Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier:          FiQJ/0BVOuUIp+HGNvqu+EYa4l7hwOtGjbp7c0HWvr0=
Subject key identifier:   B9:EB:F6:F6:1A:F2:C1:40:72:0E:AB:C0:1C:E2:F5:0A:2F:B0:13:52
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer:       /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number:          0183
Signing time:             Sun 05 Apr 2026 04:03:22 +0000
Manifest this update:     Sun 05 Apr 2026 04:03:21 +0000
Manifest next update:     Sun 12 Apr 2026 04:03:21 +0000
Files and hashes:         1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: lFJ71BRAETUFEJC/fLTaSP/0/nDGQObM1uWqyCyJkA8=)
                          2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
                          rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Validity
            Not Before: Apr  5 04:03:21 2026 GMT
            Not After : Apr 12 04:03:21 2026 GMT
        Subject: CN=69d1df09-ff30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:ff:b9:f4:df:f2:cb:20:9f:85:16:04:67:
                    d1:b5:f7:01:58:49:73:9c:41:14:1b:ee:4b:bc:e6:
                    ee:fa:72:0a:05:6c:89:c4:69:90:e7:a3:09:d2:3d:
                    d3:99:9e:f3:88:00:86:00:a8:bf:1c:8f:1f:d0:62:
                    db:52:18:46:4b:e5:59:83:5d:52:6b:b5:c2:98:c0:
                    bf:a2:3f:84:4e:6c:98:15:2f:77:43:d2:23:94:b8:
                    78:b2:8a:a4:e5:49:69:86:58:66:a7:d4:b2:3f:c1:
                    fc:0a:7a:88:4a:63:27:af:2b:4a:f5:74:12:4d:9f:
                    8b:83:d6:34:e4:f5:17:cd:f9:4b:3f:69:6d:3b:de:
                    db:6d:33:1d:a7:ee:1b:e2:28:70:d5:e8:dd:16:51:
                    12:d5:d3:fb:a9:82:be:35:02:1c:de:7c:8b:2c:b5:
                    c2:38:3b:b9:78:c7:6a:70:9d:ce:55:15:70:86:2c:
                    42:24:bf:33:b7:6b:c9:f0:65:53:23:00:b6:06:5a:
                    8a:9e:12:2c:2f:61:99:9b:b9:1d:5d:f4:d2:6e:70:
                    bd:75:71:2c:03:5b:75:9e:08:ce:43:13:99:b3:bf:
                    33:f1:6a:2e:e3:8c:df:fd:51:44:19:14:49:bc:35:
                    9f:4a:e2:b2:40:2e:ba:6d:10:10:1b:03:16:8c:58:
                    b4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:F6:F6:1A:F2:C1:40:72:0E:AB:C0:1C:E2:F5:0A:2F:B0:13:52
            X509v3 Authority Key Identifier:
                keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:71:23:d6:7f:76:1f:d3:c3:24:fd:ee:10:b4:fb:d5:f9:f6:
         16:13:50:11:8f:28:0c:21:7a:1d:ab:fb:20:9c:a7:2d:3b:6d:
         0c:53:c5:08:4b:dc:2a:26:5e:c0:5a:65:48:55:67:de:74:87:
         dc:22:f8:62:5c:8f:ba:bf:21:26:f4:75:b6:12:e0:51:80:2d:
         b3:8f:89:6b:15:0a:78:83:8f:51:f2:f1:e0:2f:8a:28:b9:db:
         b6:12:df:1b:6c:52:bc:b2:70:28:94:ef:62:1b:11:75:2d:60:
         dc:7d:61:79:69:31:c5:c2:5f:23:25:ba:f9:fe:49:90:30:29:
         cc:8a:53:b5:ad:74:0b:5e:76:bf:51:92:ac:57:d5:f0:d1:1b:
         61:d5:cf:e0:8d:c2:00:85:0a:5a:b5:d1:31:41:10:a7:15:77:
         05:83:d3:fa:be:6e:8b:4e:e9:d7:87:23:ec:9e:4e:3a:e3:4e:
         7b:f3:81:3b:1c:29:40:65:ee:98:a2:b5:f8:29:96:54:23:25:
         3f:7e:56:04:d3:40:fe:60:3e:a9:72:38:7d:5f:92:37:d3:e6:
         e3:47:d4:de:2f:43:d2:3e:ea:08:99:05:17:4f:38:9c:4d:a8:
         82:6e:3d:1b:00:15:16:86:0a:92:5d:d9:5e:1b:19:83:5a:3c:
         7a:ce:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:35 2026 by rpki-client