Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
File:                     EclyfKUpLOXaXXC6iCvC1kP0EIU.mft (raw, json)
Hash identifier:          u1KDUNIIUUitEQQfpLDxmTDfF0/cNLt+qK8m6Bd1MIw=
Subject key identifier:   F1:4A:C2:53:DD:DB:D4:18:0C:8B:3F:1A:8F:50:3E:8C:45:F1:D9:AE
Authority key identifier: 11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85
Certificate issuer:       /CN=A911849D/serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
Certificate serial:       0986
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
Manifest number:          0971
Signing time:             Thu 14 May 2026 20:07:41 +0000
Manifest this update:     Thu 14 May 2026 20:07:40 +0000
Manifest next update:     Thu 21 May 2026 20:07:40 +0000
Files and hashes:         1: EclyfKUpLOXaXXC6iCvC1kP0EIU.crl (hash: eCFx9hm+XqgD8hMF73NIX3FyYMCJUzrL2qak5rKHtcs=)
                          2: C2D236E6B70E11EAAE6CE049C4F9AE02.roa (hash: NUTFunSdqQGhKcXQQFcYDdZdy519YsdeLxbedcwgLIs=)
                          3: 3AD34AA4B66F11EAAA29FB47C4F9AE02.roa (hash: CYmOlMGoeQXLhgY7vPpgwvztx9vwkWkFwNVuEcQyFhM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl
                          rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 21 May 2026 20:07:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2438 (0x986)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911849D, serialNumber=11C9727CA5292CE5DA5D70BA882BC2D643F41085
        Validity
            Not Before: May 14 20:07:40 2026 GMT
            Not After : May 21 20:07:40 2026 GMT
        Subject: CN=6a062b8d-a9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:13:27:d2:db:b3:41:5d:c3:cb:80:ee:88:98:
                    25:ee:f1:94:7c:08:47:06:18:b7:f8:92:73:9a:a6:
                    cd:84:1f:b6:f3:8f:f1:39:c6:b1:09:1c:a3:b1:0c:
                    44:dc:ab:e7:c7:5e:48:93:ee:fa:b0:a3:3a:30:76:
                    ee:23:87:f9:c1:7f:19:99:05:d4:b7:ad:90:31:59:
                    f0:91:b2:d0:aa:d8:2c:00:65:77:7a:aa:16:e3:c8:
                    62:8d:23:95:80:fd:98:85:09:35:f0:5d:55:7c:ce:
                    ff:90:73:5d:15:7d:03:ea:37:a1:37:b6:c1:5f:0c:
                    b3:53:70:ed:d6:7c:fe:75:0e:3a:f9:45:a3:17:94:
                    61:55:b3:3d:28:97:60:bd:65:36:88:ce:f5:03:79:
                    c5:43:09:ed:84:ad:6d:61:39:67:b8:8b:d7:82:ac:
                    b9:04:28:fb:e9:8d:5f:6f:07:44:57:2c:f9:90:36:
                    73:95:89:54:80:6b:5c:9d:81:8d:f9:fc:ba:c5:05:
                    d2:0f:7e:0f:9d:e3:bb:2b:8b:06:bf:8c:a2:b8:09:
                    cc:65:ae:1c:87:03:4f:27:4e:33:f6:2a:de:92:bc:
                    64:0b:93:63:d6:3d:fe:c3:e0:7d:d4:8d:92:d8:b2:
                    f3:bd:43:f3:06:4c:c0:f0:7c:56:ed:8b:43:8b:83:
                    fa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4A:C2:53:DD:DB:D4:18:0C:8B:3F:1A:8F:50:3E:8C:45:F1:D9:AE
            X509v3 Authority Key Identifier:
                keyid:11:C9:72:7C:A5:29:2C:E5:DA:5D:70:BA:88:2B:C2:D6:43:F4:10:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EclyfKUpLOXaXXC6iCvC1kP0EIU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911849D/441A7264B66E11EA9B087247C4F9AE02/EclyfKUpLOXaXXC6iCvC1kP0EIU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:71:f5:76:34:0c:8d:98:0f:6b:41:21:42:23:3e:c7:df:09:
         42:ea:f8:99:53:17:a8:4a:b5:46:e8:dc:c8:05:9a:62:7d:d0:
         df:ae:fa:d2:0f:30:ed:67:82:c0:ea:e9:15:a2:9a:8f:54:31:
         29:92:c6:f9:48:6a:9b:db:f3:1a:40:8c:ce:2d:b6:3f:7e:cb:
         61:1a:2b:4c:99:9f:20:a8:fc:21:5f:54:c0:c5:84:99:45:1e:
         e4:09:a9:af:ca:32:47:ff:51:a4:e0:69:ef:66:88:54:5b:e2:
         a0:24:7d:20:ee:63:9a:4a:78:c4:77:e1:4e:e1:c5:5e:7d:c2:
         6c:b2:90:23:60:09:99:a5:dc:33:19:a2:25:c3:b1:5a:3c:53:
         2b:86:7a:34:50:bb:7e:e2:6a:ae:fc:07:dd:f3:2d:53:12:97:
         5f:20:61:7f:57:d3:68:09:65:93:06:96:ad:a4:09:f6:4e:6f:
         d7:d9:f6:8d:2d:9d:ba:6f:8e:86:14:56:48:42:ad:fb:9d:f0:
         c0:16:28:c5:09:bd:10:76:b8:05:5f:2a:09:fc:e2:60:1e:7d:
         8f:dd:02:c1:f7:50:14:5a:c2:cc:61:9a:e2:15:e6:22:a3:9f:
         48:f4:2f:6c:6e:a9:3f:ed:6c:36:68:e2:b2:b7:ec:d0:a8:10:
         51:26:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:44 2026 by rpki-client