Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
File:                     Eb6TUALwKMF878tfClhoOZJbU0o.mft (raw, json)
Hash identifier:          Mbszof80JVuVqHrf+47GCBGgGp6Qkt+JUKGhzLShb9s=
Subject key identifier:   3A:97:59:58:80:D3:D2:53:AC:2C:5A:74:B4:02:08:14:37:43:DD:2D
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Certificate issuer:       /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial:       0541
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
Manifest number:          0521
Signing time:             Sat 04 Apr 2026 23:26:22 +0000
Manifest this update:     Sat 04 Apr 2026 23:26:21 +0000
Manifest next update:     Sat 11 Apr 2026 23:26:21 +0000
Files and hashes:         1: Eb6TUALwKMF878tfClhoOZJbU0o.crl (hash: j0jueDdGDMLfypszJHzH+Wr5kucot0IcP2Zubqc3mio=)
                          2: 95C77970B7F011F0819F626AC4F9AE02.roa (hash: H/6JljXNVLF3ZyLYlvEQptLlxaALDK1WeJa15vHt6/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
                          rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113066, serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
        Validity
            Not Before: Apr  4 23:26:21 2026 GMT
            Not After : Apr 11 23:26:21 2026 GMT
        Subject: CN=69d19e1e-4453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:fa:a4:02:65:61:5f:47:06:c1:4c:ac:36:
                    69:38:66:8f:2e:dd:a7:13:4f:74:0c:82:a1:bf:b2:
                    69:53:7c:55:e7:3a:5d:82:ee:7d:79:8c:ac:27:7d:
                    b8:c0:d7:aa:db:2d:c1:43:e8:0b:f7:16:ba:6a:75:
                    75:f0:2b:72:c2:6b:8f:75:fb:cb:40:0f:4a:fe:5f:
                    d7:2a:e7:b1:34:39:07:b5:c9:75:18:50:73:3d:b9:
                    2f:4e:24:b5:bb:c5:c3:06:88:54:58:75:8a:8c:80:
                    cb:36:0f:60:5b:0f:26:0d:6a:db:63:66:f4:09:4a:
                    73:88:03:f8:87:11:8a:81:dc:92:6e:1b:c6:ad:a9:
                    be:5f:a0:5a:93:d7:1c:48:18:b2:89:03:cc:17:73:
                    ac:05:25:28:9a:6b:4f:f0:d5:d5:fa:d1:cb:c2:c0:
                    cd:61:9b:11:4d:3f:c1:87:47:4d:1e:ca:ee:92:e7:
                    af:da:8c:f9:36:3d:5b:51:76:33:8d:f2:ec:a9:19:
                    b7:32:b0:c7:90:5c:d5:aa:1d:c6:e6:64:59:33:15:
                    5d:56:20:ac:c5:d0:01:72:81:4b:88:e6:5c:cc:3f:
                    f0:64:33:31:78:d1:fc:d6:08:27:58:89:d8:ba:0a:
                    6c:a5:73:98:bc:76:7b:df:4d:e5:84:c1:41:33:71:
                    c2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:97:59:58:80:D3:D2:53:AC:2C:5A:74:B4:02:08:14:37:43:DD:2D
            X509v3 Authority Key Identifier:
                keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:a6:0a:fe:81:01:0a:7b:20:86:43:54:3c:66:e9:f6:94:
         f9:ec:02:46:22:37:fe:3f:10:90:7c:3f:c7:79:1b:58:07:73:
         a5:3d:9d:35:79:41:f3:8f:6c:32:b0:d6:c6:04:20:67:61:6b:
         9b:e6:e0:7f:ad:17:64:ea:5c:44:82:d7:7a:37:5e:9c:ca:73:
         5b:80:19:52:87:17:e8:92:88:dd:d8:c6:1b:17:ed:d2:99:d2:
         38:ff:2f:52:60:79:da:0b:70:9b:31:01:25:a3:b8:64:9e:57:
         c8:ed:ae:42:34:6e:f1:23:3b:70:2f:03:f4:72:10:fb:20:bc:
         3b:cf:df:4c:15:30:bb:20:e9:0e:5f:c2:c6:0e:08:8e:9d:6f:
         2c:fe:54:8f:52:cb:4e:b6:0b:99:7b:f1:88:05:89:1d:f7:59:
         a3:64:09:1b:09:f7:61:37:b6:fb:ea:ca:7d:5e:6a:eb:e4:76:
         fd:13:30:8e:f8:26:57:e9:74:7d:71:af:f5:5c:1e:dc:11:e6:
         3f:64:2d:8c:6e:76:e0:95:d6:df:c1:7e:c2:46:00:d2:fd:ef:
         f0:ca:51:5f:b9:35:88:b7:6c:5b:45:2d:1a:e8:1b:f6:b5:38:
         7e:d8:4d:bf:93:89:63:4d:11:e0:8c:40:69:13:30:b8:b1:0a:
         fd:b3:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:57:26 2026 by rpki-client