Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
File:                     S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft (raw, json)
Hash identifier:          GrgzTQ9AUCNiG+BmtxS00gwnb91bEnqlVtRVX6TJb2M=
Subject key identifier:   0F:A4:B3:61:1E:4A:CD:F0:C4:E1:CE:D4:ED:BE:51:7B:4F:E3:6C:27
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Certificate issuer:       /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial:       B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
Manifest number:          B0
Signing time:             Sun 05 Apr 2026 06:32:50 +0000
Manifest this update:     Sun 05 Apr 2026 06:32:50 +0000
Manifest next update:     Sun 12 Apr 2026 06:32:50 +0000
Files and hashes:         1: S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl (hash: Rto4II7d+F0dLu/eAXvDp+vLijzkGMcerMVyJxTU0Yc=)
                          2: 2B1A3764302A11F0B211AD0BC4F9AE02.roa (hash: eajz65t2ux1KR+OQcc3Av8hhywthwVBpIhR8Ie4nBYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
        Validity
            Not Before: Apr  5 06:32:50 2026 GMT
            Not After : Apr 12 06:32:50 2026 GMT
        Subject: CN=69d20212-cc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:8e:b2:8a:b3:65:ee:94:a0:07:2e:9c:3f:
                    2f:e4:0c:a0:52:5e:02:39:8a:d6:dc:5c:6a:98:57:
                    9d:8d:d3:b3:29:6c:ef:ac:21:ca:fe:24:04:57:65:
                    83:27:fe:28:15:1e:54:eb:1b:5e:52:cd:97:dc:6f:
                    6f:97:52:48:66:a6:57:a4:09:5e:94:96:3c:6a:a1:
                    e8:80:99:20:30:9c:7f:63:3a:c0:5b:4b:a9:be:86:
                    7a:d5:2d:ed:26:e3:1c:42:7a:ad:68:87:8a:c2:81:
                    c1:73:f4:3f:65:be:b2:b6:04:28:de:5e:ca:a5:e5:
                    f8:b0:69:34:56:b9:dc:c5:ae:b7:c2:0a:02:3d:97:
                    2e:b8:fc:ce:36:cd:fe:27:e7:9c:f5:89:d1:d5:61:
                    8e:59:e8:61:0a:54:e3:5a:24:4e:69:9b:95:75:c0:
                    b7:9a:f8:65:74:b9:08:09:fb:e4:52:d5:5e:36:a4:
                    27:17:71:67:43:9d:c8:a6:96:f7:91:40:ac:2e:ca:
                    11:32:cf:2d:de:fd:5c:ac:8f:a5:16:36:c9:5c:3b:
                    27:8d:db:fb:d8:3a:1c:d0:e6:7d:00:07:e6:85:ad:
                    4b:fe:59:8c:c3:65:3e:8e:8c:c3:6b:9b:17:69:66:
                    88:3e:42:08:ad:0a:be:eb:a5:37:fa:5f:94:25:32:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A4:B3:61:1E:4A:CD:F0:C4:E1:CE:D4:ED:BE:51:7B:4F:E3:6C:27
            X509v3 Authority Key Identifier:
                keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:72:17:ef:bb:ba:28:66:75:1a:4f:32:c0:cf:df:24:bc:e5:
         13:b8:72:e8:d0:ee:04:56:9a:93:02:43:90:86:c4:9f:de:eb:
         b2:02:19:df:d6:29:9e:05:1b:c4:f5:d4:a7:2f:46:29:34:cc:
         d9:dc:31:de:26:1f:b0:91:7e:8c:bf:05:d5:9e:03:bb:d5:f4:
         9d:4f:73:6f:e3:56:f6:91:8b:2e:73:38:12:52:24:df:a0:c8:
         da:da:a8:e7:da:7a:92:c3:c2:45:95:38:88:a5:00:d8:6f:dc:
         d7:ab:8e:a5:b1:6c:ee:31:f6:a0:c5:7b:9c:00:a7:fb:67:96:
         e1:55:87:84:10:3b:02:fb:3c:b5:ed:67:1d:f2:49:7b:5b:da:
         3e:4d:02:c2:61:84:fd:91:f6:6e:d2:aa:62:40:4b:a6:34:a3:
         7e:fb:a9:ec:f6:bb:d0:a0:89:b8:12:72:42:b0:0e:90:51:fc:
         f3:b0:b9:68:1a:fb:3b:e1:d8:d8:a7:19:bc:81:af:87:29:52:
         ab:d6:19:8b:10:d0:54:7f:7e:8f:6c:5b:d5:55:62:3b:af:93:
         27:72:b8:69:12:22:fa:5b:5d:80:b4:ac:0d:55:59:e8:fd:36:
         db:50:9f:22:46:75:66:9f:fc:3c:f5:b8:f7:6c:c6:18:9e:0a:
         e5:71:c1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:13:16 2026 by rpki-client