Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
File:                     EiOAOGQwr9Y_NklEdk4bNBhj0No.mft (raw, json)
Hash identifier:          VMeLjJRI76RKd2arxWeLwbs5oAcXhoYqewkCwr+M7Pc=
Subject key identifier:   F7:67:5E:0D:81:DA:E1:2F:DD:CA:CF:AE:47:C5:EF:C9:37:56:4D:45
Authority key identifier: 12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA
Certificate issuer:       /CN=A9156AFF/serialNumber=122380386430AFD63F364944764E1B341863D0DA
Certificate serial:       BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
Manifest number:          BB
Signing time:             Sun 05 Apr 2026 06:24:30 +0000
Manifest this update:     Sun 05 Apr 2026 06:24:29 +0000
Manifest next update:     Sun 12 Apr 2026 06:24:29 +0000
Files and hashes:         1: EiOAOGQwr9Y_NklEdk4bNBhj0No.crl (hash: 9pii6PLTwdORws+cvGt0rjvUMPBWwJjoIwztsS1um0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl
                          rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:24:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156AFF, serialNumber=122380386430AFD63F364944764E1B341863D0DA
        Validity
            Not Before: Apr  5 06:24:29 2026 GMT
            Not After : Apr 12 06:24:29 2026 GMT
        Subject: CN=69d2001e-6a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:de:9c:1a:20:89:82:b3:00:fe:47:26:a7:
                    f5:7d:1d:69:22:fd:8a:8f:31:a7:9f:e4:33:f0:37:
                    77:2b:e4:ca:8f:47:ca:46:24:bf:7b:34:5f:e7:f6:
                    5d:4a:08:c4:74:91:dd:e0:54:c3:4e:4f:ba:03:cb:
                    0c:be:b4:92:c3:d7:57:f3:46:95:65:02:51:2f:91:
                    ca:74:8e:74:43:48:bf:1e:03:da:eb:13:fb:90:b6:
                    f1:d3:d0:77:45:52:b9:7a:cb:7a:53:ba:8a:63:88:
                    c6:69:e3:82:20:e5:9e:f6:19:06:24:25:a2:40:00:
                    e3:b4:ea:f9:19:81:1b:32:bd:a6:93:3f:de:e0:2d:
                    8b:2e:16:06:1b:a6:c5:a5:11:3f:92:b8:91:d1:68:
                    0c:59:39:f4:ee:8f:b6:c9:10:ce:40:bd:47:32:cb:
                    9f:b4:88:5b:9e:72:ae:57:d3:cb:7a:fe:db:68:55:
                    7d:c2:4e:14:f4:dc:59:2a:bf:af:da:a5:18:27:f2:
                    15:54:98:0d:d9:1c:49:d9:7c:55:34:20:40:b1:a5:
                    31:e8:c7:55:73:98:2c:5c:bc:a6:4c:3c:c6:5e:81:
                    47:bf:5f:ad:17:78:e8:85:b1:a8:c4:c9:9f:0f:0d:
                    c0:81:06:e2:4a:6b:bf:b5:6c:4c:89:22:aa:68:41:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:67:5E:0D:81:DA:E1:2F:DD:CA:CF:AE:47:C5:EF:C9:37:56:4D:45
            X509v3 Authority Key Identifier:
                keyid:12:23:80:38:64:30:AF:D6:3F:36:49:44:76:4E:1B:34:18:63:D0:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EiOAOGQwr9Y_NklEdk4bNBhj0No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156AFF/3B7B31B614D811F0A37EC04EC4F9AE02/EiOAOGQwr9Y_NklEdk4bNBhj0No.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:f4:81:a8:5a:e7:14:a7:53:01:f4:9d:79:cf:e3:9c:e1:
         48:bd:67:e9:cf:53:95:7f:f9:a0:5a:9e:1a:bc:be:9e:1e:a5:
         79:f4:dc:76:8a:c4:1c:11:e5:3e:3b:88:20:15:bf:db:c9:33:
         c4:3d:f0:a4:b1:d9:c7:b5:d4:6a:59:19:a7:42:65:db:fe:7c:
         2d:21:7a:b4:df:35:c8:2e:ea:88:ab:49:34:e4:e2:b9:19:60:
         83:e9:39:9f:26:ea:08:93:8a:3e:a7:85:a0:f3:ed:9b:e7:95:
         01:e3:2e:7a:d4:f1:c5:f9:70:6d:ba:3c:be:08:b4:14:8c:b9:
         10:5a:db:ea:33:a4:13:eb:fd:3c:2b:d0:cb:9d:bd:26:f2:49:
         df:7a:a2:d9:da:90:a1:8c:da:7f:6f:75:f1:5d:a7:ae:34:fb:
         03:e7:64:8a:bd:3e:a3:31:92:cb:bc:55:11:5c:c9:7d:33:4a:
         49:d7:2b:42:40:b1:7b:7f:ef:13:88:ea:97:21:de:15:c2:03:
         bd:de:e8:09:83:10:97:dd:31:33:2e:85:ab:2f:10:6f:09:38:
         65:d6:c7:7e:db:e8:6a:ba:e1:bf:7f:a6:52:71:4c:70:28:ba:
         33:2c:41:c8:ac:60:86:b9:1a:4d:85:82:27:b2:53:ef:63:7b:
         cb:4c:a3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:54:29 2026 by rpki-client