Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
File:                     eEGgmdwU4pNx5MwYVIn_riEyI0k.mft (raw, json)
Hash identifier:          h8pJGTQIu5FxjssRaXUO+iljX7ReemzIopU8d0bG2h4=
Subject key identifier:   14:A7:F4:34:23:F5:41:E5:69:0F:8E:94:54:DE:2E:45:8E:FC:86:71
Authority key identifier: 78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49
Certificate issuer:       /CN=A91F8966/serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
Certificate serial:       0A0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
Manifest number:          0A01
Signing time:             Thu 16 Apr 2026 19:44:50 +0000
Manifest this update:     Thu 16 Apr 2026 19:44:50 +0000
Manifest next update:     Thu 23 Apr 2026 19:44:50 +0000
Files and hashes:         1: eEGgmdwU4pNx5MwYVIn_riEyI0k.crl (hash: 48tNBXOS8gT9vf052BUJXZRTbmVkLzcPo4CXOx25StU=)
                          2: CA4C06CA976711EAA651F944C4F9AE02.roa (hash: HjiLuMpEKDFq4BbZHd2t+ZeOPmcjFgJgpkLo6Is6Q70=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:44:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570 (0xa0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8966, serialNumber=7841A099DC14E29371E4CC185489FFAE21322349
        Validity
            Not Before: Apr 16 19:44:50 2026 GMT
            Not After : Apr 23 19:44:50 2026 GMT
        Subject: CN=69e13c32-eb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:5e:88:22:a5:e4:57:4d:7c:9e:02:1d:ae:
                    7b:cb:9f:ce:b9:3a:cb:25:73:5b:bc:b1:d7:8a:fc:
                    22:c3:b7:7d:48:88:62:80:6d:6b:e7:93:a2:cd:b0:
                    4e:73:f6:6e:15:0f:6a:c7:b6:a7:41:0b:9d:5d:24:
                    57:df:d2:3e:bc:65:05:64:ef:a6:26:d0:69:b1:67:
                    ad:b5:24:50:64:3d:29:f5:be:7c:06:44:0b:4d:fa:
                    a2:31:b6:be:f0:71:26:36:e0:ef:68:05:7c:e9:bf:
                    d7:c7:30:5d:ce:b9:d6:d0:cb:f6:4d:07:33:76:53:
                    72:6d:c4:77:d8:64:68:59:e4:fe:f9:34:8b:28:71:
                    2b:ea:49:8e:a5:14:29:dc:52:3e:40:81:5f:18:0e:
                    7d:fa:09:3f:bf:6d:0a:a0:07:ef:78:f7:c4:6b:3b:
                    bf:c4:a2:e9:c9:12:25:44:6c:76:03:18:16:7c:8b:
                    9d:99:25:16:ee:22:5a:a2:cf:60:79:1e:ff:9f:43:
                    d2:44:d9:eb:bd:76:88:d0:40:27:a6:38:d0:58:b1:
                    76:86:92:18:d3:2e:6e:96:74:da:66:10:07:ad:03:
                    e5:c6:18:78:84:42:43:d0:93:15:3e:91:ae:7e:97:
                    6b:77:5d:ca:38:43:71:73:c4:ba:fe:ad:1e:b9:16:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A7:F4:34:23:F5:41:E5:69:0F:8E:94:54:DE:2E:45:8E:FC:86:71
            X509v3 Authority Key Identifier:
                keyid:78:41:A0:99:DC:14:E2:93:71:E4:CC:18:54:89:FF:AE:21:32:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eEGgmdwU4pNx5MwYVIn_riEyI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8966/3EF22402976611EA9EB49542C4F9AE02/eEGgmdwU4pNx5MwYVIn_riEyI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f5:c2:41:89:d6:2b:58:20:84:00:fc:08:15:d5:bf:a7:b5:
         f5:94:79:f0:f0:0a:84:ff:24:fc:ed:b5:ee:05:a0:76:3c:3b:
         41:18:75:3e:18:6c:14:20:72:a9:2c:8d:75:dc:74:65:e5:42:
         8f:81:bd:34:15:9f:51:99:ca:0c:04:ed:b7:4a:2f:7a:bd:17:
         67:da:20:9f:97:a3:41:fc:8d:04:99:ef:f7:f9:7d:53:9f:1d:
         85:9f:dc:3f:fb:1d:f2:b6:5b:70:ec:73:dc:7d:36:1b:82:d0:
         c0:c3:80:bf:cd:46:f6:07:f6:22:21:05:33:cf:b1:0a:bc:c4:
         6a:61:c9:82:9d:52:77:1b:9f:8f:2b:09:14:e0:f2:cd:34:aa:
         56:d9:16:58:a4:29:b3:89:6c:b1:f5:f5:b3:da:65:71:19:48:
         f2:02:9b:77:8d:1e:98:54:4d:69:3d:6f:04:ba:83:d2:f3:be:
         9d:9e:a0:4c:a1:25:59:0b:34:fe:18:b0:61:7b:e0:93:71:06:
         3f:c9:45:a4:f6:da:79:2e:51:92:d4:16:66:08:d2:27:28:4e:
         5a:de:99:26:1a:3b:30:af:cf:9a:e2:89:e6:ba:df:dc:13:ed:
         29:e7:f5:fa:db:98:0c:3e:77:9f:4f:87:27:3d:55:db:ec:f4:
         7c:90:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:06 2026 by rpki-client