Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
File:                     EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft (raw, json)
Hash identifier:          b7pLJdr3jvIvEaRXmq/G+AMnmEi/PDBbgSYRQfBeKNw=
Subject key identifier:   01:1A:EC:51:76:F0:77:E2:76:CC:7D:04:46:3F:3C:6B:77:45:5E:31
Authority key identifier: 12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19
Certificate issuer:       /CN=A917E00F/serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
Certificate serial:       01AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
Manifest number:          0797
Signing time:             Sat 04 Apr 2026 22:42:40 +0000
Manifest this update:     Sat 04 Apr 2026 22:42:40 +0000
Manifest next update:     Sat 11 Apr 2026 22:42:40 +0000
Files and hashes:         1: EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl (hash: K8h9MXHHoXdUY3qBPSkQfNBh8AK8hyE7G29hmgRJ1WY=)
                          2: E10C2796B42D11EEBCE04D61C4F9AE02.roa (hash: KSFUQns+jUtZXbMl5PwqohaAbLzaofo6YcJauiEke4g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl
                          rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E00F, serialNumber=12C48972F26D067A9F21B4C4FA0C86633E02C019
        Validity
            Not Before: Apr  4 22:42:40 2026 GMT
            Not After : Apr 11 22:42:40 2026 GMT
        Subject: CN=69d193e0-67e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:f8:5a:39:54:4c:bd:7e:4f:4b:e9:3e:d9:
                    d5:ca:dd:a8:22:e0:75:55:60:d4:5b:41:19:81:ec:
                    37:e3:e7:b5:ac:7a:ce:f5:ef:ba:82:c0:36:e7:30:
                    37:29:fe:9e:ef:95:6d:52:2d:4f:90:7f:18:8b:61:
                    50:c4:1f:ef:69:8d:d6:05:e6:d8:23:5b:c9:ad:ac:
                    2a:59:b2:a4:4b:7c:51:bd:9e:11:6c:1d:5f:68:5d:
                    0f:1d:34:d5:7f:68:70:25:47:5e:6a:26:24:25:15:
                    67:e8:8c:cb:ab:9f:bd:c7:f8:15:74:97:66:e7:5d:
                    e7:70:7a:97:4a:78:a1:37:f6:84:27:b9:84:29:ad:
                    df:28:b5:ad:f0:56:99:81:87:f8:6b:81:f7:c9:a9:
                    97:57:b9:25:42:9a:f1:88:9c:ef:be:25:fb:94:4b:
                    c4:83:c1:cb:89:8c:74:49:c5:4b:4e:51:26:4e:15:
                    ac:2b:b1:45:83:5f:b7:8e:ee:b2:96:fe:26:e0:d8:
                    38:ef:59:de:46:52:8c:24:80:b7:29:98:f5:83:21:
                    7b:0a:b1:c0:56:4b:db:7a:de:5a:65:d7:04:42:e6:
                    49:f8:b8:6b:c6:75:1f:16:38:1d:6d:48:1d:67:93:
                    2d:33:56:70:90:8a:88:9a:c0:99:9c:ed:d1:60:e7:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1A:EC:51:76:F0:77:E2:76:CC:7D:04:46:3F:3C:6B:77:45:5E:31
            X509v3 Authority Key Identifier:
                keyid:12:C4:89:72:F2:6D:06:7A:9F:21:B4:C4:FA:0C:86:63:3E:02:C0:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EsSJcvJtBnqfIbTE-gyGYz4CwBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/EDE48B9CEE2911EB8084B638C4F9AE02/EsSJcvJtBnqfIbTE-gyGYz4CwBk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:75:cf:a8:3b:a6:fb:37:c0:8f:25:64:83:24:ca:f8:38:
         09:d1:c2:31:05:67:4f:5a:b5:a1:dc:21:89:84:49:f8:8a:b9:
         18:00:a4:9f:5d:5a:be:a2:69:ff:c2:05:54:51:2b:49:68:aa:
         36:15:59:04:32:d5:69:3b:9e:be:5b:76:6a:4a:ea:36:7a:56:
         e3:35:f9:cf:9b:dc:8b:1e:0f:ae:9f:c6:96:b4:15:24:c7:90:
         ea:86:97:69:cc:e1:08:2a:9a:70:e7:cf:6d:94:5f:d7:64:be:
         11:72:25:82:c9:16:78:f6:c2:f2:65:48:1b:da:79:d5:eb:e5:
         d1:04:96:ad:36:f6:37:66:79:de:af:8a:06:3d:39:4d:5f:f7:
         2e:0a:5c:76:69:7f:2c:67:a0:73:09:3d:02:43:a1:de:f4:41:
         a8:7e:86:00:9a:46:b2:8f:66:2e:a8:fb:97:90:1b:6f:8c:c1:
         f5:4b:fb:1f:67:e4:39:57:af:7e:42:cc:fc:05:f5:26:17:17:
         c0:a9:9f:e8:2d:72:67:72:8b:9e:01:f2:b6:48:eb:a7:5e:a0:
         df:72:04:14:0f:67:1f:86:fc:17:4f:60:89:e4:00:6f:58:46:
         a8:a2:95:41:52:22:e9:cd:40:e2:98:02:99:68:31:d3:da:01:
         05:8a:3a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:59:59 2026 by rpki-client