Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File:                     EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier:          6pY13pGnCS6YaKgFd2WYJzgjlJNI7GQxUYaim0D1XHk=
Subject key identifier:   FB:D0:5D:18:75:54:FC:47:90:A8:D0:88:7B:B8:69:BB:33:6D:5D:BC
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer:       /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial:       0D21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number:          0D0D
Signing time:             Sat 04 Apr 2026 17:59:22 +0000
Manifest this update:     Sat 04 Apr 2026 17:59:22 +0000
Manifest next update:     Sat 11 Apr 2026 17:59:22 +0000
Files and hashes:         1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: sChU4onAT3eqeGh/0ghxPYKvMB8Qnc/kQpZzcaE7oEU=)
                          2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:59:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3361 (0xd21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
        Validity
            Not Before: Apr  4 17:59:22 2026 GMT
            Not After : Apr 11 17:59:22 2026 GMT
        Subject: CN=69d1517a-a42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:94:35:14:4b:0e:37:ad:c8:3f:61:79:bd:
                    0a:34:8e:f6:b2:be:6e:b7:53:9b:26:56:e5:28:04:
                    d7:d1:8e:7a:11:62:a6:04:63:79:37:74:0e:0f:5f:
                    26:1a:22:c5:f9:c1:e2:bf:9c:15:02:4a:40:50:e3:
                    78:ab:da:ca:e6:fd:0e:9c:58:28:3e:c3:ff:8a:1d:
                    62:ab:75:ec:29:98:6d:07:72:b1:89:2b:62:31:4f:
                    b3:b0:36:e7:cb:af:87:09:d5:81:29:70:00:35:e9:
                    4b:65:22:67:f6:eb:40:a8:d3:1e:fc:cf:05:91:0a:
                    15:cf:27:44:13:dd:0e:4d:eb:83:99:c7:03:70:dd:
                    81:fe:63:46:9f:69:29:09:81:88:5b:ea:d6:5a:2a:
                    df:ed:dc:8f:ce:a0:d4:af:ab:a6:b3:2f:28:a3:d2:
                    d3:10:b5:96:98:2c:cd:ce:b5:88:a3:ab:55:e4:ab:
                    ad:a5:0d:0e:df:6e:2a:68:3b:08:1e:ae:11:da:ec:
                    f1:21:07:20:68:fa:78:bf:7a:9a:68:e7:98:ce:ea:
                    d9:7f:49:c0:b0:6e:67:6f:8d:c4:b3:14:fa:d1:e7:
                    57:07:c0:0f:07:14:db:12:fb:ac:56:7f:fb:b5:bd:
                    5b:2d:5b:f9:9d:67:53:71:53:25:a8:82:c0:4c:22:
                    70:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D0:5D:18:75:54:FC:47:90:A8:D0:88:7B:B8:69:BB:33:6D:5D:BC
            X509v3 Authority Key Identifier:
                keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:22:22:e4:04:99:ec:d2:d2:58:51:06:b1:5b:87:85:e5:
         f4:aa:37:6d:ac:01:72:3a:5f:06:56:68:1b:53:a2:46:7f:dc:
         d6:03:0f:cf:4b:9b:a0:12:49:35:87:7a:db:b9:fe:62:1b:51:
         be:74:4e:fb:e6:9c:7a:2e:36:2e:85:75:da:21:36:0e:84:91:
         d7:a0:09:bd:5c:2e:82:e7:c0:ec:e0:8f:72:11:18:11:0b:af:
         32:a6:85:e6:00:20:a0:70:04:5b:5b:20:c5:db:da:b4:3b:07:
         73:af:3f:c3:67:8f:6a:1c:25:c0:23:a7:c8:d9:ac:9a:af:7f:
         6a:ce:92:ef:cd:a4:89:ef:2c:9b:0d:05:89:56:9c:0c:26:f1:
         14:6a:87:0d:15:ae:e9:b9:4d:d2:0f:89:46:e6:7e:86:cf:d7:
         cb:bc:8e:f4:e7:00:90:73:cb:19:19:a1:26:b1:c6:29:c6:98:
         2b:99:0f:c4:b1:a9:28:47:8c:96:96:a8:7f:55:fd:1e:c0:03:
         24:c2:67:44:ee:e4:9b:f0:15:22:fb:86:58:44:36:e3:04:3b:
         ad:4c:ad:b4:b4:50:25:d5:c1:30:b3:f2:cb:87:7e:d0:c5:73:
         0d:0f:9a:b2:2f:a5:af:27:99:b6:b2:ae:13:64:56:b3:13:b7:
         82:34:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:40 2026 by rpki-client