Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
File:                     EAXM1eGCMPuprdPSf4XaOPE-QXI.mft (raw, json)
Hash identifier:          etPk369DDz/SH3HS+PgnszZMTjiu7mCWsA7leTz3sWA=
Subject key identifier:   20:D3:F2:E0:C7:CF:AE:EE:39:63:C8:59:ED:EC:DC:1D:24:9C:59:45
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Certificate issuer:       /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial:       0457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
Manifest number:          03E1
Signing time:             Mon 09 Mar 2026 00:14:56 +0000
Manifest this update:     Mon 09 Mar 2026 00:14:55 +0000
Manifest next update:     Mon 16 Mar 2026 00:14:55 +0000
Files and hashes:         1: EAXM1eGCMPuprdPSf4XaOPE-QXI.crl (hash: JcwATcqj523OW2eA48pTCvidVSKVK5e7GZSwl4hUOoc=)
                          2: 79186F1A039911F1BC7C88883B3D8C67.roa (hash: C8pVkBYnSVefXoeGXotgcKUylbtPsOzrObp6L/3rmVE=)
                          3: 4A27AA70305B11F08E81A33BC4F9AE02.roa (hash: 6gmB7e2/TTgQSWx3VnY7mRENxpPMfy8g2P+EnTlXmso=)
                          4: 1B2129BEA89C11EFB7509755C4F9AE02.roa (hash: a0RqWFhlleo0IJ3svANvJek4iA+KU/t4gkcKeF2xAQk=)
                          5: 118AD6DE11C611EEA9D06D11C4F9AE02.roa (hash: 0SOkm+BXSDSpdPzUTvjh1AEylkmoBHEkQgyOqkC+tHQ=)
                          6: 3BFEA04CB6A611EDAF611B68C4F9AE02.roa (hash: Ng6ZAHZjd8iEWPNufSxg02ATrLWYufmfc+mSm42j+M4=)
                          7: C68D1AE69B9611EFB95B8038C4F9AE02.roa (hash: /c+DOCRTYY/llMZH2mW34+F7qtixtEHbGr1z8QLrDSQ=)
                          8: 7CCE329266F711EF86880681C4F9AE02.roa (hash: P7aOwAoQCD24agMwYkDuPM/PBiY4l/nBmbknOmgKu4U=)
                          9: DBEED4E0B44911EEA11B100BC4F9AE02.roa (hash: FHMw7TIkQ5w3jytcpOZYdMbiPYWeOiZ6Fey0Hmv9PZw=)
                          10: 5BE270E26BBC11EFA9584A4EC4F9AE02.roa (hash: WxRqUacvVA6NIvqL4tzKH3OPAsoLWQLxol9FjYHJSPU=)
                          11: 78227BC8039911F1BC7C88883B3D8C67.roa (hash: f8lGC/TQI+v4wy9cX9FY3fSgK/i2T8wCtptDQYjU/lo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
                          rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Mar 2026 00:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111 (0x457)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
        Validity
            Not Before: Mar  9 00:14:55 2026 GMT
            Not After : Mar 16 00:14:55 2026 GMT
        Subject: CN=69ae10ff-b96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:8f:a8:25:4a:c4:24:77:54:f9:90:2b:fd:
                    e7:1b:31:6e:9b:b6:42:7a:1a:22:97:4c:56:7e:97:
                    b9:ed:07:9f:fa:28:da:c2:b7:19:ba:34:b2:a7:76:
                    96:61:ca:4f:76:52:01:f7:ec:67:d2:9c:47:46:fb:
                    c5:f5:1b:69:bf:a8:37:23:9a:98:9f:9d:d3:67:b7:
                    59:21:7f:cb:b6:b9:72:f8:de:e9:81:c6:0d:99:46:
                    c9:78:1a:1f:17:fe:48:1a:f8:e9:fe:e5:44:f2:f9:
                    59:0a:8d:0b:62:96:81:6e:c5:66:54:94:ea:65:a6:
                    f8:94:33:20:a2:66:89:9f:75:dd:16:da:b0:49:f6:
                    c3:8b:43:6f:7f:8a:33:f5:18:b8:0b:79:74:0e:13:
                    58:92:fb:ac:6a:fe:5b:6b:9b:d2:ea:2c:5e:9f:58:
                    7c:3c:e8:a9:d4:a4:39:24:13:be:2c:f9:44:0b:86:
                    f3:49:36:12:e2:df:a2:19:52:af:f0:99:9a:c1:a9:
                    f8:0b:84:3f:21:85:58:09:67:b1:da:11:6a:ba:f0:
                    08:f5:81:6e:62:ce:c6:52:ed:0a:3c:21:f0:1f:f3:
                    af:00:b4:3f:31:2d:94:05:ad:03:6b:91:17:63:9c:
                    09:6a:25:eb:f0:76:9c:f8:7b:69:40:8e:6e:c6:1c:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D3:F2:E0:C7:CF:AE:EE:39:63:C8:59:ED:EC:DC:1D:24:9C:59:45
            X509v3 Authority Key Identifier:
                keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b3:15:3e:8d:65:ce:c7:d2:96:71:30:04:ac:bb:14:3e:8b:
         01:34:b1:6c:be:21:ed:43:e1:d6:20:53:7c:30:97:04:6c:2a:
         28:fc:80:37:9b:73:c7:7b:be:a0:b1:9e:1c:6a:89:6a:9e:ec:
         29:92:85:97:c9:ea:f8:0a:38:a3:b5:7c:0a:a9:12:4a:3b:cd:
         41:63:24:f0:7c:ed:19:d9:4b:ce:a4:79:92:0a:85:ec:02:3d:
         1c:c3:ef:e4:67:20:a2:70:be:57:f9:37:0a:05:ea:e0:b2:73:
         08:0b:e9:f8:7a:31:c0:ae:06:fe:e0:37:ce:b2:a7:f2:90:b2:
         69:75:ac:84:b6:e7:6e:03:d4:0d:20:22:b5:c5:ce:d2:23:8a:
         6d:ea:f8:30:ff:7e:1e:26:93:be:7a:40:2d:f1:6b:7a:8c:4a:
         d4:5a:44:13:e0:6a:06:7a:55:2e:8d:83:eb:5f:6c:7c:78:d3:
         11:b8:33:f0:3e:38:67:9b:6d:6a:f1:07:3b:a1:98:4c:59:43:
         b7:13:ee:18:28:f4:41:33:e7:a5:3d:d1:fd:24:91:96:45:57:
         1b:d9:03:0b:fa:fc:d4:17:d3:c2:f8:19:27:e8:59:a0:f7:aa:
         94:fe:1f:d2:26:63:3a:74:f5:64:ac:8e:a3:06:46:28:a9:fe:
         6c:5c:0b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 08:08:43 2026 by rpki-client