Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
File:                     eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft (raw, json)
Hash identifier:          WObdLPPOeG/Ii9REPR6FESBaVkUf64p0WOSw+WJUmFc=
Subject key identifier:   84:46:18:B8:26:04:BC:DE:E7:A6:57:19:B9:9A:6F:49:D3:A5:E6:77
Authority key identifier: 79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96
Certificate issuer:       /CN=A9113A27/serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
Certificate serial:       0210
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
Manifest number:          0207
Signing time:             Sun 05 Apr 2026 02:37:53 +0000
Manifest this update:     Sun 05 Apr 2026 02:37:53 +0000
Manifest next update:     Sun 12 Apr 2026 02:37:53 +0000
Files and hashes:         1: eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl (hash: BKmZJMV/6qmu+cD0R3uC0amABL7die+QNYuuyoeu9Vo=)
                          2: C110D9D23D8611EEB7F2D04BC4F9AE02.roa (hash: IbeyiClBFUgIxZ+8ri4EuMEZ4o1xvAsdLozW8vp/rvc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl
                          rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113A27, serialNumber=792E0B3EB3604427FC848F96C734AC4D99FE7596
        Validity
            Not Before: Apr  5 02:37:53 2026 GMT
            Not After : Apr 12 02:37:53 2026 GMT
        Subject: CN=69d1cb01-e556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a1:79:8f:25:e2:2e:15:08:06:ea:5f:b3:1a:
                    30:eb:da:8b:de:3d:2b:d9:7e:f1:5c:d6:2b:e5:61:
                    ea:bc:b7:6f:79:8c:29:35:9d:68:a7:8f:71:02:29:
                    21:bf:78:9b:9c:e6:26:ce:3f:7e:cf:33:f9:ba:d8:
                    e7:01:80:b3:81:fa:df:30:8d:fa:34:4e:42:fb:6e:
                    f7:dd:d6:bb:8a:00:22:70:1e:ba:ab:e3:5d:ac:8b:
                    cf:e6:bf:d8:bf:28:69:9b:93:e7:bb:50:85:81:dc:
                    50:ee:d2:88:a9:c5:5e:c9:a3:4a:ad:63:f7:b1:4b:
                    79:a0:09:d7:79:da:2d:ae:e5:f2:2f:87:32:df:79:
                    a0:fd:ea:16:2a:3d:32:ce:bb:a2:a0:84:c6:d2:ec:
                    e9:52:47:f6:63:6e:05:d9:d8:86:89:48:e9:56:b5:
                    50:74:26:c1:1a:54:bc:00:7a:7c:a6:bd:3a:c6:e0:
                    bd:f0:3c:fd:f7:6c:a4:4b:97:7d:8d:5d:30:73:5c:
                    37:24:e8:e9:c0:5b:84:5a:56:ae:98:5e:8f:c2:37:
                    2c:db:b6:43:ff:aa:d2:62:68:91:13:e6:2b:38:6c:
                    df:17:96:fa:82:a8:a0:92:b7:6e:ba:a4:0b:f6:32:
                    53:d5:98:89:29:80:bd:82:06:a2:d4:bf:85:93:e7:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:46:18:B8:26:04:BC:DE:E7:A6:57:19:B9:9A:6F:49:D3:A5:E6:77
            X509v3 Authority Key Identifier:
                keyid:79:2E:0B:3E:B3:60:44:27:FC:84:8F:96:C7:34:AC:4D:99:FE:75:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eS4LPrNgRCf8hI-WxzSsTZn-dZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113A27/535EA64E21F711EEBB848634C4F9AE02/eS4LPrNgRCf8hI-WxzSsTZn-dZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:44:91:d7:05:fa:bc:09:27:e6:2d:3c:31:25:60:4e:ca:0d:
         82:a2:1b:1d:ab:98:b5:9a:e1:5c:37:57:f8:4a:05:77:df:57:
         fc:b3:5d:2e:24:55:2c:77:e3:15:60:e0:2c:5b:f3:c3:f1:2a:
         45:38:bc:f1:68:45:02:5d:df:28:56:94:7e:54:fd:1b:82:1d:
         f2:04:65:b1:71:4b:e0:63:84:48:52:cf:c4:c1:98:1c:99:e9:
         e4:59:a3:ea:bb:14:b6:ce:33:94:62:cc:21:f6:59:58:96:e8:
         b2:31:84:82:96:60:1a:3e:71:fb:e4:af:8d:5b:df:e6:bf:a9:
         74:16:8d:5a:af:16:07:db:70:67:3b:7f:0d:7c:15:8f:73:d7:
         48:20:da:0c:0c:86:4c:43:97:79:ef:2c:10:19:72:41:c3:12:
         8f:68:21:b5:68:db:7f:e3:8c:13:bb:bb:b3:72:3f:29:f2:e0:
         d0:35:09:ad:5e:47:c6:18:1a:90:ec:6f:e9:03:f8:47:b6:2f:
         b8:99:a5:f1:31:6a:9d:60:cc:5d:80:b7:c5:b6:43:a9:c3:3d:
         93:04:f3:18:3c:30:ef:76:b5:41:a6:a7:e7:0d:a9:24:01:ec:
         57:14:bc:85:30:ff:78:dc:b2:62:19:77:d6:3d:99:11:c8:cc:
         90:23:70:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:49 2026 by rpki-client