Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
File:                     eee1l4EY_5x6llKfbFkJ49qSQMM.mft (raw, json)
Hash identifier:          mjze8gsPNGifIs/qxGzkNROgLdpDgR8hu+mJDEZgdxc=
Subject key identifier:   C6:0F:73:B6:37:01:78:DB:AD:98:56:52:75:FB:D2:32:D4:72:7A:49
Authority key identifier: 79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3
Certificate issuer:       /CN=A91E20C2/serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
Certificate serial:       11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
Manifest number:          10
Signing time:             Tue 19 May 2026 08:56:55 +0000
Manifest this update:     Tue 19 May 2026 08:56:55 +0000
Manifest next update:     Tue 26 May 2026 08:56:55 +0000
Files and hashes:         1: eee1l4EY_5x6llKfbFkJ49qSQMM.crl (hash: eSwD7ewYLCOyaPTs/o/3hhNHUZu7uTq30zkHS6imo5o=)
                          2: 5487474E3E2B11F1962E9E0BB7833773.roa (hash: OmLUQ43QETaka1wexlDbKxhUGMOUSSWYIcjZLWyxezg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl
                          rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E20C2, serialNumber=79E7B5978118FF9C7A96529F6C5909E3DA9240C3
        Validity
            Not Before: May 19 08:56:55 2026 GMT
            Not After : May 26 08:56:55 2026 GMT
        Subject: CN=6a0c25d7-286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:11:1c:4e:77:f8:d0:f3:28:39:76:50:d3:5b:
                    4e:70:4b:56:52:b0:46:5a:b9:4b:82:8e:c5:02:d0:
                    4d:1a:84:7f:fb:bf:8b:eb:f6:ca:ea:65:e2:eb:37:
                    b4:58:86:0b:8e:3a:fc:1c:18:46:fc:b2:0e:a0:cf:
                    e7:c4:ab:f9:f6:d7:ec:55:aa:28:76:60:43:88:3f:
                    55:97:f5:76:f5:5f:a5:50:cd:c0:e3:ba:37:38:1d:
                    64:7e:4b:73:85:c3:29:63:6a:66:d5:59:42:ff:f2:
                    71:64:bf:14:2a:87:1c:3d:91:0f:5b:bb:3f:74:3c:
                    9e:4c:ff:7f:2b:72:9c:c8:1d:a6:2e:ff:c7:1e:7b:
                    60:48:6e:8b:67:41:11:95:f0:ae:dd:1d:1d:f1:1f:
                    92:0e:4f:0e:9c:39:34:6a:55:f9:ba:11:af:c1:c9:
                    31:3d:29:69:23:0e:be:d2:52:e1:b0:e5:fc:4f:1f:
                    7e:75:e6:40:fe:f3:2f:40:e4:52:cf:98:cf:b8:f4:
                    51:29:bd:01:1e:6a:90:60:a0:b5:9d:94:af:1a:e5:
                    4c:ba:0c:97:bd:c9:ad:48:f0:b3:a0:e6:53:0d:19:
                    3e:36:d5:8e:30:79:83:22:df:5d:e9:4e:5e:b6:43:
                    39:75:f7:ff:da:28:50:dd:b2:61:44:30:b4:8d:5b:
                    ed:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:73:B6:37:01:78:DB:AD:98:56:52:75:FB:D2:32:D4:72:7A:49
            X509v3 Authority Key Identifier:
                keyid:79:E7:B5:97:81:18:FF:9C:7A:96:52:9F:6C:59:09:E3:DA:92:40:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eee1l4EY_5x6llKfbFkJ49qSQMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E20C2/708CC3283E2711F1B9F4379FB5833773/eee1l4EY_5x6llKfbFkJ49qSQMM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:d1:86:27:68:f8:ab:d6:0d:38:85:80:fc:b8:d9:e3:9e:
         50:67:03:a8:bc:48:ce:63:a7:12:b2:c4:c8:9a:26:c0:29:ee:
         a7:73:cc:35:7d:b5:ac:5b:35:5b:45:3b:d9:a2:f0:c6:15:b0:
         57:06:c4:7c:44:6d:df:94:18:4f:71:47:0f:01:bf:94:a1:b3:
         5c:40:8c:ef:3a:43:a2:1d:aa:4a:92:7d:d1:84:e2:9f:2b:2b:
         34:e7:22:91:11:24:45:03:57:8a:f0:d5:98:b8:06:3c:b7:55:
         1c:77:fe:72:f3:5d:1f:46:50:55:5d:6e:ac:8f:f4:0d:5c:34:
         eb:e7:e3:9e:4a:c0:5c:4f:d2:8c:59:b4:25:07:ec:57:27:a9:
         9f:e7:8b:15:a8:9e:c9:e8:ca:3c:6f:42:e2:a0:68:45:a1:dc:
         69:69:91:b1:e5:71:69:8f:aa:4c:10:81:b5:a2:10:47:91:0d:
         91:f7:6e:25:88:79:5e:d1:69:66:f4:2e:90:b9:3b:e2:ae:de:
         3d:82:d4:61:ba:ef:2e:64:15:d1:9a:6c:6a:59:8c:11:55:d3:
         e1:10:5b:f2:19:0f:b6:e8:37:a1:7a:1b:17:e0:e2:8f:c5:0a:
         36:fd:af:46:f2:a6:75:33:f7:f7:0c:01:29:4b:04:4a:58:55:
         b5:fb:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:26 2026 by rpki-client