Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          aJFErmf09zEeM6zYrSGsNK9QOjzjhpkGu3APaLAm3KQ=
Subject key identifier:   A5:27:11:3F:BF:E0:DA:23:A6:47:66:AC:CB:BE:9A:5D:08:BA:2F:F9
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          0552
Signing time:             Sat 24 Oct 2026 23:23:32 +0000
Manifest this update:     Sat 24 Oct 2026 23:23:31 +0000
Manifest next update:     Sat 31 Oct 2026 23:23:31 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: CdZO2yu3MSNOnsnVAdUE0Jy9o/UvkPr1NZEugRmIkWY=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: b2Il84vwzqv/ef+O+Pns3mkcqkG1cdU06P6OcqDISP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 23:23:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: Oct 24 23:23:31 2026 GMT
            Not After : Oct 31 23:23:31 2026 GMT
        Subject: CN=6add3df4-032f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:b2:4f:a9:aa:c2:a3:04:7b:ca:dd:8e:2e:
                    7c:7e:43:b5:66:0c:42:94:c7:6b:99:85:86:67:2e:
                    57:1b:0c:16:dd:fb:34:3f:1f:c2:09:73:cd:b2:7c:
                    3c:54:d5:89:1d:7a:d5:c2:9a:b8:25:93:81:3c:28:
                    08:3b:32:bd:ef:d3:08:18:50:38:91:0e:cd:e3:50:
                    d6:d9:a3:ef:49:8b:6f:49:76:3f:e4:b8:1b:cb:89:
                    e2:53:c2:5d:cd:ee:c8:fc:e2:1d:f6:ba:d0:9d:48:
                    a8:70:d7:b6:05:d5:eb:2f:ae:89:98:3c:77:06:19:
                    d3:fb:e7:1e:c7:4d:d7:7e:2a:11:71:97:6d:77:74:
                    33:43:df:d6:f9:17:a5:4c:7b:6a:72:1d:ce:56:d6:
                    89:02:c8:3f:4a:0a:3b:75:f4:08:a6:5e:98:d6:ef:
                    95:bb:81:89:d0:0f:e9:40:ad:d1:66:e2:2f:62:14:
                    e6:3b:fb:f5:75:dd:06:4d:43:c2:e2:22:47:65:2b:
                    d6:13:d5:17:f6:fd:14:59:52:11:e7:78:d1:f1:24:
                    bd:34:34:e3:60:00:09:d7:e8:8e:c1:ef:11:9f:e6:
                    9d:14:3e:4a:33:b2:0a:b2:2f:7a:3c:59:51:a6:d4:
                    33:0a:3b:88:13:99:25:bc:44:57:6e:91:62:72:91:
                    00:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:27:11:3F:BF:E0:DA:23:A6:47:66:AC:CB:BE:9A:5D:08:BA:2F:F9
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fb:a8:65:32:e8:00:fe:03:7d:11:34:08:1c:f6:fd:32:9d:
         15:d0:ce:54:93:08:9f:ad:67:e6:6b:c3:95:1e:51:23:59:4d:
         f7:52:25:4c:78:8e:45:c1:27:be:43:c8:45:c1:40:60:b5:4d:
         0a:44:0d:4f:9c:85:1f:1f:e8:69:6d:6d:14:a2:cc:9e:50:f0:
         a1:90:06:8a:6a:4b:4b:49:b6:e2:81:ef:55:fb:07:da:d6:d5:
         14:49:0a:70:4e:67:09:b6:ae:8a:fd:c2:bd:cc:a5:17:06:c1:
         c6:ab:ea:d8:74:be:30:53:7d:95:48:12:f9:a2:12:68:9e:5c:
         2b:ad:20:3f:34:70:4c:3c:64:ec:4c:b4:9e:17:53:e8:30:9d:
         1f:d8:3a:15:22:df:08:fd:b6:9f:b8:6f:8d:d6:0a:ce:6b:03:
         5f:00:d3:33:81:a9:a5:73:e3:bd:6e:3f:5b:90:52:21:b3:ef:
         7c:6f:ef:39:9b:90:b9:17:14:fc:fe:ae:40:56:18:ec:0d:2a:
         d7:80:03:b4:89:b7:5a:1a:45:ef:2c:1f:2b:8a:da:c5:0e:06:
         b1:cb:af:f9:94:8f:2f:40:d8:fd:31:eb:fc:59:ab:14:4d:42:
         e6:fe:0f:62:10:dc:8f:4c:53:3b:7f:69:fe:ba:29:05:b5:d6:
         e9:7d:ca:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEwMjcxMTAvBgNVBAUTKDEwMEU3NDkwOTlGQTUzODA1MTc0QkNGODMwQzNFQjIx
QzUzMDMxQTcwHhcNMjYxMDI0MjMyMzMxWhcNMjYxMDMxMjMyMzMxWjAYMRYwFAYD
VQQDEw02YWRkM2RmNC0wMzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA43ayT6mqwqMEe8rdji58fkO1ZgxClMdrmYWGZy5XGwwW3fs0Px/CCXPNsnw8
VNWJHXrVwpq4JZOBPCgIOzK979MIGFA4kQ7N41DW2aPvSYtvSXY/5Lgby4niU8Jd
ze7I/OId9rrQnUiocNe2BdXrL66JmDx3BhnT++cex03XfioRcZdtd3QzQ9/W+Rel
THtqch3OVtaJAsg/Sgo7dfQIpl6Y1u+Vu4GJ0A/pQK3RZuIvYhTmO/v1dd0GTUPC
4iJHZSvWE9UX9v0UWVIR53jR8SS9NDTjYAAJ1+iOwe8Rn+adFD5KM7IKsi96PFlR
ptQzCjuIE5klvERXbpFicpEAlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUnET+/
4NojpkdmrMu+ml0Iui/5MB8GA1UdIwQYMBaAFBAOdJCZ+lOAUXS8+DDD6yHFMDGn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAyNy8wNDIwN0RGODU3
NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0QlJkTHo0TU1QckljVXdN
YWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VBNTBrSm42VTRCUmRMejRNTVBySWNVd01hYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTAyNy8wNDIwN0RGODU3NzAxMUVDQjk1NzdBNUJDNEY5QUUwMi9FQTUwa0puNlU0
QlJkTHo0TU1QckljVXdNYWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAg/uoZTLoAP4DfRE0CBz2/TKdFdDOVJMIn61n5mvDlR5RI1lN91IlTHiORcEn
vkPIRcFAYLVNCkQNT5yFHx/oaW1tFKLMnlDwoZAGimpLS0m24oHvVfsH2tbVFEkK
cE5nCbauiv3CvcylFwbBxqvq2HS+MFN9lUgS+aISaJ5cK60gPzRwTDxk7Ey0nhdT
6DCdH9g6FSLfCP22n7hvjdYKzmsDXwDTM4GppXPjvW4/W5BSIbPvfG/vOZuQuRcU
/P6uQFYY7A0q14ADtIm3WhpF7ywfK4raxQ4Gscuv+ZSPL0DY/THr/FmrFE1C5v4P
YhDcj0xTO39p/ropBbXW6X3KZQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:07:12 2026 by rpki-client