Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
File:                     EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft (raw, json)
Hash identifier:          pSjhAILdhekPq92FeGkic0JJDKilUfmn1S2Zmu0cG2c=
Subject key identifier:   78:65:E9:52:99:3B:FD:2B:2D:4D:FD:8D:04:03:EF:CE:21:EA:EA:CF
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       0738
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
Manifest number:          0728
Signing time:             Fri 12 Jun 2026 21:54:19 +0000
Manifest this update:     Fri 12 Jun 2026 21:54:18 +0000
Manifest next update:     Fri 19 Jun 2026 21:54:18 +0000
Files and hashes:         1: EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl (hash: +wUgrboQXDDWHtRUVCGFpeYOIqirddO33TBtf5w3wv8=)
                          2: 6BA11A56807911EBA6F1A955C4F9AE02.roa (hash: K8TnfaIsOICTY567FCqDzVnaqT1APmkcKZFRRplgeZI=)
                          3: 6C46B54C807911EBA6F1A955C4F9AE02.roa (hash: pkrDM++jJmRWRRPlGhOoS7tmYdWnk1WVhEsoieFqvrQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Jun 12 21:54:18 2026 GMT
            Not After : Jun 19 21:54:18 2026 GMT
        Subject: CN=6a2c800b-16aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:7e:52:5b:48:38:a1:b8:6d:96:9a:00:25:
                    59:d2:30:ec:61:2e:48:c0:f3:96:b9:46:64:ca:df:
                    41:f3:c7:90:69:ea:1c:63:08:5b:4c:4b:9e:98:6f:
                    6d:92:e7:93:e8:44:f5:46:1d:bb:13:b0:f0:1f:a9:
                    b3:e8:3d:6e:08:ae:61:93:1d:5e:9a:02:45:4a:6d:
                    1a:3f:dd:e3:0b:70:53:25:72:b3:1f:92:cc:2d:b8:
                    74:99:be:07:51:5f:cb:9c:57:31:fb:c2:b5:a7:ea:
                    14:87:44:08:27:98:28:ec:69:6c:21:f1:6c:33:69:
                    cd:9c:70:0b:48:be:7c:c4:8f:f8:0d:d8:be:3b:5e:
                    db:b3:10:a5:bc:f1:39:e9:ce:0c:c5:a6:34:42:7f:
                    17:ad:2e:42:c3:e7:8a:8a:7a:2d:4c:30:12:54:3c:
                    f6:44:48:48:aa:8b:b9:2a:11:67:cb:d7:03:a3:04:
                    47:19:1c:84:be:aa:15:cf:9f:4b:ff:47:71:5c:9e:
                    ef:19:9f:6d:50:7c:f4:50:32:0e:fb:d7:51:a9:92:
                    17:fc:3a:3d:95:00:43:3b:c1:1a:60:85:06:42:ea:
                    77:81:fc:09:46:3f:bd:87:c6:8b:24:ac:cf:f6:34:
                    d1:80:a7:d5:c3:af:dc:ae:94:32:1d:f7:a1:d9:3e:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:65:E9:52:99:3B:FD:2B:2D:4D:FD:8D:04:03:EF:CE:21:EA:EA:CF
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1b:7f:e0:61:85:64:fe:e2:4c:bf:25:6e:49:9f:aa:92:5a:
         d3:db:b3:91:18:b4:5a:fd:b1:2d:3a:95:ad:9f:80:79:42:bb:
         2a:db:d1:1a:de:45:44:b3:9a:09:36:45:eb:dc:72:0c:53:73:
         64:cd:df:87:29:ed:1d:0b:c1:22:29:67:b6:37:b4:7e:86:d7:
         b9:c4:e8:f3:e7:24:4c:31:00:c3:8f:5b:94:8e:c9:a7:f8:8c:
         08:7d:b9:4d:c5:28:e2:36:5c:c1:5a:82:1a:2d:8a:c4:11:c8:
         a9:a6:ea:47:4f:2e:4b:a1:b7:00:b1:80:df:79:9b:02:34:e1:
         4a:cc:38:ce:c4:ab:d1:5c:92:10:a3:1c:71:80:40:7f:0c:f9:
         b5:98:78:cb:53:3f:49:85:b5:68:b2:96:d8:7b:46:b9:22:87:
         26:f2:bb:ad:c0:6a:9d:f6:96:76:df:42:b6:94:9b:68:ba:7a:
         2e:4c:54:cb:5d:79:20:9e:57:81:73:82:1c:1c:fa:bd:f4:ae:
         ec:d1:5a:a2:ef:0d:39:5d:88:6d:97:19:ab:8d:b9:16:15:c3:
         0d:9e:8f:b1:be:47:e5:57:c9:53:86:e6:05:15:f3:70:21:e1:
         e8:d7:23:e7:fb:40:30:38:e1:b0:ad:86:fe:8d:38:64:d0:d7:
         ad:33:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:46:07 2026 by rpki-client