Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File:                     EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier:          wZM1Y23SW1HII89WlXciBp4d4/mIIdN0D7ikMuZzd1k=
Subject key identifier:   FC:E8:61:41:7D:96:2A:0F:5A:B2:91:29:08:88:02:46:A1:3B:BA:EA
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       0217
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number:          020E
Signing time:             Sun 05 Apr 2026 02:33:22 +0000
Manifest this update:     Sun 05 Apr 2026 02:33:21 +0000
Manifest next update:     Sun 12 Apr 2026 02:33:21 +0000
Files and hashes:         1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: eE3rDFedJMCBXWGHpUsagQ8qKqE2wzZKu3RKsT+Qydw=)
                          2: 32D39C06224511EE81776175C4F9AE02.roa (hash: 8Uc+YYik3ZmK9iVFDft8xCOteri5jMjslFS1i1Q8LVs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: Apr  5 02:33:21 2026 GMT
            Not After : Apr 12 02:33:21 2026 GMT
        Subject: CN=69d1c9f2-39f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:14:b1:b1:6e:88:06:4c:c6:b6:ce:af:8b:
                    04:35:d1:0f:8a:e3:a1:65:8a:f2:81:de:de:ff:c3:
                    5b:85:06:ca:7d:0c:8a:7c:37:d7:56:20:cd:35:8c:
                    cf:11:ad:6a:8b:02:81:67:20:34:1d:99:c8:f9:00:
                    82:44:f5:00:ec:b9:b8:4c:4f:4b:ea:0a:d6:6a:8a:
                    09:6a:0d:65:78:d6:5e:82:32:49:09:52:b9:08:a2:
                    57:f7:9e:03:9a:aa:c6:77:34:18:2b:db:a7:a0:30:
                    52:a5:a9:ff:b3:f1:c3:57:66:74:51:12:9c:2b:84:
                    6f:d1:f9:3c:23:3a:14:26:43:d9:c1:71:32:81:d2:
                    dd:50:cf:ab:20:fe:a3:80:d5:6d:25:29:11:f2:cb:
                    e8:2f:2c:a2:69:25:e4:90:82:93:ea:73:f3:2b:d5:
                    08:29:7a:35:6e:12:88:16:72:df:91:9c:08:c0:bc:
                    d1:a4:3f:42:88:44:dd:4f:93:03:d3:72:c3:a7:72:
                    ae:cf:f8:fc:e5:3e:8a:26:34:1d:58:05:4c:fe:fe:
                    57:69:67:cb:41:10:df:41:c2:c8:36:b8:a3:92:ef:
                    bd:f6:63:c7:aa:d2:e0:2d:98:a6:86:25:f9:3f:8d:
                    1e:db:b5:3a:99:65:df:f1:0d:92:87:7e:f5:fc:fb:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E8:61:41:7D:96:2A:0F:5A:B2:91:29:08:88:02:46:A1:3B:BA:EA
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1f:c3:8b:7d:e1:53:6c:80:9b:6b:4a:2c:6f:9c:e0:fc:24:
         5a:f4:d5:28:0a:c6:78:f5:92:1b:80:29:9a:75:60:6c:b0:b2:
         f9:05:6c:76:c2:95:a1:e7:bf:b4:55:b2:5d:67:5e:0e:b3:e4:
         91:2a:c9:e9:33:c1:05:69:e7:38:98:0f:96:7e:36:75:f2:dd:
         bf:b3:9b:c0:6e:67:7b:7d:21:27:cb:4b:48:e2:00:cc:be:2d:
         48:f9:00:ed:a2:73:9f:2d:80:14:03:42:9d:a6:1b:ca:55:af:
         c9:af:00:21:3c:0d:e3:ff:43:07:86:b5:c3:4c:fb:6e:fa:d2:
         f9:12:4a:1c:f5:a8:b2:ae:15:f2:aa:52:1b:cf:4e:b9:82:ca:
         37:51:39:d2:68:1c:18:33:cb:38:0e:8d:5e:06:d7:10:ea:f5:
         0e:14:7f:0f:a8:59:fd:54:09:b8:fe:36:e2:14:d1:9c:cb:69:
         c9:62:aa:f9:a9:9c:fe:c1:43:93:ab:0d:0c:9b:44:95:0a:ef:
         84:e2:b1:fb:1c:ed:e0:e1:79:6e:5f:3c:6a:c3:48:19:6c:72:
         69:2d:d0:d0:5a:33:29:0e:68:2b:5d:70:e7:7f:a1:b2:a7:1c:
         ea:72:92:fa:10:fd:9a:8e:57:84:dc:3e:c2:dc:9c:5a:7a:5d:
         39:31:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:46 2026 by rpki-client