Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
File:                     EW-SD4cwZnR6jO3a_-hLz72wNRo.mft (raw, json)
Hash identifier:          i8pan1+CI7hzBtDKYNRUJUw+JtST9RF5thdThRKT/Jo=
Subject key identifier:   37:65:6D:AD:23:1A:3F:21:4C:6F:45:1E:BC:ED:2C:8A:FC:27:86:58
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Certificate issuer:       /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial:       125F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
Manifest number:          1250
Signing time:             Wed 10 Jun 2026 17:05:42 +0000
Manifest this update:     Wed 10 Jun 2026 17:05:41 +0000
Manifest next update:     Wed 17 Jun 2026 17:05:41 +0000
Files and hashes:         1: EW-SD4cwZnR6jO3a_-hLz72wNRo.crl (hash: NkkiM7lSjYeUgHCrDapdsFAZQ1wBCvJVxCDPdFSqxRE=)
                          2: D8D63660B9A811ECB7EE5A71C4F9AE02.roa (hash: 72MUrn7tnvmneOqEgTntxjtIs1ZcTEVLT5WbrHCVP04=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl
                          rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 17:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4703 (0x125f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120CDE, serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
        Validity
            Not Before: Jun 10 17:05:41 2026 GMT
            Not After : Jun 17 17:05:41 2026 GMT
        Subject: CN=6a299966-99ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:10:f0:e4:d4:43:19:e2:3c:50:9c:ba:bf:76:
                    b9:43:80:8f:22:a7:94:5f:4b:0e:2c:98:00:3b:c0:
                    31:fd:e5:86:3d:42:95:6e:99:7e:07:bd:8b:a2:21:
                    d0:a9:79:39:8c:2d:16:db:ec:bb:52:d7:37:e0:40:
                    56:a5:3b:43:f5:6c:3d:18:19:26:02:8b:4b:6f:ee:
                    33:2f:7a:be:0b:86:df:4e:ee:60:90:df:b9:6f:30:
                    9e:51:03:e8:aa:af:86:c6:39:e0:c0:b2:83:73:fc:
                    6b:cb:02:28:21:d2:62:f2:23:ff:a2:ea:cd:82:a1:
                    19:47:60:9f:4f:7e:87:d2:83:23:7e:f4:f8:05:6a:
                    77:4c:1f:78:cd:7a:75:6d:0c:d1:68:b2:02:96:3c:
                    fe:fe:f6:2b:db:72:de:db:01:d7:8f:ba:2f:f8:97:
                    d9:e8:1f:b2:42:1f:c0:66:b3:5a:d8:51:34:9c:8a:
                    a4:af:ba:cb:3d:65:63:b9:6f:7b:39:43:8c:a9:15:
                    8b:08:ea:03:97:09:ef:8d:51:51:11:ab:0b:2b:68:
                    26:6e:98:02:3b:65:4e:94:dd:6a:46:56:30:63:02:
                    74:a7:2d:da:86:08:80:fa:00:fd:23:eb:29:de:7f:
                    1b:31:ae:4b:64:a8:2b:b2:4a:20:cd:bd:a4:14:75:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:65:6D:AD:23:1A:3F:21:4C:6F:45:1E:BC:ED:2C:8A:FC:27:86:58
            X509v3 Authority Key Identifier:
                keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:44:ed:23:7b:c6:85:68:42:d5:61:a0:95:dc:15:99:45:
         72:cc:8f:aa:8f:64:37:fd:f1:0e:b8:46:21:b0:f7:be:c3:75:
         fe:74:66:98:c3:14:ae:b1:77:41:d8:38:ba:b2:90:6c:ca:08:
         ac:d5:2f:0a:4c:e1:96:76:92:ec:2b:5e:00:e4:3f:ac:cf:f2:
         d3:e5:85:36:50:1d:4e:7d:f8:7c:2d:4c:b1:af:73:75:2f:39:
         93:57:ee:ae:13:a8:2e:8e:6e:de:75:c8:10:20:30:5c:8f:32:
         d6:89:8a:a2:c4:4a:21:19:95:4c:6d:49:6e:20:0f:3e:06:00:
         54:30:af:ae:fa:c7:37:f7:79:45:58:21:b4:6c:b4:47:5a:aa:
         eb:d7:4c:92:ef:00:83:55:e7:54:7f:c7:78:89:4a:04:39:2e:
         37:a9:bd:b8:42:8e:15:14:5b:89:5d:f3:cc:7a:53:15:6e:73:
         01:1f:f1:ca:7c:d5:ef:20:18:e8:58:c8:80:a7:cb:c9:5c:93:
         88:da:26:ab:64:c9:18:cc:21:c6:a1:08:f9:a4:a0:cc:64:1b:
         c7:a7:e0:28:c6:f9:35:6a:1c:b9:98:17:7b:f3:8c:38:2d:23:
         17:79:e5:f0:82:5a:f7:2b:db:bb:6b:11:3f:78:a5:70:b8:ad:
         ac:f7:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:28 2026 by rpki-client