Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
File:                     eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft (raw, json)
Hash identifier:          RPy+K8mH3AFRA1f74WYA98NILY8r/X/31eZnS8+sePo=
Subject key identifier:   8B:5C:2E:05:F9:95:92:00:DA:03:17:9C:6A:DB:20:72:52:54:3E:EE
Authority key identifier: 78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6
Certificate issuer:       /CN=A914CF73/serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
Certificate serial:       34FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
Manifest number:          34F1
Signing time:             Sat 04 Apr 2026 15:16:40 +0000
Manifest this update:     Sat 04 Apr 2026 15:16:39 +0000
Manifest next update:     Sat 11 Apr 2026 15:16:39 +0000
Files and hashes:         1: eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl (hash: 5QHiTyqKu0H/5Vbfe5MhgOedR8iw/k4cVK0E80+bvu8=)
                          2: 5007D8DECAB411E889484D32C4F9AE02.roa (hash: HLINmslRoe9L2W5d9zauGKp9+SgXzgVdgA5BJAfvBJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl
                          rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13564 (0x34fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CF73, serialNumber=789F8B787ED3DD35203332CEB3B532E1FAF0B6C6
        Validity
            Not Before: Apr  4 15:16:39 2026 GMT
            Not After : Apr 11 15:16:39 2026 GMT
        Subject: CN=69d12b57-01fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:9f:88:94:f6:7b:d8:d6:b2:c4:17:98:9f:
                    68:67:a0:4d:0b:f0:d5:fb:e9:12:cc:fa:06:ca:5e:
                    d9:f7:35:19:83:a3:c2:b1:7c:3e:07:aa:78:bb:a2:
                    88:80:a1:e4:ce:ef:4b:a8:7f:11:0e:65:62:c6:a9:
                    57:1d:5d:44:5b:53:94:7f:79:6c:66:f5:ae:b8:5f:
                    24:4a:13:6d:0e:e6:32:ab:29:eb:e5:49:2e:5d:fa:
                    2a:09:55:b4:83:d4:47:0c:9b:f5:0b:28:c5:5d:4a:
                    bb:3c:28:a8:ee:87:5f:12:76:82:72:ea:54:b6:18:
                    c4:fa:d6:a0:20:de:2b:ee:c6:55:65:72:b7:1b:c2:
                    43:01:7b:c3:e0:ac:86:c9:78:44:1a:b8:0d:d0:76:
                    fb:72:e3:d1:ed:63:82:9d:31:d9:cf:e5:69:db:f6:
                    24:89:9e:86:40:84:ca:a5:3c:fd:b4:9a:b1:58:d7:
                    20:08:43:1e:ea:95:b3:0b:23:70:e7:ef:c1:06:ec:
                    8a:b3:7e:d4:43:c5:31:9b:f9:51:f3:cd:04:8f:c7:
                    6a:52:ed:8d:3e:2a:67:23:53:09:49:70:df:42:bc:
                    46:64:4d:89:b4:da:ae:2c:a8:62:19:24:7a:2c:0b:
                    5b:9b:50:dd:d4:f4:38:a3:c0:82:9a:97:29:3f:b6:
                    8e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5C:2E:05:F9:95:92:00:DA:03:17:9C:6A:DB:20:72:52:54:3E:EE
            X509v3 Authority Key Identifier:
                keyid:78:9F:8B:78:7E:D3:DD:35:20:33:32:CE:B3:B5:32:E1:FA:F0:B6:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CF73/A68475502A0111E281723CA608B02CD2/eJ-LeH7T3TUgMzLOs7Uy4frwtsY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:41:96:a1:03:9f:a9:0e:d3:5c:a4:b6:35:f3:27:0e:16:c2:
         61:fe:48:93:07:d1:f4:f8:79:a9:4e:dc:a8:f6:e4:56:c9:07:
         9a:73:fa:08:14:83:49:cb:2b:a1:6f:52:4b:7d:93:8e:51:2a:
         a6:5a:4a:e2:4f:82:96:67:da:b1:3a:af:44:0f:06:da:51:dc:
         89:45:13:b6:14:dd:23:6f:c8:2d:3d:9f:c0:c0:b4:8c:37:47:
         39:25:73:2a:b0:65:cf:d3:4e:df:32:90:f9:ac:92:eb:ee:ac:
         16:bb:e9:7a:7f:85:c2:df:27:2d:8c:e7:ec:06:db:ed:67:ed:
         32:a5:55:46:bf:13:cd:44:a6:d2:3b:73:fe:2a:85:e7:cd:68:
         6e:4d:ac:68:ac:91:a3:c6:27:d6:83:67:a3:2c:0f:66:e5:f4:
         2b:e1:24:5a:ce:d8:97:35:a1:79:6c:d0:b5:23:88:87:49:5e:
         d1:08:69:8a:3f:37:fe:11:52:6f:da:bf:27:8a:c7:d0:2a:2b:
         9e:09:6a:d3:d3:f3:c8:41:10:61:02:23:55:0a:07:28:ba:eb:
         a2:d7:28:cf:e1:56:88:8d:6e:80:37:cb:7d:48:38:3e:d2:4b:
         c9:28:e1:b2:94:a8:71:02:4c:c2:8b:f2:ae:ea:4b:b6:21:22:
         aa:57:eb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:11:14 2026 by rpki-client