Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
File:                     EEz4cGO16r803k4l_s6ata9zbBQ.mft (raw, json)
Hash identifier:          4gifsXhvDTO5POdpQQV4IPeKPynPxn31SJqciiGKRgU=
Subject key identifier:   5F:55:C8:1F:29:DB:05:A5:D0:FB:72:9E:66:F5:D7:CD:23:AF:38:12
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
Manifest number:          FC
Signing time:             Thu 21 May 2026 06:22:17 +0000
Manifest this update:     Thu 21 May 2026 06:22:17 +0000
Manifest next update:     Thu 28 May 2026 06:22:17 +0000
Files and hashes:         1: EEz4cGO16r803k4l_s6ata9zbBQ.crl (hash: jO/QsDUjgS+5CI96sLyZAF/fzdOMpzjCVQUfaPoI0VM=)
                          2: 7BF6BA42E91A11EF804C4B57C4F9AE02.roa (hash: x6MtBYBFtjmAIaJuXnzEfbP3mXi8pgUQtgd0R+EsvPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: May 21 06:22:17 2026 GMT
            Not After : May 28 06:22:17 2026 GMT
        Subject: CN=6a0ea499-ec0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:6d:af:4a:f6:a1:db:69:28:4d:77:e2:93:ed:
                    cf:11:d3:bb:a5:e7:40:01:ea:37:28:ff:7f:57:e0:
                    1e:35:fb:87:da:47:d5:69:83:a4:d2:1e:e1:ba:ff:
                    d5:3c:d6:03:9b:f4:da:de:7c:9a:76:7e:ae:1e:18:
                    d6:be:2c:e5:9a:ec:d2:db:6b:48:2b:52:a1:8c:41:
                    72:73:b7:39:40:02:36:7a:da:01:af:f0:b6:46:d3:
                    7f:80:c6:a5:62:83:d3:29:cc:b5:31:09:13:2f:bd:
                    3f:89:89:a0:8e:5a:1a:27:79:a5:92:37:92:f4:67:
                    52:4a:09:f2:9a:ba:88:73:70:92:6d:75:16:1f:0d:
                    68:4c:93:7f:0a:29:a4:e8:04:cf:7b:e3:67:9f:77:
                    a9:c0:3b:cb:f5:79:d6:ef:3d:8a:9b:fd:26:4b:87:
                    7e:80:ee:7b:f4:65:81:62:a6:24:8e:29:01:01:b3:
                    67:fa:5e:8a:99:94:a8:f4:0b:46:47:0e:ca:5d:d0:
                    35:74:16:77:50:cd:48:59:5d:0e:88:dc:de:df:3f:
                    01:7d:25:af:07:5a:6e:89:0c:81:2d:da:8f:23:74:
                    ca:62:23:53:8a:93:9d:61:6f:44:a5:2d:79:c0:50:
                    08:f7:2f:30:72:b7:af:3e:ec:dc:2f:11:95:ac:38:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:55:C8:1F:29:DB:05:A5:D0:FB:72:9E:66:F5:D7:CD:23:AF:38:12
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c0:8d:00:c0:63:77:e0:08:55:4e:fc:ca:0e:f4:91:91:b8:
         cc:13:0c:dd:5a:d1:1f:38:da:89:25:6b:bd:ef:4a:4e:de:63:
         bb:55:5d:46:b3:98:38:d2:88:3d:af:af:51:d9:05:ae:fe:4b:
         f5:00:48:0c:99:25:30:ba:41:61:3a:4c:47:b0:7e:43:f5:fc:
         2c:9f:0f:0b:47:a8:9a:ad:2e:03:38:6d:12:93:6c:68:96:83:
         ee:cf:6e:ba:ce:2b:d2:d4:61:53:44:c6:4c:3e:65:5c:7c:cf:
         a2:35:15:31:02:05:46:34:fe:49:fb:02:f0:f0:8c:db:2e:69:
         5f:34:e0:06:14:77:85:02:9f:37:77:bf:d4:a5:13:5d:f3:fb:
         d7:ce:e4:2c:4f:28:96:78:f8:86:f1:63:06:37:07:14:6d:f5:
         14:e5:18:0b:70:db:39:ae:99:f8:c2:33:26:9f:d4:6e:26:e6:
         eb:8c:0d:ae:ed:54:08:5d:3e:90:e8:67:ba:e6:bf:b4:27:6f:
         32:73:0b:e4:fb:64:c5:d3:a8:09:c9:c1:61:f1:98:3e:f7:16:
         cf:56:2a:e4:78:10:00:66:b7:eb:6f:b8:c9:bc:f3:2c:42:0b:
         e6:b5:e6:1c:79:a8:ef:77:66:61:a8:b2:65:e6:24:36:e1:10:
         4c:49:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:11 2026 by rpki-client