Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
File:                     ehMEShEYWGwP2hOLs-vdSEiRTjc.mft (raw, json)
Hash identifier:          Z17Q+bjWWaJ5MYOihRJ1Co1q8xjr/H5B3LHSaoeIHH8=
Subject key identifier:   C1:C8:C1:B2:F7:C4:34:E8:D6:26:5F:C6:C4:40:72:91:7B:48:62:41
Authority key identifier: 7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37
Certificate issuer:       /CN=A9154EAF/serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
Certificate serial:       0304
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
Manifest number:          02FF
Signing time:             Sun 05 Apr 2026 01:00:26 +0000
Manifest this update:     Sun 05 Apr 2026 01:00:26 +0000
Manifest next update:     Sun 12 Apr 2026 01:00:26 +0000
Files and hashes:         1: ehMEShEYWGwP2hOLs-vdSEiRTjc.crl (hash: 1rlO/380QvV0X0oE1jHU+JcYeYJOhgWwmshKsQ5hAB8=)
                          2: 62A0C17A16C511ED91E80F56C4F9AE02.roa (hash: DPKmCzo8hJ9V5Pt+bf8wNdW3775xVd0a/v/XhzNF8ok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl
                          rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 772 (0x304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154EAF, serialNumber=7A13044A1118586C0FDA138BB3EBDD4848914E37
        Validity
            Not Before: Apr  5 01:00:26 2026 GMT
            Not After : Apr 12 01:00:26 2026 GMT
        Subject: CN=69d1b42a-3f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:7b:78:9a:5f:6d:e3:6a:a8:4a:42:50:2d:
                    a6:19:d2:80:52:84:84:9e:1a:9e:78:07:c7:d7:ee:
                    43:ad:7c:17:a5:97:3e:fe:40:92:3d:aa:1b:3f:09:
                    de:e6:8b:7b:3a:2f:cc:f0:8c:1a:f2:d7:58:7d:9a:
                    3c:b7:74:66:fd:4b:d9:c4:51:6f:e0:9d:69:71:86:
                    66:58:07:6b:e4:c6:d5:c9:9f:2c:63:15:29:54:f8:
                    2d:f5:18:ac:ae:53:9e:6c:12:0a:8c:a0:f7:de:bc:
                    60:68:59:76:ab:8a:5c:5b:59:7b:1f:68:7f:8f:84:
                    5d:25:5c:59:1f:c4:86:3b:7a:a6:fc:c7:23:1e:59:
                    df:69:48:54:3d:c1:a2:0e:e6:62:f7:93:71:32:e7:
                    a7:1b:fd:33:f7:f2:8a:b5:52:67:f5:ef:47:13:c3:
                    5e:0a:e1:ae:84:aa:8b:24:19:e9:f3:06:93:ee:7f:
                    79:f1:dd:e6:e2:e8:58:1e:ac:f5:c1:84:75:42:a1:
                    d6:05:26:30:d2:a6:1d:2f:94:ad:2d:4d:50:62:8a:
                    6d:58:e7:40:97:7c:73:89:e8:cd:9f:1d:48:04:2a:
                    4b:d3:d5:5b:6e:c0:b3:ca:01:be:ee:0b:e5:56:54:
                    42:e9:09:f6:30:e8:d0:35:91:50:0f:26:0b:6b:0b:
                    cd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C8:C1:B2:F7:C4:34:E8:D6:26:5F:C6:C4:40:72:91:7B:48:62:41
            X509v3 Authority Key Identifier:
                keyid:7A:13:04:4A:11:18:58:6C:0F:DA:13:8B:B3:EB:DD:48:48:91:4E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ehMEShEYWGwP2hOLs-vdSEiRTjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154EAF/47D5A7E016C311EDAE7EB955C4F9AE02/ehMEShEYWGwP2hOLs-vdSEiRTjc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:af:e9:f3:bc:ab:76:fc:ce:62:89:60:af:30:4f:88:54:18:
         4d:c0:a0:6f:ce:b7:6d:fe:98:87:5c:24:d6:18:ce:5f:36:94:
         9b:4a:2e:da:db:d7:62:c3:9d:0f:07:be:f7:ca:4a:47:dc:61:
         24:94:c1:56:58:60:80:1a:a0:2b:47:3d:6e:35:81:e1:52:22:
         c3:89:23:45:3a:ed:b3:db:bc:05:44:ea:66:f3:db:3c:85:7b:
         87:7d:14:f5:98:b4:4f:ca:9b:38:a8:b2:1a:26:fb:c2:c2:06:
         1f:f1:a0:cf:c3:4f:34:b9:91:8d:47:01:dc:f7:8e:b0:80:d6:
         ac:74:3b:3f:ab:fa:c8:c0:a8:38:9c:4d:2f:ad:2a:33:5a:14:
         8a:35:35:a7:92:ad:39:e5:36:40:81:d0:72:b2:b4:35:06:0c:
         87:59:ee:b2:8d:a8:0a:29:26:76:d7:e7:a6:80:84:59:39:2d:
         ab:21:2d:3c:f9:43:87:72:21:4e:c4:5a:54:44:3e:a6:18:56:
         97:00:11:36:07:89:e9:0b:d0:3a:50:96:eb:91:10:68:32:19:
         fb:4f:86:ea:ed:8e:9f:0c:e0:48:d8:a8:63:10:65:f2:f5:4d:
         de:a6:fd:99:ec:2d:44:4b:a1:18:74:80:1a:54:81:a2:d3:85:
         81:89:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:41 2026 by rpki-client