Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
File:                     EjJ9_J6Ig827bG7us5JfLIwPfl4.mft (raw, json)
Hash identifier:          KcDXamJ8mK+sgNmrpq64NstuoaVr64Z9pf+Gp/62DcU=
Subject key identifier:   6F:A1:7E:D1:21:E5:04:10:BB:94:93:E7:28:CC:70:D8:23:F8:86:19
Authority key identifier: 12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E
Certificate issuer:       /CN=A91833FF/serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
Certificate serial:       12C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
Manifest number:          12B8
Signing time:             Sat 04 Apr 2026 16:57:15 +0000
Manifest this update:     Sat 04 Apr 2026 16:57:15 +0000
Manifest next update:     Sat 11 Apr 2026 16:57:15 +0000
Files and hashes:         1: EjJ9_J6Ig827bG7us5JfLIwPfl4.crl (hash: htgd9VUuKOOdM4vhrtEBdjFmMM7UQsaB9/cOhWdJAIM=)
                          2: 659F6E188F2211E98AC7590DC4F9AE02.roa (hash: W1AVNjvXiALIc751cRSzggmADJNyklSoFWJXhsq/Le0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl
                          rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:57:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4807 (0x12c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91833FF, serialNumber=12327DFC9E8883CDBB6C6EEEB3925F2C8C0F7E5E
        Validity
            Not Before: Apr  4 16:57:15 2026 GMT
            Not After : Apr 11 16:57:15 2026 GMT
        Subject: CN=69d142eb-4e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:d9:f5:c5:43:f0:73:ad:5e:ba:06:00:bf:
                    31:ac:f7:25:22:75:fd:2a:80:ae:bd:75:79:16:44:
                    13:6d:56:1e:93:2d:50:b5:f3:45:06:4d:79:16:fe:
                    cc:b2:7e:42:d7:4d:d4:19:04:db:d5:36:06:2f:b2:
                    9a:e0:9a:8f:59:10:58:aa:60:58:ac:55:8c:cc:b9:
                    ae:fb:5a:e2:4f:5a:fa:9b:93:2e:d2:00:12:d0:71:
                    8d:7e:2d:62:fd:f3:75:ec:95:4b:ef:cb:15:a0:3f:
                    93:53:ad:0a:66:87:84:26:26:f2:ce:7e:7f:51:da:
                    4a:1e:11:d7:70:6d:b2:52:91:37:bf:27:2e:92:f6:
                    ba:a0:d8:41:74:66:9a:d8:c4:3b:6c:41:79:d8:2b:
                    d4:24:0e:d9:49:a7:d2:bc:28:c9:ad:ea:ca:a4:24:
                    e6:48:05:b8:ff:61:8b:99:4f:20:d7:27:60:f7:69:
                    ca:4d:67:ae:3d:ed:cd:8c:31:47:14:a6:96:a6:6d:
                    5f:9f:40:22:e8:a9:13:2f:a0:57:92:6c:49:39:3e:
                    c8:b5:73:2d:4f:38:07:bb:00:f8:8f:94:09:1c:c6:
                    4d:07:a0:fa:c4:d4:ef:0a:77:08:0e:f1:b6:fa:6d:
                    18:3d:a8:c0:68:58:29:fd:63:a2:7e:56:6a:9d:f0:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A1:7E:D1:21:E5:04:10:BB:94:93:E7:28:CC:70:D8:23:F8:86:19
            X509v3 Authority Key Identifier:
                keyid:12:32:7D:FC:9E:88:83:CD:BB:6C:6E:EE:B3:92:5F:2C:8C:0F:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EjJ9_J6Ig827bG7us5JfLIwPfl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91833FF/14EFE7E4E07D11E8A5F0FB35C4F9AE02/EjJ9_J6Ig827bG7us5JfLIwPfl4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:68:0d:6d:a1:f3:b3:e0:6f:66:f0:d5:1d:eb:00:4d:01:d8:
         66:e7:65:5a:68:af:8b:25:dd:76:9a:6d:94:9d:9e:92:61:5b:
         71:6d:5d:1d:48:85:92:01:f7:b8:18:f1:9e:15:6f:ef:41:2d:
         b0:e3:55:55:10:0c:e0:11:f0:5f:10:52:34:88:ff:f2:33:1b:
         56:d8:f5:4e:2d:0b:bd:bb:9f:c6:5e:54:56:3b:31:14:33:e7:
         ec:3b:2f:9d:8e:81:08:aa:c4:2f:f6:90:c1:de:df:7c:ce:33:
         16:a5:1b:01:42:6c:6c:fe:44:ed:58:ec:38:ce:46:2c:56:c9:
         2a:c7:98:bf:bb:15:be:71:a2:17:8e:bc:23:ec:d7:9b:c7:d8:
         ea:e1:d9:a6:54:84:f9:06:99:06:bb:93:f1:63:f0:7c:6e:30:
         80:36:f9:1f:18:1e:f1:5e:5a:f5:b1:58:6b:4d:9e:bb:54:74:
         c3:ea:fc:f8:97:5f:b7:4b:07:bb:c8:73:7b:bc:94:6d:01:17:
         63:87:07:03:c1:cf:ce:5e:b7:a4:c7:13:f0:3b:55:d2:ec:85:
         f5:97:83:b9:44:9c:0f:a3:46:b1:26:ab:60:53:02:0b:c7:51:
         46:5e:99:2a:79:d2:ff:52:3d:a2:b2:91:56:ad:a6:86:13:f7:
         d8:0c:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:35 2026 by rpki-client