Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
File:                     EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json)
Hash identifier:          tCFdmdrFWopBGWLgjgLTT0zxDr7zkvJR02FrdIILgB4=
Subject key identifier:   2C:CB:B5:32:9A:62:DE:6E:CB:46:A3:7F:D2:F8:07:34:D9:03:10:0E
Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15
Certificate issuer:       /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
Manifest number:          01AC
Signing time:             Sun 05 Apr 2026 03:33:33 +0000
Manifest this update:     Sun 05 Apr 2026 03:33:33 +0000
Manifest next update:     Sun 12 Apr 2026 03:33:33 +0000
Files and hashes:         1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: a4F/HYHiq6n6km93JvtO6nYm7n+y3KVEvTe/TO+MgYo=)
                          2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: c08Yo3FkbztumTfTjD3wGOX0rDDCbgj4ZBpj86gFQsY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl
                          rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 03:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
        Validity
            Not Before: Apr  5 03:33:33 2026 GMT
            Not After : Apr 12 03:33:33 2026 GMT
        Subject: CN=69d1d80d-f693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:10:26:3b:cb:71:e4:5c:8d:65:18:91:05:
                    10:76:67:86:83:ea:3e:19:d8:6f:dc:b6:90:5c:bc:
                    48:e5:37:bf:62:8e:df:fd:51:00:a0:7e:b9:ba:82:
                    bc:b6:d3:78:82:10:15:ec:02:79:3d:7d:53:fb:a8:
                    73:7e:03:4c:65:7c:6b:fe:ff:63:10:90:7e:d0:7a:
                    87:89:dc:72:57:b5:77:7a:66:dc:ab:3b:ed:a4:4a:
                    a9:12:67:2c:8c:f2:6b:3b:de:03:06:da:1d:f5:e5:
                    43:6d:1f:af:fd:87:5d:b8:29:bc:7f:46:f5:f6:fe:
                    c0:ff:bd:94:63:8b:a7:11:c7:4a:5a:82:52:2f:68:
                    36:56:11:b4:08:cd:c9:ad:3d:8d:14:8f:fa:09:46:
                    fd:28:bf:16:89:cd:f8:15:d3:10:7b:43:b3:ff:da:
                    a4:4e:35:59:44:e2:fa:d6:e0:d3:32:58:b4:bb:63:
                    53:fa:07:8f:c8:14:fa:03:59:67:44:29:21:23:d4:
                    62:c4:d6:39:50:77:80:92:52:f7:0d:bc:a2:fe:56:
                    6f:f4:60:e1:a7:ef:cf:2c:a1:78:18:0d:1b:79:ea:
                    8b:f3:e1:15:1e:bd:27:c3:44:24:df:73:ef:c4:c1:
                    ac:c3:f5:fb:97:2b:c2:a9:ed:e3:38:00:28:95:dd:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CB:B5:32:9A:62:DE:6E:CB:46:A3:7F:D2:F8:07:34:D9:03:10:0E
            X509v3 Authority Key Identifier:
                keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:f2:fb:42:55:c8:2a:d2:69:0b:6d:5b:ae:94:6e:86:f3:
         3b:4f:fb:70:bd:01:41:b7:a8:1b:88:00:eb:23:81:dc:04:71:
         d5:53:bd:1f:4b:1e:22:df:5e:ea:39:f3:a8:50:e9:e0:8a:c6:
         9e:7c:4e:44:60:2c:a5:2d:e8:56:dc:59:73:10:96:cc:e9:94:
         05:e9:be:92:9b:04:ca:c9:08:2c:7e:12:96:f9:64:b7:e8:57:
         f3:81:54:6c:94:31:d4:3c:1d:f3:fa:7e:46:08:f7:b7:f3:26:
         92:59:6b:3c:3d:07:d8:10:e7:9a:8d:e7:c7:2c:67:6b:c9:14:
         64:5e:ed:02:a5:ac:25:fe:55:ea:a8:55:8b:a8:52:da:ad:eb:
         3b:a2:b6:f7:2d:46:e2:ae:a0:45:a7:ef:ba:b8:63:35:95:28:
         04:82:af:cf:68:6a:ae:67:00:55:a5:07:2b:08:3c:f3:1b:06:
         ac:1c:be:af:1a:eb:56:40:90:ce:cf:49:10:20:2a:6a:27:ae:
         26:81:a9:2a:8a:24:79:58:86:49:47:8d:0a:99:11:0f:54:ee:
         d4:2c:d8:f0:63:92:9f:a2:72:52:3e:27:c8:23:60:e4:82:6f:
         ee:ed:bb:1a:77:42:da:59:5d:fd:70:84:35:6d:46:a3:a1:1a:
         af:2e:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:07 2026 by rpki-client