Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          s3pNtVJa0erPWPA4fQ2EwLeQsD7maWrzwYl8YM91Oqw=
Subject key identifier:   31:7C:A1:67:BF:A2:F2:31:16:56:89:30:4E:46:4F:5F:47:44:6A:F7
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          DC
Signing time:             Tue 03 Mar 2026 06:10:27 +0000
Manifest this update:     Tue 03 Mar 2026 06:10:27 +0000
Manifest next update:     Tue 10 Mar 2026 06:10:27 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: 7m3u4sbZ0a4WeSHo3Ui8m49rjBbHWKkGrKcnfuZLl1A=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:10:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: Mar  3 06:10:27 2026 GMT
            Not After : Mar 10 06:10:27 2026 GMT
        Subject: CN=69a67b53-ba87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:ca:4f:9b:0b:90:ae:1b:90:ae:bf:21:cb:
                    ea:26:f1:d7:95:fd:8b:62:80:69:a0:54:c1:79:ab:
                    24:53:28:2e:80:03:42:93:1e:d1:54:1c:bb:93:b6:
                    74:56:e5:45:46:42:1c:c3:e2:ae:61:0c:85:d7:1c:
                    0f:7b:98:83:1b:33:c7:a8:89:b5:f3:94:db:8b:fc:
                    89:65:83:30:4d:51:ec:55:ec:7f:d5:1c:88:54:5d:
                    e8:ac:fd:56:f4:71:db:36:7f:88:ab:78:73:01:f7:
                    95:4f:0f:fd:fe:72:d7:ad:aa:f9:f7:96:59:ce:9f:
                    03:4c:28:b1:bd:92:33:cd:cc:dc:f7:e0:4e:18:1d:
                    36:1d:e2:70:ab:eb:f7:9e:bb:85:cf:f8:54:ac:98:
                    19:fd:bb:16:35:27:73:2b:ef:56:97:e4:d7:a4:31:
                    69:db:80:d6:8c:05:98:a3:5a:2d:45:0f:2b:ce:18:
                    90:85:64:01:63:a8:5c:e4:4a:12:59:5b:a7:c6:1b:
                    ec:d1:2a:8e:28:09:ff:1d:ba:0e:a0:56:bf:72:1a:
                    e9:f4:bb:4c:d0:11:83:d9:c8:e0:ff:44:80:a2:f3:
                    d8:e4:bd:99:0b:e9:3e:33:d9:54:1b:1a:ea:c5:a9:
                    ab:b3:16:c0:89:db:ef:3d:10:12:57:a0:7c:57:67:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7C:A1:67:BF:A2:F2:31:16:56:89:30:4E:46:4F:5F:47:44:6A:F7
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:57:84:df:9f:3c:cb:13:d8:b1:fc:77:0f:30:b0:99:27:
         46:1e:55:7b:49:79:cb:9d:a8:b5:57:7b:7e:b7:51:09:4e:68:
         ca:3e:39:a7:15:26:f6:f6:68:27:c3:53:dd:a8:72:9d:4d:58:
         b5:2a:eb:76:47:df:35:c6:7c:2a:61:38:48:0d:a8:8b:63:66:
         30:39:56:19:1c:56:40:9b:76:b9:5d:7d:27:a3:0d:d0:21:76:
         5d:63:a6:0c:4d:6b:a5:24:f6:d3:93:f9:f5:14:b0:21:38:a1:
         3b:61:2a:cf:50:6b:1c:b0:3b:f5:e3:40:bb:fc:c6:75:e8:fc:
         14:2a:8e:b4:38:e4:5c:88:65:14:76:b3:f8:7d:74:47:a0:fd:
         b1:a3:02:b0:26:cf:69:d6:6f:b9:3a:af:67:34:5a:53:ad:9e:
         b9:03:91:3c:44:b1:8f:a4:5a:63:12:9f:b7:31:c6:ce:11:7b:
         f3:47:63:6e:9a:f2:cc:86:c3:98:c2:29:e7:2c:06:36:a1:00:
         f7:7c:8e:cd:f9:06:93:68:4e:8d:c8:df:6c:2f:94:b0:1c:08:
         70:ae:94:b3:0e:6c:4b:84:84:16:74:e3:1f:83:f4:72:62:64:
         96:63:9f:ea:19:63:91:2a:98:e1:c4:8c:96:dd:d0:e1:4e:b1:
         0d:65:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:05:48 2026 by rpki-client