Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
File:                     EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json)
Hash identifier:          YrmEYnKU0rlfLoW0xx8ZjrWkQxbpbFboU6sV+ZcEU4I=
Subject key identifier:   9E:3E:27:3B:85:19:F6:AF:A0:BC:F3:52:F1:AB:FF:B2:A3:C1:41:A2
Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE
Certificate issuer:       /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
Manifest number:          013A
Signing time:             Thu 21 May 2026 05:40:36 +0000
Manifest this update:     Thu 21 May 2026 05:40:36 +0000
Manifest next update:     Thu 28 May 2026 05:40:36 +0000
Files and hashes:         1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: RPErsA1QFhfvdh9biMe6JfdAvYyAv54DM+EH1UEDPOo=)
                          2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: /KryMHMfzm4mv+PmAUUQ97+ZD6cBoGkFzqrA/qBGskk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl
                          rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE
        Validity
            Not Before: May 21 05:40:36 2026 GMT
            Not After : May 28 05:40:36 2026 GMT
        Subject: CN=6a0e9ad4-7b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:39:95:21:37:e9:db:42:95:c0:58:6f:41:
                    16:2b:c0:09:4e:b3:ee:4d:8c:fe:c1:62:1f:6e:da:
                    a5:13:d8:1b:93:1a:bf:60:6c:8a:a6:36:32:02:b8:
                    ad:3b:2a:db:3b:27:03:db:11:6c:0d:20:f6:8b:bb:
                    6c:bb:a8:12:10:f5:f5:7e:ff:5f:41:ea:4c:e7:83:
                    eb:13:e2:ba:8f:cb:60:ef:cd:de:55:ce:8b:7e:a3:
                    a5:cb:3f:d4:58:9d:04:6f:f1:da:58:92:87:f1:fd:
                    3c:84:d7:cb:3f:9d:d4:f2:a0:89:f6:8e:bd:31:4e:
                    a5:ab:5f:0b:56:f6:de:d1:70:e0:9e:ff:01:32:a0:
                    9e:3f:34:51:c4:ee:ff:24:8c:c8:25:cb:8f:bc:4a:
                    26:f6:f1:ef:0d:67:14:e3:90:ed:1e:28:11:83:6c:
                    7a:98:b8:9f:5d:27:7d:51:46:b8:68:53:47:80:3b:
                    aa:74:ff:62:3c:27:d1:46:db:82:b0:8d:5a:11:fe:
                    5b:a8:19:fc:34:68:8e:27:82:6d:53:83:bd:1d:eb:
                    10:33:ec:b2:95:93:6c:c4:eb:f5:9a:d8:6a:60:44:
                    39:3d:9c:1a:3a:b5:3d:89:0b:fe:d2:cf:64:c2:4c:
                    c7:72:13:09:6b:7e:66:19:87:52:3e:cb:9b:65:6e:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:27:3B:85:19:F6:AF:A0:BC:F3:52:F1:AB:FF:B2:A3:C1:41:A2
            X509v3 Authority Key Identifier:
                keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:31:79:d8:0b:6a:58:7e:3f:cc:bb:e6:b2:0a:a9:42:07:3b:
         c8:e2:3e:50:3d:99:d7:8f:af:4a:82:ce:3b:d8:91:92:b3:87:
         37:68:db:75:b8:53:e9:9f:0d:72:a5:5d:de:f6:2c:a0:66:d3:
         9a:40:2e:23:66:3f:73:d9:e8:04:cb:36:0d:3b:e0:4b:bf:04:
         6f:e9:e1:93:bf:69:ff:73:b8:13:0d:5c:30:7e:94:0a:8f:fb:
         76:68:69:60:e7:5a:97:8d:46:0f:e5:52:c0:d3:d1:ab:ec:8a:
         52:20:fe:67:8b:1d:2f:a1:4f:40:f6:93:db:50:dd:cb:b6:7c:
         3a:f7:f3:71:d7:ec:93:f9:f7:03:77:54:e2:8e:3b:6d:1d:30:
         fc:b0:de:2d:05:dc:47:ac:99:08:26:3b:27:f6:ed:c9:c5:38:
         ad:e5:1f:d4:b5:9e:37:15:57:d1:ac:05:57:f2:86:da:66:32:
         a2:02:05:d9:17:d9:f8:a2:8a:9b:be:45:c5:c4:da:f9:9e:03:
         b1:c0:fd:87:60:04:b2:1e:9d:dc:f0:50:2f:39:de:b6:05:f6:
         5f:c7:ea:ca:c4:24:35:46:af:ee:f5:5f:64:9a:6b:52:63:52:
         3c:b7:6f:25:d5:a0:9d:06:06:ef:69:33:77:99:9c:b2:a5:e1:
         82:e9:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:24 2026 by rpki-client