Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
File:                     EEjCfhFLkRMVXq68kL7G3YD4xss.mft (raw, json)
Hash identifier:          z14kur1wNURdBxaHpcf+8YOIbrS1yO+olqugrRyFjIk=
Subject key identifier:   85:C9:36:39:D7:68:E6:69:F3:6B:A4:D4:3B:69:E8:2C:09:20:C5:89
Authority key identifier: 10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB
Certificate issuer:       /CN=A919E08E/serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
Manifest number:          06EC
Signing time:             Sat 04 Apr 2026 21:54:37 +0000
Manifest this update:     Sat 04 Apr 2026 21:54:36 +0000
Manifest next update:     Sat 11 Apr 2026 21:54:36 +0000
Files and hashes:         1: EEjCfhFLkRMVXq68kL7G3YD4xss.crl (hash: i0m1co7nUiJ5i7HlRi8+J8JXN3t5T4+PRPqDHvxs2RA=)
                          2: 5F506D7C8C7911EBB7E88620C4F9AE02.roa (hash: Jg71CQh08KLYbbjjEZzTeyDZeQ8B6eKm18WWzoCmHMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl
                          rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E08E, serialNumber=1048C27E114B9113155EAEBC90BEC6DD80F8C6CB
        Validity
            Not Before: Apr  4 21:54:36 2026 GMT
            Not After : Apr 11 21:54:36 2026 GMT
        Subject: CN=69d1889d-59d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:9b:23:6e:96:62:9f:15:e5:a8:64:7f:b7:
                    35:d2:83:d2:38:c5:f0:3b:5e:f4:1f:13:8e:4e:6e:
                    37:1a:3e:ab:72:66:e8:33:a5:7e:87:1b:bd:ba:6c:
                    70:62:04:33:ad:5c:7c:50:24:9a:a8:b3:f9:2c:82:
                    f7:c2:89:7a:39:4e:33:1a:75:b6:5a:32:23:4f:f6:
                    75:52:bf:f6:2f:e6:d6:0e:31:bd:c9:75:44:12:04:
                    d0:96:68:99:f4:3f:d0:41:91:57:c5:f2:aa:00:23:
                    4c:bc:51:bd:fb:bf:bd:ab:74:e2:93:d8:53:21:cd:
                    eb:84:39:5f:56:80:b3:81:74:e3:36:be:5a:01:0a:
                    c0:6b:ac:5f:0e:82:fb:ed:a2:67:87:d2:75:0d:47:
                    a8:74:ba:8b:60:47:67:9f:aa:58:1d:7c:72:bb:62:
                    ae:6a:99:4c:ae:f8:a2:a3:be:ba:37:d7:9d:9c:d0:
                    32:88:96:77:26:be:09:e1:b1:00:38:ed:f4:7e:bc:
                    cf:c1:fe:32:9d:56:81:15:c0:15:a5:39:59:75:4a:
                    b1:f3:b0:17:24:a6:04:98:c3:ad:79:f0:20:ec:39:
                    86:bb:90:26:1c:4a:45:ae:20:30:69:98:00:20:56:
                    20:5f:9f:95:ed:ef:1b:da:0f:12:47:de:05:e2:27:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C9:36:39:D7:68:E6:69:F3:6B:A4:D4:3B:69:E8:2C:09:20:C5:89
            X509v3 Authority Key Identifier:
                keyid:10:48:C2:7E:11:4B:91:13:15:5E:AE:BC:90:BE:C6:DD:80:F8:C6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEjCfhFLkRMVXq68kL7G3YD4xss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E08E/E1CA58468C7711EB885B311FC4F9AE02/EEjCfhFLkRMVXq68kL7G3YD4xss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:b7:0c:14:d9:25:0b:8d:44:e0:2f:4d:72:28:05:36:71:
         68:10:fc:64:36:fc:35:ae:ce:73:af:f6:8d:30:06:8a:eb:ba:
         58:2c:0c:83:4f:8c:3a:98:41:47:5d:2b:ae:97:87:2a:18:eb:
         9d:26:3b:cc:8e:bf:2f:b1:f4:31:c2:3d:5e:59:72:4a:0a:3f:
         f1:06:0e:f1:01:9c:95:51:95:04:1e:c0:37:9b:04:56:30:93:
         9f:4a:b7:81:ca:69:62:ed:77:6a:4c:59:3f:c4:74:2e:80:2e:
         5d:43:8c:dd:1e:a4:a6:08:fa:73:45:93:53:3d:59:2d:2e:c4:
         30:1a:e5:42:b1:2a:29:d8:2e:83:1b:4e:aa:3e:cf:89:9c:57:
         44:53:09:e0:76:f7:86:7b:5c:00:e1:6a:57:c7:85:16:98:a5:
         5b:4d:9f:c4:c3:f2:dc:80:cb:23:f0:81:93:1a:dc:b1:38:0a:
         f9:f5:12:92:6e:c5:dd:f5:44:0b:65:bd:c0:2d:74:6f:6b:59:
         ec:21:70:ea:0b:cc:bb:42:e5:d5:70:94:fc:bc:a2:b1:ee:91:
         64:33:ad:8e:28:9e:a1:2e:c0:2d:84:a7:1b:85:59:35:aa:4e:
         d1:74:d0:de:61:9f:a5:6c:ff:80:4e:bc:fe:13:77:0d:98:96:
         ca:90:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:16 2026 by rpki-client