Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          9gJTb8H1Y8tY9AWZzppZF1eeHSgrz5xoR8QzVxeR2hE=
Subject key identifier:   0E:B2:CA:B9:E7:5A:F9:BB:CC:FC:A8:D5:43:4E:3F:7F:07:8E:11:3E
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          11
Signing time:             Sun 05 Apr 2026 08:23:41 +0000
Manifest this update:     Sun 05 Apr 2026 08:23:40 +0000
Manifest next update:     Sun 12 Apr 2026 08:23:40 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: nzCI/V/unSceUVqGoKo3L9NKx5st7xQMchuYuqLT3wY=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: p3H/WotmZtJh2VCUVKyKjndLevGeDwif8IcNwZKNTmw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:23:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: Apr  5 08:23:40 2026 GMT
            Not After : Apr 12 08:23:40 2026 GMT
        Subject: CN=69d21c0d-41b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:24:c1:32:3d:90:77:00:83:f5:e1:dd:8e:
                    c0:d4:64:58:ad:b6:10:af:6f:eb:c7:3c:94:34:64:
                    c6:84:54:16:2d:9b:6f:17:4d:ae:52:44:ca:a1:3a:
                    bb:46:8b:9e:37:ae:17:56:ad:4d:af:72:95:3c:35:
                    a1:4f:6e:2f:2c:9e:83:01:d6:d0:45:d5:1f:b3:bd:
                    00:6a:39:c2:cc:27:76:bf:84:c4:e8:d6:18:28:4d:
                    1d:25:46:b9:02:d4:90:52:17:8b:76:99:16:b2:a8:
                    0c:42:e0:df:aa:7e:c7:09:1e:09:b8:a4:0f:85:b0:
                    04:a6:01:25:3c:1e:20:f5:eb:2b:03:1f:76:19:57:
                    5e:e8:d9:2e:de:c0:da:2b:03:02:1b:f0:f8:d5:7d:
                    3b:96:cb:50:a6:f6:e4:16:61:e6:be:b1:00:db:0a:
                    70:7d:8e:2c:5b:65:0c:5b:ed:d7:a9:24:33:49:4e:
                    2b:df:22:3a:4d:e7:9a:7f:17:69:96:a7:2d:d1:c5:
                    af:15:87:52:4c:b6:e2:fc:e1:65:17:7e:52:6c:f7:
                    e1:b4:70:30:cf:33:09:7f:0c:ec:b8:57:2f:0e:51:
                    9f:4e:a0:1d:d0:9d:20:6c:91:8f:d5:37:0b:ff:5c:
                    e6:45:5d:f9:35:5d:c8:9b:22:d4:6c:10:c1:57:d5:
                    86:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B2:CA:B9:E7:5A:F9:BB:CC:FC:A8:D5:43:4E:3F:7F:07:8E:11:3E
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:d5:c5:58:b5:a9:df:b5:bf:44:b1:b6:39:c4:9f:3a:6d:
         1d:34:ed:69:f4:b1:27:6d:a4:61:2e:6e:9a:d3:c3:86:2b:94:
         33:59:13:b9:ef:37:27:80:6c:0d:a5:27:a1:e5:0d:26:19:e6:
         5f:13:20:70:1d:87:19:fe:f5:82:db:53:a9:30:e2:18:e0:d0:
         04:a8:ff:b9:5b:f7:6c:bf:29:18:f5:fa:7f:ca:e4:61:ee:7d:
         bf:e3:98:e3:2b:46:02:81:c3:1e:d2:72:6f:70:05:74:fb:48:
         43:27:51:5f:d1:21:bf:90:e0:39:28:84:8f:a0:c6:ac:d0:44:
         57:c7:54:4f:3e:07:52:8c:54:e3:29:21:ad:4e:95:aa:22:f2:
         4f:fc:52:57:52:fc:2a:b2:14:14:0d:90:c8:4e:17:ac:5f:65:
         04:76:40:1f:be:21:a8:a4:59:99:9e:f3:43:c4:c9:fc:4a:f8:
         e4:74:d4:3a:c8:d3:bb:fa:96:a5:af:56:d3:a0:3b:8c:0c:43:
         03:b2:62:45:d9:d9:29:68:f3:43:d6:8d:83:54:f2:67:64:50:
         3d:f5:f3:5b:36:fd:de:a1:e2:32:7d:a7:78:53:39:15:db:bf:
         65:d6:7a:af:c4:21:de:02:53:11:72:52:21:0c:64:37:ac:03:
         a8:22:db:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:20 2026 by rpki-client