Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
File:                     ETYYsNQQaCrAapAdZbuayVXtieA.mft (raw, json)
Hash identifier:          k+5IVvsabfbg5iAcQOvtdcQ7yiLyVLknYpQKuUs+IIk=
Subject key identifier:   00:DF:8F:7A:5C:FA:8C:69:0B:DC:55:B4:31:7D:1A:45:25:46:89:E1
Authority key identifier: 11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0
Certificate issuer:       /CN=A91551D7/serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
Certificate serial:       0F2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
Manifest number:          0EFF
Signing time:             Sat 28 Mar 2026 17:34:43 +0000
Manifest this update:     Sat 28 Mar 2026 17:34:43 +0000
Manifest next update:     Sat 04 Apr 2026 17:34:43 +0000
Files and hashes:         1: ETYYsNQQaCrAapAdZbuayVXtieA.crl (hash: ApkZC21XJgLE8FLcsnKWSMq9McY0a+IrEnnhixbRHOs=)
                          2: 04421FB4C2A911EBB201FE39C4F9AE02.roa (hash: 7mK7C2dDA9Pr5XARK5lfOZOhUbUYxwvET636T8UBOLs=)
                          3: BA3A46C28D3211EB9BFE873BC4F9AE02.roa (hash: stFWg1dMHznKMtzRSOUwWm0CGmuogU2NNcwYBYm0LzM=)
                          4: 93713A1442F311EDA8889068C4F9AE02.roa (hash: kW/azHIo/hS4GG4jZMMnW9bGd24sdPe70lFUMVnm2rM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl
                          rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Apr 2026 17:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3883 (0xf2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91551D7, serialNumber=113618B0D410682AC06A901D65BB9AC955ED89E0
        Validity
            Not Before: Mar 28 17:34:43 2026 GMT
            Not After : Apr  4 17:34:43 2026 GMT
        Subject: CN=69c81133-fcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:2a:40:9f:8a:26:27:66:eb:1b:01:93:a4:
                    43:1d:69:9b:51:d8:a1:56:39:f3:a0:da:fb:9d:4e:
                    d8:78:bb:d7:23:26:d2:51:9a:4a:d3:24:71:91:e9:
                    8d:c2:45:d2:72:d0:9e:71:c9:fb:5d:91:9c:a1:16:
                    a0:8d:b2:79:32:c0:17:42:9a:3b:eb:a6:97:d0:bc:
                    7f:11:1d:14:14:72:16:5c:7e:2b:a4:bc:47:6a:57:
                    d5:ba:0e:d5:94:6d:ee:31:7c:eb:35:62:01:d9:dd:
                    47:e8:ec:3c:82:70:c4:0c:05:66:5f:9b:04:d1:35:
                    99:e4:de:e3:74:9f:ea:6c:b1:e6:d4:fb:ac:5f:f9:
                    ef:b6:ff:7b:ba:b3:7a:11:50:e8:59:ce:dc:06:be:
                    fb:f3:b9:8b:1e:c8:5c:da:c3:61:e6:c6:5d:c4:f6:
                    3b:0b:9d:36:b7:3e:11:9f:ee:a7:ff:60:cd:2a:cc:
                    f3:d8:00:32:63:3c:b6:93:5b:1b:10:10:cf:34:b7:
                    17:8d:39:e8:0c:f9:44:58:9f:2f:08:6e:53:2d:c7:
                    fd:ed:c0:7d:08:2e:ec:22:90:9d:98:8c:10:34:a9:
                    9c:9a:d3:5e:ec:d2:ea:61:00:dd:1c:72:e2:2a:7e:
                    00:86:3d:0c:7e:d9:34:b2:74:4b:a6:d8:e8:72:4b:
                    2b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:8F:7A:5C:FA:8C:69:0B:DC:55:B4:31:7D:1A:45:25:46:89:E1
            X509v3 Authority Key Identifier:
                keyid:11:36:18:B0:D4:10:68:2A:C0:6A:90:1D:65:BB:9A:C9:55:ED:89:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ETYYsNQQaCrAapAdZbuayVXtieA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91551D7/68F092929E2F11E9B2E5280AC4F9AE02/ETYYsNQQaCrAapAdZbuayVXtieA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a3:13:c2:43:e1:c1:ce:b8:9f:fa:88:14:55:41:1f:bb:64:
         c5:d6:23:19:04:cd:5c:46:f5:b2:1f:2a:7f:f5:d5:b7:70:16:
         4b:48:6e:28:63:b5:f0:43:1c:b0:19:2a:c5:30:7b:60:c8:ec:
         5b:c1:d8:b6:95:32:11:16:c2:5a:0c:bc:bb:12:69:65:39:86:
         c8:a8:6e:55:43:87:a7:48:f7:65:5d:7c:05:d6:7a:40:24:71:
         a0:2d:0b:3b:d8:67:93:f6:aa:cc:04:01:4a:a4:77:5a:69:cf:
         81:e8:c0:c7:2b:37:cc:82:d3:9d:5f:d2:be:e6:62:93:18:b2:
         1b:02:2e:6d:04:a7:1f:2d:c8:73:ef:eb:cc:eb:fc:48:94:54:
         95:13:79:81:2a:c1:48:c4:21:9c:c2:26:25:de:c6:9a:ab:c5:
         9f:99:f1:36:0c:a2:d0:10:0d:a6:ca:a7:4e:63:40:f6:81:06:
         98:8d:65:2b:86:b5:ed:5f:a8:e0:8f:69:fc:21:27:04:e7:bd:
         7c:f7:cc:bf:e3:f2:fd:60:83:d0:e4:8c:2c:2b:6a:82:ea:da:
         b2:1b:3e:f0:7d:4e:f8:b0:c5:3c:c5:77:40:5f:c9:d0:25:f7:
         29:3d:16:08:97:03:b0:0e:57:66:a9:08:59:54:81:6a:c3:49:
         fa:49:61:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:51 2026 by rpki-client