Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
File:                     EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft (raw, json)
Hash identifier:          u4KyqB+6lcNZPIR5kCHald+GvQe72CtqIOyexiqPcbo=
Subject key identifier:   DA:39:39:45:7E:8E:77:85:86:98:01:F9:45:C0:58:D0:FA:F3:EF:82
Authority key identifier: 10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98
Certificate issuer:       /CN=A914C10B/serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
Certificate serial:       06B7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
Manifest number:          06AF
Signing time:             Sun 31 May 2026 23:01:54 +0000
Manifest this update:     Sun 31 May 2026 23:01:53 +0000
Manifest next update:     Sun 07 Jun 2026 23:01:53 +0000
Files and hashes:         1: EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl (hash: BD/+QkN3bGp/imNg7u/cMIY0ZkM7+iPsaCJfbwK3Epw=)
                          2: CFBB0C48B28A11EBB4CE6E70C4F9AE02.roa (hash: BD9XvgbfGZGyT2mqJsZmkBVu9isJKAOPHUUx0vygtGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl
                          rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jun 2026 23:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C10B, serialNumber=109CB71B4F64166F1DDA422CEB721EE3ED196798
        Validity
            Not Before: May 31 23:01:53 2026 GMT
            Not After : Jun  7 23:01:53 2026 GMT
        Subject: CN=6a1cbde2-ddc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:de:e7:5e:ca:07:4b:7a:d4:25:58:5e:5d:
                    1e:31:8a:2d:90:91:13:7a:19:68:4c:27:99:7a:4d:
                    16:2f:3d:34:73:c7:37:22:eb:62:2f:47:0f:db:ab:
                    1c:8e:95:ae:c0:0b:0f:76:77:b7:7d:2c:7b:50:a4:
                    50:6d:26:ec:93:ea:15:67:65:0b:35:81:f1:6c:f5:
                    8a:b8:78:e0:79:aa:ee:e9:4a:1c:4f:93:ad:7a:d0:
                    ad:d9:4f:ae:70:64:f0:1e:fe:64:f2:e9:85:08:74:
                    1b:e8:34:63:e1:44:02:a4:5a:e6:ca:55:e8:7b:d2:
                    a5:a0:ce:a0:fe:04:55:46:84:9d:08:17:e1:15:b9:
                    5c:9a:a8:0b:30:71:b8:54:12:43:32:01:2e:46:9e:
                    7b:6f:c3:43:67:d9:40:4e:11:f2:36:d1:68:9f:99:
                    43:2f:3d:87:20:1d:94:98:58:fa:4d:6d:d9:96:08:
                    4d:ba:89:79:cd:44:bf:5b:72:0b:16:06:4d:22:3c:
                    f2:6a:63:ea:5a:89:60:25:a5:7b:ef:c5:e8:f7:fb:
                    ec:d2:d4:34:8b:19:ef:f7:23:bc:c7:46:b3:6a:27:
                    0d:1f:5a:8f:6b:cd:b6:3f:43:db:45:0e:37:ef:27:
                    66:9a:0e:0f:65:cb:69:a0:fb:3a:fb:26:f2:5a:79:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:39:45:7E:8E:77:85:86:98:01:F9:45:C0:58:D0:FA:F3:EF:82
            X509v3 Authority Key Identifier:
                keyid:10:9C:B7:1B:4F:64:16:6F:1D:DA:42:2C:EB:72:1E:E3:ED:19:67:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7231C3DAAF6211EB8BA1F714C4F9AE02/EJy3G09kFm8d2kIs63Ie4-0ZZ5g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:ec:1f:d6:46:63:48:3e:a9:25:28:8f:79:d0:65:48:d5:
         85:15:92:eb:87:b5:44:36:d8:47:ba:49:48:1b:54:0f:5f:84:
         a3:7a:f3:67:7b:e1:38:7b:09:5b:36:72:34:87:25:8d:fe:ab:
         59:44:3a:19:05:e3:64:0d:32:72:56:84:94:76:71:f0:a7:60:
         88:95:b1:3b:b0:6d:db:33:e9:db:82:22:0e:7e:d2:01:f0:1e:
         2a:72:6f:cf:5f:0b:0f:0e:b0:a5:2d:14:a9:ad:e0:ec:77:c7:
         33:ec:8f:6d:c8:cc:e3:5d:f8:40:ef:f6:0e:ac:6b:c9:e9:4f:
         c2:74:26:fd:fc:ca:00:61:2d:9e:bb:71:62:d0:a8:98:bc:44:
         61:c9:1a:41:f3:38:3c:cf:6b:d7:ba:cd:5c:b5:9c:8c:49:66:
         ff:d9:65:6d:4a:32:3a:95:9e:00:4d:e6:d2:7f:5a:1d:52:3a:
         b0:9e:4b:81:aa:81:ef:a2:a7:95:21:e9:88:ec:29:13:ad:ee:
         ba:61:03:51:bc:f4:f7:53:40:0c:6c:fa:09:b0:41:93:ec:19:
         a2:23:b5:a2:26:c4:e1:2c:cb:14:20:9b:51:f4:fb:2f:0c:d6:
         ec:5f:20:0d:79:cf:30:72:f2:6c:3d:57:59:9c:53:23:27:d2:
         99:16:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:39 2026 by rpki-client