2d:9a:22:a0:fe:26:75:0c:c3:d1:70:d5:1a:87:
                    63:61:fc:88:ba:bb:cc:2d:e9:63:32:63:d6:f2:d5:
                    65:e3:98:24:36:93:77:bc:ea:f7:a8:19:73:1e:ff:
                    3a:03:1b:b1:11:09:97:02:1d:03:88:02:bf:75:a7:
                    c1:b3:0f:41:30:1d:4c:5c:c2:b2:79:75:b2:b5:59:
                    1c:b9:4d:e4:90:63:85:dd:b9:8d:c4:0d:9a:45:a1:
                    9f:fc:1d:52:fd:8b:f1:fe:ed:54:c5:9f:2d:55:c3:
                    f5:f0:8f:14:22:c1:ce:51:53:f6:79:5c:8c:a5:3c:
                    f9:b1:90:6d:66:4e:cb:8f:60:84:da:b7:97:5d:cb:
                    e3:e5:ee:3a:f2:e2:fe:ef:b8:32:6a:56:e2:56:20:
                    7e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FA:7B:63:2C:98:C2:CB:9F:6A:C5:85:DB:FA:6C:B8:63:75:2D:2B
            X509v3 Authority Key Identifier:
                keyid:79:53:01:C6:8F:87:F0:4A:1F:9F:49:9B:DF:2D:29:F3:84:57:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVMBxo-H8Eofn0mb3y0p84RX-9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5749/C70EC3BA72CC11ED908F6F0FC4F9AE02/eVMBxo-H8Eofn0mb3y0p84RX-9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:07:c4:29:e5:e9:c4:9c:d3:3f:af:67:5c:c8:2f:4c:6e:12:
         4a:fc:a0:81:fe:d2:91:39:84:a1:16:cc:27:1a:73:f2:6d:cf:
         37:95:7d:4f:8f:c3:0a:64:9d:16:9b:5d:ae:4b:4c:53:fd:6e:
         34:d5:c3:a4:47:eb:c0:86:15:88:dc:e6:cc:72:6c:dd:fd:21:
         a8:92:b0:e5:3c:d6:60:47:66:00:31:a5:07:71:74:0f:5a:bb:
         c4:51:34:40:ff:a1:02:8f:fd:62:8a:7f:98:6f:34:04:ac:ec:
         d6:d2:2d:01:c8:d8:a3:96:d4:29:94:ac:8d:ba:63:85:1b:f6:
         48:b0:d6:3f:16:f1:21:2d:69:9d:36:93:bd:4a:a8:4c:3b:29:
         da:c5:bd:71:23:bb:1a:d1:7a:ab:8b:66:78:15:ec:78:79:9b:
         20:5c:2b:d2:3a:66:51:cd:3d:e8:e9:63:9c:02:17:c1:fd:ee:
         62:e1:06:ef:16:13:88:d9:1a:46:26:f3:ba:c3:0b:bf:f3:6a:
         d3:5b:f9:f8:24:94:e7:ad:aa:b4:ae:7e:d2:2b:2d:78:b1:cc:
         69:58:2d:12:34:3f:b6:36:86:e3:ac:df:1a:0d:47:f3:5b:2f:
         4f:2e:2f:ce:4c:04:b3:e2:62:82:ff:4e:b5:2a:71:54:03:be:
         8b:68:c0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:17 2026 by rpki-client