Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File:                     EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier:          YHFsmMvmCM6wGMlXEAf/avpnBrWmCjRRbOVXdYhu4RI=
Subject key identifier:   16:F8:31:62:D2:BD:05:C1:A4:8F:81:D4:A8:0C:DE:33:EE:EC:50:EE
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer:       /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial:       096E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number:          0959
Signing time:             Sat 28 Mar 2026 20:01:33 +0000
Manifest this update:     Sat 28 Mar 2026 20:01:32 +0000
Manifest next update:     Sat 04 Apr 2026 20:01:32 +0000
Files and hashes:         1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: DaQy8KUy0CE5nVZoBNzz/Y5zAlf49aCZf/xnZAeTiiw=)
                          2: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: CYmOlMGoeQXLhgY7vPpgwvztx9vwkWkFwNVuEcQyFhM=)
                          3: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: NUTFunSdqQGhKcXQQFcYDdZdy519YsdeLxbedcwgLIs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
                          rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414 (0x96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
        Validity
            Not Before: Mar 28 20:01:32 2026 GMT
            Not After : Apr  4 20:01:32 2026 GMT
        Subject: CN=69c8339d-09ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:97:cf:e1:29:40:2e:22:59:7b:68:81:4e:
                    ea:c5:03:5b:56:8c:2a:7c:a7:50:33:a5:31:4f:48:
                    44:a1:8d:c9:06:01:b3:04:36:26:9e:47:53:04:a9:
                    9e:08:65:68:11:eb:29:aa:7a:60:83:c6:da:fb:1a:
                    49:34:f4:34:94:63:5b:ad:5a:a1:56:da:0a:02:31:
                    34:50:a6:c4:67:fb:04:ff:6f:2a:fb:6c:90:32:23:
                    a3:44:79:30:ec:b3:c6:43:7c:49:ba:57:a8:db:fc:
                    4e:65:e8:99:92:e8:24:fe:b1:5b:30:86:30:ae:16:
                    81:9b:26:e8:76:d5:0c:bf:2a:fb:cf:c0:fd:70:85:
                    43:97:62:52:8c:6c:51:2b:c4:08:c1:dd:08:0b:68:
                    81:bc:e5:d0:86:7d:11:4e:3f:da:25:44:a1:45:61:
                    df:e8:99:12:98:29:f5:b3:66:88:7c:53:de:e6:f2:
                    7c:a7:27:30:17:10:a0:e6:84:d6:b5:ac:61:a1:73:
                    55:b0:d6:d3:8b:ba:97:52:8c:aa:7f:44:97:00:90:
                    2c:05:00:70:b6:a6:6f:4e:eb:83:7f:4e:dc:34:49:
                    4a:e2:27:97:d7:a4:8b:13:86:5e:25:78:02:2f:b7:
                    7c:8b:8d:c1:72:59:48:42:a8:8f:48:94:9f:a1:52:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:31:62:D2:BD:05:C1:A4:8F:81:D4:A8:0C:DE:33:EE:EC:50:EE
            X509v3 Authority Key Identifier:
                keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:0b:8f:f1:ce:5c:14:07:ff:e1:92:b2:73:3e:c9:5f:e5:
         b9:33:b0:f1:63:4f:f0:ec:f5:5f:02:85:8d:cc:26:7a:9a:e0:
         5c:e7:32:2b:25:60:7e:e4:f1:4c:0c:e3:a3:83:2a:84:0a:d8:
         94:c1:03:e2:4d:97:f2:f1:15:0a:6e:d8:70:01:65:a2:c2:60:
         fb:02:1e:b2:be:2a:ed:a5:fc:e2:13:c1:27:b0:f5:6e:b2:fa:
         29:89:49:b3:07:ce:28:e1:09:1c:40:c1:aa:1c:1f:23:a8:c6:
         80:f9:a2:2a:a9:44:2d:6f:fc:12:6e:73:1a:c1:ed:de:3c:f0:
         b1:97:51:7c:02:20:0d:a9:89:fd:2f:50:8e:1b:bb:85:81:60:
         26:f8:2a:8a:4a:04:cd:cd:0b:df:56:bf:0d:a1:74:a0:21:e6:
         8c:0a:d0:a2:ac:15:35:56:8d:75:00:68:a4:d2:59:bf:3b:ee:
         bb:f7:7b:c5:8b:46:2c:f5:99:d2:76:cd:e0:f3:96:1f:5b:53:
         83:62:bc:ab:ec:7b:20:28:f4:2f:f2:02:0d:78:a2:28:99:35:
         5e:da:fc:37:a4:bb:9a:60:d9:f0:7b:c2:14:d2:4b:c8:76:c0:
         aa:ea:ec:30:a6:da:8e:38:9e:b9:b0:1a:97:8e:3b:69:4e:56:
         93:d6:30:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:22:15 2026 by rpki-client