Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
File:                     4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft (raw, json)
Hash identifier:          epSeGnloYVpc7MV0H40EC+uZvpblYkEYod03PsOSEZM=
Subject key identifier:   34:69:CF:74:DD:E8:AA:C5:9C:96:57:46:24:FC:CA:13:45:04:16:B0
Authority key identifier: E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1
Certificate issuer:       /CN=A9139220/serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
Certificate serial:       07F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
Manifest number:          07EA
Signing time:             Sat 04 Apr 2026 21:02:36 +0000
Manifest this update:     Sat 04 Apr 2026 21:02:36 +0000
Manifest next update:     Sat 11 Apr 2026 21:02:36 +0000
Files and hashes:         1: 4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl (hash: ACGgG9GVhMYmQJuNk+P0r8ipYmIYpIGBTpNZ8f/Sv+M=)
                          2: 7EBB570A296C11EBB7D88147C4F9AE02.roa (hash: E6etJLs09jxCInikK/I6oSWS8vZ+7fWKirFeSQZQozk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl
                          rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139220, serialNumber=E2CFC42B6A08150AEFEFE7189BE5AF2BE568F8C1
        Validity
            Not Before: Apr  4 21:02:36 2026 GMT
            Not After : Apr 11 21:02:36 2026 GMT
        Subject: CN=69d17c6c-bcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e6:05:ca:5f:6d:4a:09:e9:2e:1b:25:04:41:
                    5e:99:33:be:2d:27:16:30:1a:31:98:ed:60:71:8b:
                    0e:73:dd:15:63:6b:b7:c7:46:38:b8:9a:a6:1c:e4:
                    6d:14:45:c2:4b:e0:e2:0d:19:51:28:90:cb:54:a2:
                    b0:ab:f8:c9:3d:6c:cd:b6:09:2f:25:ee:51:e9:89:
                    4d:41:41:df:b4:6d:22:38:37:f2:8f:47:1d:0d:64:
                    95:b5:1c:84:b4:da:e4:dc:56:0b:05:9f:13:52:3c:
                    9d:4a:50:0b:9b:07:82:2b:c8:6e:f6:de:a5:83:ca:
                    d7:50:ec:b7:c5:fc:db:c5:d0:61:76:6e:db:02:4e:
                    ce:94:4a:bc:de:f8:54:e3:9c:c6:4b:09:58:4b:d3:
                    12:64:5d:16:db:20:bf:0d:9e:b4:58:f1:b1:db:9f:
                    34:87:98:f0:10:c8:99:81:f6:89:df:94:c6:31:64:
                    a8:36:a9:ba:bb:9d:36:2a:a8:eb:73:21:91:c4:d1:
                    27:be:df:f4:e9:f6:c8:ac:c9:a3:4e:33:fe:4a:46:
                    71:0e:a4:ec:3a:82:98:95:fc:9c:f3:99:c4:0f:dd:
                    5b:1b:88:46:e5:5b:71:07:2f:ed:26:1c:13:2d:1b:
                    76:ee:c8:99:3f:dd:90:ce:f6:ff:19:9b:ed:a0:1c:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:69:CF:74:DD:E8:AA:C5:9C:96:57:46:24:FC:CA:13:45:04:16:B0
            X509v3 Authority Key Identifier:
                keyid:E2:CF:C4:2B:6A:08:15:0A:EF:EF:E7:18:9B:E5:AF:2B:E5:68:F8:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139220/15CD1C2228B011EBB4469E1EC4F9AE02/4s_EK2oIFQrv7-cYm-WvK-Vo-ME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ba:9c:aa:05:c2:82:4d:0c:b9:08:73:33:c8:56:10:eb:79:
         5c:c6:dc:41:fd:a8:02:e4:cf:26:48:4d:9e:f5:5f:92:ca:89:
         85:da:b4:13:5e:91:5c:00:2e:0f:c8:44:75:8f:c4:3b:00:b3:
         eb:05:c8:01:38:34:36:3c:c7:ce:3c:07:cf:11:53:7e:08:1a:
         65:de:14:42:3d:bc:fd:62:43:4d:0c:cf:0a:b2:56:a5:1e:25:
         9e:5e:5e:f8:b1:41:db:77:0b:40:61:2f:1a:8f:df:db:16:ec:
         93:8f:6c:56:21:ed:bf:90:3c:c9:c5:34:aa:d5:d4:36:be:22:
         f7:29:e3:40:29:cd:cd:ac:e4:a9:68:40:41:bc:a4:34:6a:38:
         2e:60:dc:90:4f:18:68:d8:c0:47:5f:be:7b:0a:b5:82:d7:8c:
         37:6c:c5:5a:56:32:c4:7a:b7:9e:90:8c:df:8c:2f:ee:4e:c6:
         d5:3a:83:de:91:e0:ce:fe:cc:c7:6b:b5:08:20:dc:ce:f0:a3:
         39:26:d5:a2:08:b1:c9:6f:4e:ba:3f:54:cc:ad:84:72:9c:c6:
         64:4a:ba:c7:04:c3:9d:87:85:0a:9c:19:28:ab:6a:57:9e:bf:
         a1:b4:7d:c5:4d:cf:55:5f:d6:d2:a6:41:5b:23:50:5c:09:2f:
         d7:45:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:52 2026 by rpki-client