Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          QyRYpW2zUlHrhf8Di4mhluaRfjITWO+IYtGoeorgj5w=
Subject key identifier:   33:2B:92:4E:55:E0:2A:D3:46:1E:EF:64:F2:7F:2C:AA:46:4C:5C:DF
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       0526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          051F
Signing time:             Tue 21 Jul 2026 00:24:12 +0000
Manifest this update:     Tue 21 Jul 2026 00:24:11 +0000
Manifest next update:     Tue 28 Jul 2026 00:24:11 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: 54un9cdwe/MgLXkFABYwOnJt90SU3dLZFcwYQNa014E=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Jul 21 00:24:11 2026 GMT
            Not After : Jul 28 00:24:11 2026 GMT
        Subject: CN=6a5ebc2c-e72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:b1:34:7e:94:4e:82:67:4f:d7:65:fb:8c:
                    19:a4:31:8e:59:88:c8:bd:0a:0e:13:e5:47:4f:70:
                    ca:9f:98:57:fd:1d:f7:73:66:2e:d0:01:aa:4c:7c:
                    3a:b5:43:de:97:a3:d1:c1:f7:33:24:6d:7a:1e:e2:
                    9e:a5:72:6d:39:e6:15:e5:e7:37:5a:12:6b:fe:e5:
                    98:41:3e:2f:0f:6e:10:66:97:38:af:8a:d5:16:21:
                    75:6a:2f:ab:f3:ed:c8:c4:97:db:8d:2e:a9:28:87:
                    67:b6:49:b3:58:97:59:a0:75:e6:a9:04:46:a7:3a:
                    20:33:02:a3:6a:34:61:4f:db:ad:44:38:6e:82:db:
                    21:55:13:9f:0f:39:0c:09:83:13:30:7c:1e:02:41:
                    b2:a1:55:b8:76:32:4b:21:d8:15:6d:01:e2:f3:c7:
                    c7:68:c4:30:fd:ea:30:4b:15:4b:8c:d3:a4:d0:5f:
                    08:1e:1b:cb:cb:33:df:b4:1c:fd:ef:b2:52:56:3e:
                    c1:73:59:bd:bb:cb:fe:87:be:f1:af:f1:5b:9b:a4:
                    bd:52:43:67:39:e6:f7:31:1e:72:d5:59:be:1a:32:
                    43:b6:53:bc:f9:0c:86:f5:e2:19:6f:7e:32:bf:35:
                    28:4f:37:ad:8e:2c:74:27:81:be:24:94:af:9c:57:
                    d3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2B:92:4E:55:E0:2A:D3:46:1E:EF:64:F2:7F:2C:AA:46:4C:5C:DF
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:73:71:b3:ea:c6:7b:3d:35:64:7e:ac:b0:7e:49:3a:e3:7e:
         d5:16:36:a3:f1:59:ae:4b:49:be:79:79:aa:f9:a8:54:62:1d:
         7a:4a:11:a6:db:24:b9:01:fe:91:25:59:18:45:fa:7f:c6:72:
         dc:cb:be:ff:72:09:1b:6d:7f:24:8e:bc:64:dc:f0:69:f3:86:
         dc:8f:c8:35:b7:0c:e4:6f:d3:fd:63:26:d2:c7:62:30:7b:64:
         76:e8:67:73:3d:cc:51:50:15:10:6a:4b:9d:03:9a:f6:f6:0d:
         6f:e5:e4:f1:cb:67:5b:d6:34:f9:5f:7b:af:65:12:28:1a:55:
         c6:8c:3b:49:12:0a:37:a4:c7:64:2b:cb:21:f8:d0:2c:fb:fc:
         b2:31:3f:04:46:10:32:78:44:02:71:1a:1b:32:ee:17:9a:e1:
         43:c0:0f:4f:6b:67:0a:a0:cb:65:ed:40:0e:03:76:a6:c0:4f:
         de:b6:ff:db:9a:81:f0:84:4c:6d:09:de:55:e1:b8:c5:b4:94:
         b8:3a:34:da:77:3f:16:c8:9a:cb:98:e0:fc:15:c7:30:f8:a8:
         38:cb:b1:5a:ef:ce:db:24:8a:5c:c9:5f:6e:51:c1:61:89:cd:
         49:21:c0:e5:93:b9:31:1a:11:49:72:c7:9c:5b:cc:68:88:5e:
         2b:4e:a8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 04:03:42 2026 by rpki-client