Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
File:                     EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json)
Hash identifier:          EXv9TJHubB62uoVb+rin6D4LnWafW3Xjl1pQjBljDMQ=
Subject key identifier:   EF:36:C1:BA:03:02:2A:7F:DE:67:8C:EC:6C:DA:A0:6B:9B:88:FB:35
Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51
Certificate issuer:       /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
Certificate serial:       F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
Manifest number:          F3
Signing time:             Fri 17 Apr 2026 06:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 06:01:12 +0000
Manifest next update:     Fri 24 Apr 2026 06:01:12 +0000
Files and hashes:         1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: 5et3FDxszi21hNdconk+f2amapYUB68whQ1upVYhLa4=)
                          2: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: XQ6KMx/Gwae7O1Lv+3oDtA00X0mijuxzo/bm7+jK5wg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl
                          rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151
        Validity
            Not Before: Apr 17 06:01:12 2026 GMT
            Not After : Apr 24 06:01:12 2026 GMT
        Subject: CN=69e1cca9-e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:30:93:c6:be:f8:fa:e1:f8:61:7c:75:6b:d9:
                    57:bf:89:fd:1b:2a:c0:3c:4a:8c:d5:25:e3:1e:dc:
                    8e:c8:a5:77:7a:9e:54:e1:c5:70:d3:f2:47:ca:c5:
                    25:80:81:a9:1e:77:b5:fd:14:e7:ee:11:33:94:22:
                    d2:a9:b5:f6:e3:bc:48:2b:f0:8f:ee:46:39:27:85:
                    cf:37:28:a5:34:31:3a:98:c3:59:f1:58:0e:50:86:
                    7f:66:38:05:e7:33:33:c8:0e:0f:0d:68:03:46:a1:
                    1a:61:72:bf:63:43:48:c9:f7:a2:8e:2b:19:ec:26:
                    3c:de:60:b3:76:6e:62:48:e5:67:37:de:fa:58:f2:
                    b6:28:6a:f7:68:17:a1:1e:ca:4c:c3:4c:25:72:49:
                    90:b1:4b:3c:c3:eb:e2:a0:f1:cb:2c:9f:24:40:80:
                    30:75:d3:f5:6f:c9:76:37:05:0f:2c:e4:62:76:5c:
                    5b:9b:1f:d3:26:a7:96:8e:b7:57:46:85:d2:26:6b:
                    6e:73:45:83:4f:a4:7c:6f:dd:13:24:bc:08:00:a5:
                    58:a1:87:77:e1:1f:ef:0a:12:cc:44:ec:30:74:6c:
                    4a:a3:82:c3:77:96:bb:92:d5:9e:e6:c9:79:e6:c6:
                    3c:db:cd:3d:8b:a9:bc:dc:c9:38:66:21:23:9b:5d:
                    ac:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:36:C1:BA:03:02:2A:7F:DE:67:8C:EC:6C:DA:A0:6B:9B:88:FB:35
            X509v3 Authority Key Identifier:
                keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6a:ec:2c:fc:fb:5a:73:03:c2:88:37:fa:35:a8:f7:65:ac:
         41:53:77:f0:e2:cf:84:f2:9f:a9:1a:06:f3:bf:9e:de:00:17:
         f8:3f:59:3e:9f:33:29:ed:51:59:dd:00:a6:f5:90:aa:4f:65:
         b2:89:e5:cb:1f:c7:53:92:46:c2:2a:63:3e:a8:64:f4:b3:55:
         07:01:df:aa:cf:f8:86:2c:26:7e:0b:0b:3e:89:f9:32:1c:79:
         35:68:4d:e1:14:20:21:e8:26:ee:cf:14:41:05:21:c4:4e:c3:
         8c:89:d8:db:7b:68:71:b5:65:0d:a8:98:b5:9e:ea:00:24:7d:
         cc:1d:08:78:a2:30:fa:72:cb:36:7f:69:6a:b0:f6:c5:17:94:
         94:dd:7b:f0:03:1d:74:20:54:9f:57:d3:cf:09:d1:47:66:1a:
         81:b0:72:55:da:45:98:95:0b:26:92:0d:f9:00:30:76:58:74:
         9b:a4:6b:7a:72:a8:bc:aa:aa:2b:7f:45:81:fa:84:e7:28:98:
         f8:ac:ec:3e:c9:83:d6:3c:cf:72:77:72:01:fc:e1:44:d6:47:
         6a:9d:0a:bb:69:2e:b5:0a:35:03:bd:20:a0:3a:78:bf:81:11:
         28:2e:62:b5:6e:17:ff:a2:31:df:ab:ea:fe:2e:1b:28:a2:d8:
         d4:e0:4b:d5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0
RDFCOUExNTEwHhcNMjYwNDE3MDYwMTEyWhcNMjYwNDI0MDYwMTEyWjAYMRYwFAYD
VQQDEw02OWUxY2NhOS1lOTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6zCTxr74+uH4YXx1a9lXv4n9GyrAPEqM1SXjHtyOyKV3ep5U4cVw0/JHysUl
gIGpHne1/RTn7hEzlCLSqbX247xIK/CP7kY5J4XPNyilNDE6mMNZ8VgOUIZ/ZjgF
5zMzyA4PDWgDRqEaYXK/Y0NIyfeijisZ7CY83mCzdm5iSOVnN976WPK2KGr3aBeh
HspMw0wlckmQsUs8w+vioPHLLJ8kQIAwddP1b8l2NwUPLORidlxbmx/TJqeWjrdX
RoXSJmtuc0WDT6R8b90TJLwIAKVYoYd34R/vChLMROwwdGxKo4LDd5a7ktWe5sl5
5sY82809i6m83Mk4ZiEjm12sJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO82wboD
Aip/3meM7GzaoGubiPs1MB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC
RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv
VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy
SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeGrsLPz7WnMDwog3+jWo92WsQVN38OLPhPKfqRoG87+e3gAX+D9ZPp8zKe1R
Wd0ApvWQqk9lsonlyx/HU5JGwipjPqhk9LNVBwHfqs/4hiwmfgsLPon5Mhx5NWhN
4RQgIegm7s8UQQUhxE7DjInY23tocbVlDaiYtZ7qACR9zB0IeKIw+nLLNn9parD2
xReUlN178AMddCBUn1fTzwnRR2YagbByVdpFmJULJpIN+QAwdlh0m6RrenKovKqq
K39FgfqE5yiY+KzsPsmD1jzPcndyAfzhRNZHap0Ku2kutQo1A70goDp4v4ERKC5i
tW4X/6Ix36vq/i4bKKLY1OBL1Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 19:40:52 2026 by rpki-client