Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
File:                     EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft (raw, json)
Hash identifier:          amDbWLCdvrPVZVA1JxtktkqCLn8+zXiUZC4aHme4aFo=
Subject key identifier:   C8:9B:07:A6:5B:B2:C1:48:A2:90:FF:2F:39:57:11:60:51:C9:2E:95
Authority key identifier: 11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9
Certificate issuer:       /CN=A911A1FC/serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
Manifest number:          01D4
Signing time:             Thu 21 May 2026 03:38:06 +0000
Manifest this update:     Thu 21 May 2026 03:38:06 +0000
Manifest next update:     Thu 28 May 2026 03:38:06 +0000
Files and hashes:         1: EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl (hash: y5uE3F3bDEtK25ujOlAWJzO09+PFk15OxKh1FODnB8c=)
                          2: 1D5E8EB6887B11EE8981CE28C4F9AE02.roa (hash: VhLN1aZzqiikbTrPMY7QXPTuOPPGxbfjsop6eJxwkqs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl
                          rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A1FC, serialNumber=118F9298590C79879AA1D8FC6D17F665454BCBB9
        Validity
            Not Before: May 21 03:38:06 2026 GMT
            Not After : May 28 03:38:06 2026 GMT
        Subject: CN=6a0e7e1e-9448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:3b:36:0a:37:2b:68:f5:29:98:ba:c6:e6:
                    70:3b:6c:5e:44:29:0f:05:1d:ad:06:77:40:19:99:
                    eb:62:86:07:1a:17:63:19:67:f8:d5:af:79:31:59:
                    91:ea:a1:83:2f:ae:52:ea:70:6d:b1:30:5b:1c:ed:
                    97:f0:34:b1:be:32:83:01:10:12:7f:ce:5b:e8:22:
                    18:44:15:27:c8:c1:db:45:10:3d:6e:ea:fe:d0:4f:
                    60:8e:2d:75:0a:e1:9c:a7:a5:7c:0e:bd:36:a3:f0:
                    3a:16:91:52:9c:5c:e0:d3:27:26:41:33:7e:28:eb:
                    54:1d:18:c0:e3:9f:fa:4c:26:4c:e4:c9:86:2f:ca:
                    94:b9:a7:10:e5:5a:97:35:e2:82:80:69:b8:99:48:
                    b3:e7:4e:97:ca:5d:61:83:cd:15:ec:ff:7e:4a:d0:
                    05:c7:b9:81:7c:1e:15:a5:93:72:cd:44:81:ed:ed:
                    78:a9:ac:fd:b3:ab:04:30:c9:99:bc:27:3a:bc:62:
                    e6:b9:c6:24:e0:aa:f1:d2:fb:26:7f:9e:44:4b:9f:
                    bb:e8:98:1f:df:fb:e9:23:b1:4b:81:1c:65:c6:f6:
                    68:77:5c:86:3b:9e:3a:7d:d8:31:de:97:44:19:0f:
                    f2:66:5c:13:27:51:1f:7f:10:10:78:b9:18:54:ba:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:07:A6:5B:B2:C1:48:A2:90:FF:2F:39:57:11:60:51:C9:2E:95
            X509v3 Authority Key Identifier:
                keyid:11:8F:92:98:59:0C:79:87:9A:A1:D8:FC:6D:17:F6:65:45:4B:CB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EY-SmFkMeYeaodj8bRf2ZUVLy7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A1FC/8191FB6C887A11EE9DB45B14C4F9AE02/EY-SmFkMeYeaodj8bRf2ZUVLy7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:76:5a:e6:4f:26:c3:1d:27:1e:56:23:86:10:de:6d:8d:cb:
         fb:87:98:60:30:b6:5d:50:ce:c1:9f:01:12:cc:1b:5e:88:d4:
         e4:ca:51:f1:d9:23:7a:0b:a3:b1:6c:68:97:96:67:1a:b3:8b:
         c8:78:40:c3:f1:08:54:03:f8:c3:6a:3b:ff:6c:ce:42:2e:fb:
         37:51:de:62:b8:be:f4:c5:1f:20:86:03:6d:e3:e1:a5:45:fc:
         a6:cb:f4:24:c5:d4:7c:bc:31:ef:34:3d:3f:4e:b7:f8:a5:07:
         3a:ae:a5:2b:b6:f7:78:a7:1b:68:12:e8:96:9a:e3:5c:85:71:
         0e:c1:2f:bc:53:7c:96:de:ed:33:3a:02:b7:ce:9a:ad:cd:46:
         66:de:a8:d4:b8:2f:60:d6:da:b9:f8:d8:4a:81:dd:49:0c:6b:
         d1:4d:ba:d4:1f:21:a6:1c:83:d6:79:b2:48:f2:f7:7d:23:dc:
         db:a8:7e:6c:8a:4a:84:a4:3f:b3:35:6c:f3:d5:67:32:b6:b6:
         b6:49:31:e3:ab:cd:b1:16:ae:aa:15:71:70:5a:df:e5:77:f9:
         f7:56:b6:3c:57:4a:2c:f3:f7:e6:33:7e:40:05:3b:4c:14:df:
         86:5d:8e:a1:bc:bd:43:a1:68:ad:b1:62:51:0f:6b:d5:d8:b9:
         a7:86:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:52 2026 by rpki-client