Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          Xnl/U016Hr2TSt5xFUCEmxjwAKGAob0rno+py2A0ixk=
Subject key identifier:   EB:79:40:73:18:7E:4E:0D:F4:0F:D2:83:F2:7D:32:4C:AA:B5:C1:37
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       0873
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          086A
Signing time:             Tue 02 Jun 2026 14:46:15 +0000
Manifest this update:     Tue 02 Jun 2026 14:46:15 +0000
Manifest next update:     Tue 09 Jun 2026 14:46:15 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: zaxLwMfULPFbdtI1Z5o6+deiK4nDMI7Ij6F756xQQYU=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: UDT/sxEbJJ4LLH0Gq0n3HSWFZpUlaRKaU2gtkgxvimw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 14:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
        Validity
            Not Before: Jun  2 14:46:15 2026 GMT
            Not After : Jun  9 14:46:15 2026 GMT
        Subject: CN=6a1eecb7-ec75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:22:86:c3:da:9c:34:92:eb:e4:72:4b:d9:
                    0c:a9:a3:5b:36:97:75:02:19:7f:f9:f7:21:aa:1e:
                    c1:40:b1:e2:f7:34:da:7f:96:6d:01:b5:fe:fb:d0:
                    c7:a3:11:b9:3b:33:ac:84:bb:69:47:d8:31:56:db:
                    cd:12:cf:b7:9e:5c:e5:eb:cc:fb:ea:e3:84:ba:d8:
                    d3:a6:af:6a:9f:07:f6:b8:6c:3d:ac:08:75:09:3a:
                    7e:8a:6c:ec:6a:d5:d8:8d:5d:45:57:bb:d3:fa:cd:
                    3f:47:bd:a2:14:31:c7:21:22:d6:13:69:d9:e5:3f:
                    7c:00:cb:a6:ff:7a:c4:43:66:37:3c:84:bc:9a:cc:
                    ef:34:d3:34:dc:39:b9:19:80:5f:da:b5:a0:36:77:
                    f0:fb:00:ec:b8:87:c0:06:3d:b8:37:35:30:81:8f:
                    17:82:03:38:cc:df:b0:c4:96:3a:fb:c1:a0:31:1e:
                    8c:2e:7e:53:c1:fa:d5:d6:e5:6a:87:77:c7:d6:97:
                    68:27:8c:15:8a:1e:0b:f9:cd:55:49:18:36:76:4a:
                    70:15:8b:d7:c3:ba:de:de:a9:df:9a:aa:0e:1d:30:
                    be:56:80:13:fd:ad:02:e0:ad:9d:94:89:02:37:55:
                    dd:3b:dd:cd:90:41:fd:b9:7a:d1:13:bc:54:8b:5d:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:40:73:18:7E:4E:0D:F4:0F:D2:83:F2:7D:32:4C:AA:B5:C1:37
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:d6:b0:e7:1b:9c:01:be:30:da:bd:01:19:7d:00:cd:02:
         0a:fc:ec:09:09:96:73:75:86:9f:80:88:fa:74:a3:bd:6c:af:
         8e:f4:2b:7c:a0:28:b1:3b:59:4f:8f:8b:dc:78:fc:0f:c6:c9:
         93:f2:0d:12:e0:54:8c:1b:28:8e:3f:3e:31:71:89:8a:58:17:
         39:2c:01:d9:21:7f:71:e7:d4:99:8b:ba:d2:cb:32:40:a8:6e:
         88:a9:2c:b6:28:9a:a2:86:71:86:e6:6d:b9:75:83:3e:4a:58:
         09:6d:b8:03:ee:87:d6:1b:56:14:68:22:82:ab:2a:27:79:b2:
         da:d6:03:1e:b7:dc:92:33:b7:e1:35:e9:7a:fa:25:92:eb:3d:
         fe:2e:bb:5e:4f:94:94:af:ae:df:ab:7b:c7:c6:6a:86:8d:a0:
         b3:2e:a6:9a:f5:83:c0:bc:68:bc:bd:b4:9d:fa:94:c0:05:8f:
         2a:53:0b:67:a5:21:9c:82:72:9a:62:f8:fd:bc:c0:24:c3:8e:
         82:53:7a:5f:14:fa:29:62:e7:1b:66:86:08:f8:61:d7:3d:a7:
         85:9b:7b:15:ce:3c:55:50:d7:cc:57:95:7e:78:83:78:8f:53:
         9d:10:ca:c1:9e:40:bb:9d:02:75:fc:68:39:ff:bd:e0:32:93:
         2d:34:79:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:23 2026 by rpki-client