Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
File:                     e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft (raw, json)
Hash identifier:          6LD03nXBx0JMmAvpx8R9bQAg+pby/KtbqvNKIBvsFTs=
Subject key identifier:   54:42:13:BD:28:5C:D8:0F:15:16:47:DF:F0:DD:69:F6:22:DC:63:61
Authority key identifier: 7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97
Certificate issuer:       /CN=A9115964/serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
Certificate serial:       083C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
Manifest number:          0827
Signing time:             Wed 20 May 2026 21:12:49 +0000
Manifest this update:     Wed 20 May 2026 21:12:49 +0000
Manifest next update:     Wed 27 May 2026 21:12:49 +0000
Files and hashes:         1: e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl (hash: ywgZa77n8zW924Bm3TWuK0kVB2skedAxAmzxVIbsO90=)
                          2: FAFC712C485611EDB713C522C4F9AE02.roa (hash: tHvkos3LllK1/2w9x3zTBuzpUB/1BQzGW8FkmGduBgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl
                          rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:12:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115964, serialNumber=7B721388FD13E8AE43C97F0301981D2292C88897
        Validity
            Not Before: May 20 21:12:49 2026 GMT
            Not After : May 27 21:12:49 2026 GMT
        Subject: CN=6a0e23d1-4060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:24:78:f9:bd:5a:e2:a3:d4:ba:79:a9:e4:c4:
                    19:08:3a:37:dc:ed:6e:03:b9:92:b5:ba:b6:a3:28:
                    52:14:b5:69:1c:1a:51:a3:ce:dd:6d:a6:f3:cb:50:
                    ee:64:c1:ba:d5:ae:6c:c0:86:15:77:42:ee:20:a7:
                    1a:6a:ea:66:69:58:71:d2:34:63:39:92:f9:f9:33:
                    19:a9:4e:65:f2:a9:4b:84:0d:19:d1:33:88:28:b2:
                    c8:2d:6f:db:5f:0f:0b:33:e9:0b:e7:b2:61:e8:30:
                    74:30:32:dc:3e:c1:dd:d0:e6:29:31:72:8b:29:db:
                    86:ad:ff:b9:4f:1c:fc:ec:7c:38:7f:0d:ee:39:6e:
                    af:d7:b6:e6:df:d8:15:fe:7f:d9:56:d6:57:ad:a1:
                    34:99:04:3b:14:b6:e7:7b:ff:1c:66:31:10:b0:dc:
                    0e:35:2d:15:78:b3:40:60:9e:f4:7b:b2:b6:2b:29:
                    e9:68:4f:a2:07:fb:ef:2a:1c:ed:1c:af:66:04:e4:
                    bc:61:4c:02:b9:00:08:c5:f0:e8:d9:47:7b:9e:fc:
                    6b:8d:af:f0:f5:a2:f3:c7:7d:b6:b7:e0:39:10:4c:
                    69:d5:e7:de:0d:a3:6a:6b:89:e3:7b:f2:91:64:a0:
                    99:e0:9b:fc:40:e2:78:83:6d:38:85:a9:08:5b:4e:
                    5f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:42:13:BD:28:5C:D8:0F:15:16:47:DF:F0:DD:69:F6:22:DC:63:61
            X509v3 Authority Key Identifier:
                keyid:7B:72:13:88:FD:13:E8:AE:43:C9:7F:03:01:98:1D:22:92:C8:88:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e3ITiP0T6K5DyX8DAZgdIpLIiJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115964/EFC2CCBC270F11EBADE6C019C4F9AE02/e3ITiP0T6K5DyX8DAZgdIpLIiJc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:80:01:92:26:91:98:fe:4c:d1:cb:79:b3:55:70:63:9a:
         b9:9c:ff:0e:b9:d8:4e:e8:7d:28:b5:76:3b:20:54:7b:5a:70:
         da:c8:bc:a7:c5:f1:7a:d7:14:34:2b:71:69:c0:b8:ac:b7:2d:
         9d:bc:f1:97:32:74:b4:a2:ba:d8:e6:49:c3:de:11:ba:ce:e4:
         85:ff:bb:04:d3:8a:5c:f6:f1:b4:46:af:ac:07:a9:1c:c5:0d:
         aa:34:a5:f0:62:1e:b6:00:17:cc:64:f9:d7:9f:c2:88:68:27:
         7d:e7:7a:f4:06:fb:71:eb:5a:fe:ca:9f:f6:7e:b7:97:5d:d1:
         d0:7a:f9:67:32:3c:a1:40:3d:8f:e7:96:12:6d:39:13:af:99:
         68:ba:24:fb:e5:c5:07:e2:8c:e1:f0:9c:c8:f7:90:8f:5a:bb:
         f4:a6:c9:44:67:90:9c:52:e6:cf:f8:a3:23:42:b5:6f:0b:67:
         75:75:a0:82:c1:f8:98:a8:6e:bc:be:83:51:8c:3d:3c:cd:f6:
         c9:47:a7:05:b9:6f:f0:09:ef:84:a2:4c:49:b5:12:7c:fc:d0:
         f9:7f:aa:ee:95:78:82:7f:49:c3:90:d5:ea:01:cc:8c:03:d9:
         1b:59:22:af:e5:85:f3:f8:c0:c9:11:96:aa:cd:06:ac:1f:b6:
         93:29:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:35 2026 by rpki-client