Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File:                     EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier:          GaYxzMfKn9YGCxCFAfP1aUP/cNuDeCjDbRZVXCt+e14=
Subject key identifier:   C8:9B:A2:13:81:E3:62:51:A7:29:D2:80:CB:E4:D0:4E:AC:58:9D:40
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       0237
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number:          022D
Signing time:             Mon 01 Jun 2026 03:28:39 +0000
Manifest this update:     Mon 01 Jun 2026 03:28:38 +0000
Manifest next update:     Mon 08 Jun 2026 03:28:38 +0000
Files and hashes:         1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: mjObHvMBJkFJFDEwvtfPs2WieBDEbdyhzdQfNDvR24s=)
                          2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 03:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: Jun  1 03:28:38 2026 GMT
            Not After : Jun  8 03:28:38 2026 GMT
        Subject: CN=6a1cfc66-3479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:01:9b:48:7f:60:55:df:c4:07:bd:1c:d8:87:
                    e8:10:30:3c:85:c6:7f:4a:ed:47:c0:24:c3:67:c2:
                    a2:0e:c0:7a:7e:b6:ec:e2:3f:f3:c4:92:c3:1e:da:
                    2f:b9:0a:14:55:f1:e5:40:28:8a:2b:4e:93:a0:f1:
                    45:54:71:dc:cd:15:8b:11:5e:6e:e6:84:3e:d5:f4:
                    af:f9:f3:77:4e:84:5f:ed:e6:8d:f7:e9:b2:41:6f:
                    33:2c:85:ca:e5:55:b8:e4:8e:36:3f:1a:7f:07:85:
                    76:66:7f:ef:06:30:b6:c7:03:eb:89:0d:82:ae:88:
                    1f:e5:21:1a:55:86:85:28:40:c8:63:e3:17:31:3c:
                    49:bf:83:2d:93:33:b5:b9:90:91:79:93:e7:25:bf:
                    40:f6:08:ce:b4:9e:42:78:c4:07:45:39:62:7d:e2:
                    b1:56:7e:5e:07:8a:86:6e:32:01:b6:14:d4:34:08:
                    a9:62:ba:ca:42:56:8d:a8:1c:77:7c:44:0f:da:42:
                    9a:d3:c0:b0:a0:1b:87:56:28:b2:96:57:c4:c5:b0:
                    58:a6:d7:b7:ce:94:4d:b1:10:2c:97:71:ef:c5:a0:
                    3d:5d:4d:cb:c2:e9:b9:e0:42:5a:9f:90:0b:2b:cc:
                    93:af:b7:66:b9:bb:d9:8f:34:14:0c:e9:db:ea:24:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:A2:13:81:E3:62:51:A7:29:D2:80:CB:E4:D0:4E:AC:58:9D:40
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:4d:08:dd:81:7c:bb:bb:4b:9b:18:5b:b5:65:24:8a:ca:
         0a:17:6a:ff:4a:38:0a:b6:af:7f:26:3c:c5:33:7e:74:8a:1c:
         6f:4e:94:9e:81:7f:40:a8:b4:a8:bb:25:5f:c8:fc:78:25:ee:
         d0:4a:33:5f:7e:e6:ea:7b:8a:51:c9:44:3d:e9:4a:b2:af:e9:
         b3:00:bf:48:81:0a:de:5c:59:2b:1c:4e:76:9b:f5:c4:cf:00:
         f0:f5:41:cf:ae:ea:e8:12:ee:18:59:63:f8:3a:7d:5c:25:80:
         d6:80:9b:a0:91:7f:1f:b7:d8:ac:c1:7c:76:68:32:d5:66:ad:
         4c:33:31:98:90:dd:bf:12:b1:fb:5a:74:25:70:dc:12:6a:48:
         54:e2:e0:2b:ce:e1:5b:16:09:73:44:cf:fe:31:fd:3a:c3:68:
         37:25:b4:8a:d4:44:c3:37:6a:6a:f8:6a:5a:25:0d:9d:91:5c:
         9c:00:71:4a:70:12:fb:18:03:4d:48:2f:41:6a:40:2c:d6:27:
         da:55:40:da:6c:a2:07:cf:c9:44:33:58:74:84:75:d0:3b:25:
         11:29:d7:95:31:e2:7a:6e:ff:d5:ca:54:08:4a:2a:98:83:12:
         39:b2:a6:5e:f3:21:89:ed:c7:b1:11:41:6c:6e:44:9f:a9:b4:
         f2:c2:15:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 14:29:23 2026 by rpki-client