Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
File:                     eup3fGsZFRNTOw4u3w8NhMtwuhE.mft (raw, json)
Hash identifier:          k2fKg484pYQmBhxGs7SikvKzvUg4mTb34TSX7HpT/2g=
Subject key identifier:   88:78:41:14:EA:0B:0E:88:E0:6E:4F:4F:9C:46:DE:C4:F5:C3:C4:C5
Authority key identifier: 7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11
Certificate issuer:       /CN=A9142489/serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
Manifest number:          0111
Signing time:             Sun 05 Apr 2026 05:24:39 +0000
Manifest this update:     Sun 05 Apr 2026 05:24:38 +0000
Manifest next update:     Sun 12 Apr 2026 05:24:38 +0000
Files and hashes:         1: eup3fGsZFRNTOw4u3w8NhMtwuhE.crl (hash: jnD7HW2RUfIdmMuwbHToqMG3SlynUHMpXPdmABObhzY=)
                          2: FCE2ACFA9BFA11EFABCDB96FC4F9AE02.roa (hash: XBhJyYS78iAwLwaisddHiLLfaefoeg69NKzL67ACpjE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl
                          rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:24:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142489, serialNumber=7AEA777C6B191513533B0E2EDF0F0D84CB70BA11
        Validity
            Not Before: Apr  5 05:24:38 2026 GMT
            Not After : Apr 12 05:24:38 2026 GMT
        Subject: CN=69d1f217-2f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:d8:ae:1d:7f:58:5a:ac:26:eb:5e:81:cf:
                    70:ff:c0:b0:de:d8:98:03:8c:53:ae:ab:bb:61:9b:
                    c9:b5:af:62:2a:5e:97:00:8e:56:f0:4d:7c:a2:10:
                    98:53:39:44:6d:82:54:53:33:95:cd:0e:5e:3b:8b:
                    bd:4f:27:17:a5:db:08:f3:22:bc:2f:0d:b4:aa:16:
                    33:2a:4a:02:bd:1d:6a:7c:c7:a4:24:d8:7e:52:b9:
                    c3:88:da:e4:e8:64:e8:80:39:38:8b:dd:bc:f2:66:
                    82:c6:f9:ab:ac:29:24:13:ad:3b:53:3f:c0:56:c7:
                    6c:8f:e2:a9:fa:04:b1:a7:d2:0b:27:79:d7:6c:f8:
                    93:84:e0:2d:99:68:5c:41:89:d4:12:c1:05:0f:75:
                    b7:f7:8e:b8:61:cb:95:a8:77:94:b9:39:89:02:77:
                    3a:5d:6e:90:6a:69:22:40:6e:60:0b:b4:3a:38:c1:
                    92:8a:a0:0f:ff:7f:c1:3e:1a:5e:07:a0:da:04:0e:
                    81:e8:75:8a:a9:ef:eb:83:f6:4c:18:74:46:fa:1d:
                    00:46:49:33:05:88:27:1d:2a:d9:34:82:46:7a:26:
                    fd:ca:fe:c2:28:b2:b2:68:cd:4e:51:f1:c5:a8:1b:
                    06:d7:0d:c0:d8:23:a7:ef:02:f4:41:45:2c:a3:9f:
                    e3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:78:41:14:EA:0B:0E:88:E0:6E:4F:4F:9C:46:DE:C4:F5:C3:C4:C5
            X509v3 Authority Key Identifier:
                keyid:7A:EA:77:7C:6B:19:15:13:53:3B:0E:2E:DF:0F:0D:84:CB:70:BA:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eup3fGsZFRNTOw4u3w8NhMtwuhE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142489/3289A90E9BFA11EFBEB9846EC4F9AE02/eup3fGsZFRNTOw4u3w8NhMtwuhE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:79:cf:14:a8:d8:af:c0:47:11:e2:1d:f6:e3:9a:40:93:ef:
         0c:63:1a:c9:65:dc:50:6a:a3:1b:32:83:10:13:b4:71:7b:70:
         10:ec:ca:8c:fd:fc:1a:94:9e:5f:68:0d:40:e7:12:76:59:51:
         50:c0:f6:ad:69:f7:82:e5:63:0f:db:eb:a6:ea:00:d4:24:d3:
         47:91:7f:09:84:a1:c1:f9:79:7f:32:59:a4:82:e5:7e:a3:f8:
         8d:ea:65:8a:5c:cc:d6:06:a6:1d:1c:01:5d:a9:01:79:4e:ac:
         59:0c:f8:a1:35:db:44:e0:2c:99:e4:46:d3:5e:b5:9d:9c:70:
         30:7e:8a:bd:4c:f1:92:6e:0c:46:dc:f9:16:5f:55:71:0d:1b:
         dd:37:4a:38:ef:7c:75:dc:66:b3:f7:23:75:ae:16:89:5d:ce:
         89:d3:1f:8f:90:cd:27:35:38:36:2a:26:7a:6a:d2:db:af:ef:
         9b:14:a7:b7:8b:42:48:23:e3:3b:7a:49:9a:88:c4:84:12:0f:
         a8:fd:c7:df:b7:c7:f5:b9:3e:33:c5:cd:47:f3:3b:db:41:3d:
         eb:bd:62:14:d5:ba:5d:01:2f:dc:3a:20:57:cc:ca:72:f1:05:
         5c:1a:a9:cb:a1:af:d4:49:30:36:69:61:68:c4:2c:aa:32:93:
         b1:af:ae:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:10:21 2026 by rpki-client