Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File:                     EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier:          Dxki5GT4s7+4VIaEWwsDjs0b0kSTM7O34cF/IXFdOhI=
Subject key identifier:   17:E8:C0:EF:41:84:DA:2E:03:58:88:49:D6:9A:D5:54:4F:23:52:81
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0EE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number:          0EDE
Signing time:             Sat 28 Feb 2026 17:45:06 +0000
Manifest this update:     Sat 28 Feb 2026 17:45:06 +0000
Manifest next update:     Sat 07 Mar 2026 17:45:06 +0000
Files and hashes:         1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: mALZnEbfvOVZg6NcE7iVj5t4hbUeQrW37ODwqB5c8yM=)
                          2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 0mTstOtlN/36Gmv0U1vXBpu9wAUBHuJ7+PKxStc1hKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 17:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3816 (0xee8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Feb 28 17:45:06 2026 GMT
            Not After : Mar  7 17:45:06 2026 GMT
        Subject: CN=69a329a2-42a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:7c:f6:fb:2e:08:a2:8c:04:05:16:ae:98:
                    26:b9:94:2e:a1:c3:c7:e9:df:57:fd:17:5e:e1:a2:
                    8e:f1:3d:36:86:4b:f1:6f:72:66:c8:89:d1:41:21:
                    9f:49:0a:f2:8f:10:90:7f:71:c8:6b:cf:50:6f:a3:
                    30:53:a7:9a:25:76:ab:ef:ee:bf:5b:df:af:6d:4e:
                    12:34:d5:1c:e2:29:4f:f9:7d:3f:dd:9b:f9:ea:1a:
                    b1:6c:34:6d:41:ce:2f:a6:3a:2d:ce:5d:43:5f:43:
                    8e:e1:af:95:d9:4e:34:95:d9:fe:8e:73:c3:82:14:
                    31:0f:67:8e:de:0a:61:b4:8b:b7:2f:e0:c0:f3:8e:
                    42:b4:14:c7:94:fb:2d:08:a3:01:48:bb:4b:ad:02:
                    08:e6:ba:93:a2:67:92:b6:47:84:a6:bf:f6:3f:df:
                    07:19:7e:7b:d2:bf:94:3b:0f:a4:58:a1:02:3d:21:
                    e4:17:0a:b2:47:2e:00:12:c4:92:6e:3e:95:4b:40:
                    cb:4f:3f:8e:f0:6f:b0:d3:e9:f5:72:40:7b:77:7e:
                    c5:31:ec:5b:39:e7:a8:fa:08:31:eb:3c:c1:e1:4c:
                    19:cb:f1:2d:d6:7e:fb:1f:45:63:d9:7f:40:62:3f:
                    b7:d0:30:c9:85:9e:6e:30:68:02:77:5d:6a:5b:bc:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E8:C0:EF:41:84:DA:2E:03:58:88:49:D6:9A:D5:54:4F:23:52:81
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:76:8d:65:9d:52:fd:aa:e1:ab:a7:0d:eb:47:d5:4b:f2:40:
         15:05:49:4b:40:3c:e6:35:fc:bf:19:49:c3:3f:d6:08:3e:42:
         00:5f:71:b4:c1:ea:1b:78:4b:4f:4c:fd:02:cb:d6:6f:9b:1e:
         5e:c2:d0:6d:0f:d7:f7:92:1e:2f:5e:63:f4:5a:35:7f:fc:e5:
         06:c9:50:74:6a:64:14:29:58:a9:d9:c3:c0:8c:97:af:f1:90:
         08:2e:70:44:2c:12:f5:77:0d:4a:c9:1a:a6:13:19:80:0f:08:
         7c:42:bd:d8:32:7f:fc:b2:8d:b9:fb:d3:21:23:d3:db:dc:b6:
         d9:fe:52:1e:e5:85:65:a2:a8:39:1f:85:41:95:6c:0c:bb:96:
         f3:e4:db:f8:1b:9f:0a:4c:46:d0:81:b8:be:d4:b4:68:fa:8a:
         fc:ef:0a:53:0b:24:76:95:1f:f6:41:55:ab:c6:13:b1:fa:6b:
         ff:13:1f:f3:ea:8a:d6:e3:06:0b:aa:cf:28:fe:00:7f:4d:82:
         96:4c:35:26:58:0f:33:11:56:b8:dd:8c:18:76:20:e9:ed:8c:
         a2:3d:f5:75:2d:34:65:98:03:a2:c9:c4:c8:44:d2:4a:70:93:
         52:6b:a2:64:8a:52:ee:cd:9d:7d:06:ab:31:d8:4e:7a:ae:d4:
         37:89:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:14:21 2026 by rpki-client