Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
File:                     EItwxYRvnQdVxcbbmN0maEDgWmU.mft (raw, json)
Hash identifier:          lXshvlAjcozCPcV1QafttsQAsy1tkzfnfqxw2WxpjO4=
Subject key identifier:   D6:99:D7:87:DB:07:7B:D0:BA:BE:90:41:FF:6E:33:DF:9B:49:7E:7E
Authority key identifier: 10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65
Certificate issuer:       /CN=A918FE64/serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
Certificate serial:       03
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
Manifest number:          02
Signing time:             Tue 02 Jun 2026 04:15:26 +0000
Manifest this update:     Tue 02 Jun 2026 04:15:25 +0000
Manifest next update:     Tue 09 Jun 2026 04:15:25 +0000
Files and hashes:         1: EItwxYRvnQdVxcbbmN0maEDgWmU.crl (hash: qNPklklPYta+DJv9SnkK8S5egha+b6e1abAJdnQkX8A=)
                          2: A8DB81885E3911F1AE025C80017AAC22.roa (hash: iqMAWetYjvjnn5VbOnaERsf5lh+EVkjU6KxJWxQvoqc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl
                          rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 04:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE64, serialNumber=108B70C5846F9D0755C5C6DB98DD266840E05A65
        Validity
            Not Before: Jun  2 04:15:25 2026 GMT
            Not After : Jun  9 04:15:25 2026 GMT
        Subject: CN=6a1e58dd-b807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:aa:3c:67:73:b5:5c:9d:2d:9c:15:49:4d:
                    da:53:00:df:2a:78:87:d8:26:9f:a0:33:17:bf:10:
                    f1:2c:ae:56:9f:d7:88:ee:cb:9d:5d:40:b5:f7:40:
                    0a:38:1a:99:23:5b:5f:13:53:41:e4:e6:fb:3d:f3:
                    fb:9b:90:ed:87:ba:d1:95:0e:23:52:5c:a4:5c:36:
                    df:1a:81:26:cd:0e:b1:4e:85:ce:4f:3b:7f:3f:01:
                    2d:f9:83:16:b3:ac:34:5e:53:a4:d1:c6:a8:30:63:
                    6e:5d:75:09:96:d7:06:31:5f:55:db:a0:70:b2:54:
                    f7:71:60:15:e8:17:3f:9a:e4:98:8f:69:c4:24:9e:
                    29:f5:71:ea:74:4b:ac:48:3e:ef:72:21:96:46:c9:
                    74:f6:1f:26:fa:d2:02:dd:5c:e7:fb:76:02:7a:97:
                    9c:0d:6d:93:fb:91:0d:98:98:24:fa:10:50:16:71:
                    a1:d0:0f:e7:18:1c:70:e6:3d:3f:c7:92:a6:c2:87:
                    06:d6:35:2e:f2:a4:72:8a:b4:98:a4:fb:45:1b:ab:
                    0c:3a:30:ed:0a:14:1a:d6:2d:8b:6f:5b:69:f4:2a:
                    01:82:7c:b3:ce:4d:48:af:20:2d:d2:7a:96:9b:b3:
                    28:cd:19:af:1b:bb:67:de:09:76:f5:62:3a:e1:47:
                    4e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:99:D7:87:DB:07:7B:D0:BA:BE:90:41:FF:6E:33:DF:9B:49:7E:7E
            X509v3 Authority Key Identifier:
                keyid:10:8B:70:C5:84:6F:9D:07:55:C5:C6:DB:98:DD:26:68:40:E0:5A:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EItwxYRvnQdVxcbbmN0maEDgWmU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE64/0CEAF6825E3911F1B10499CF007AAC22/EItwxYRvnQdVxcbbmN0maEDgWmU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1f:4a:df:9c:b3:bd:45:fd:64:7d:85:22:01:b8:59:48:39:
         35:79:be:86:7d:bf:15:1e:58:e8:06:52:24:8f:fc:55:b0:44:
         3e:5d:e3:8c:f1:36:34:6c:94:e1:d9:b0:1c:43:6b:a7:96:21:
         0e:9b:de:ac:17:25:af:a8:4d:13:f0:52:21:c4:1f:a4:3e:c6:
         81:6f:c4:45:54:87:d5:a2:2c:8d:71:d5:f4:7f:68:71:0a:e8:
         5e:f7:13:5a:66:ac:80:fd:54:ce:42:16:ca:53:25:db:8a:19:
         10:ea:df:99:a6:10:b1:42:7f:15:45:52:3c:3e:1e:da:24:67:
         17:cd:9c:1a:19:9c:8d:15:7e:98:06:d7:f8:93:ac:d6:8f:5a:
         d0:73:05:52:2a:f0:22:b1:46:3f:d1:27:15:61:fd:6c:bd:d0:
         b7:f9:45:a6:10:72:34:0a:cf:fa:57:fd:42:22:26:e9:92:2b:
         e2:69:33:68:7a:4d:8f:b4:1b:c8:68:65:80:1e:d5:5d:2f:d9:
         d0:2f:78:0f:2a:c3:7e:fe:ed:48:23:f0:6d:5d:a5:9f:43:16:
         f9:13:34:42:d9:f5:99:c4:0b:a9:2a:09:d1:ae:b2:8d:bc:9c:
         8d:a7:fa:d1:b7:e7:5c:87:96:58:1b:6c:a8:3a:76:ad:56:0c:
         6b:2c:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:42 2026 by rpki-client