Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File:                     epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier:          h17SdwkAfj551Vcm5lPK4QYNIo8TAthFnpBwtMs5KsQ=
Subject key identifier:   F7:9A:F7:1B:DD:BC:DD:81:7D:AA:2E:65:2E:4B:45:07:89:20:26:57
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       35CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number:          3583
Signing time:             Sat 06 Jun 2026 14:23:00 +0000
Manifest this update:     Sat 06 Jun 2026 14:23:00 +0000
Manifest next update:     Sat 13 Jun 2026 14:23:00 +0000
Files and hashes:         1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: GdZRReuhtdgxO6n+QjbRbtBuZL6GBlXSNqc4PWtGM8w=)
                          2: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: qiT/GVvRCXwwQO5czxfwtuP70nIiPr4STQfaVH+7UL0=)
                          3: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: BJoCud12RqYU139X5Hg1YEdiSoJoBorro9yFYj7EiQY=)
                          4: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=)
                          5: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: c5BWjsV+5qy4Czn1fNB7N39xouqCRvW12ZZgXgS4ZDQ=)
                          6: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: Im+A1kygYXCcmKM1N88CQpYfMfI1pkZXcprVNJAgc7Y=)
                          7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: CWD+yCy6yNtHR/CgsSdRActZ6Gz+ygW0qqlW1BWQfN0=)
                          8: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: VXO5/U8cHHCFaikukuqO1qnp6nbKhmKzeuFoVz0LqaU=)
                          9: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: izVvMKnosN85WDCwiZeSTea3usmMiFXGuieIuV+2wlI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 14:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13775 (0x35cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jun  6 14:23:00 2026 GMT
            Not After : Jun 13 14:23:00 2026 GMT
        Subject: CN=6a242d44-8112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:f0:46:e0:33:d9:f3:06:8d:af:b4:5c:80:
                    b0:e8:fe:df:ed:3e:9d:1c:32:85:5f:63:c7:ea:e9:
                    fd:13:90:97:cf:cb:f9:50:70:a4:34:8c:9d:b8:7f:
                    8f:fb:14:5b:fd:31:e2:bc:96:1a:1f:5e:34:af:47:
                    59:16:b7:ec:b6:d7:85:af:47:60:69:45:f5:96:25:
                    3b:2d:da:04:77:30:c8:21:bd:e1:f0:44:df:f2:6e:
                    f0:2d:a5:ec:6f:21:8a:82:96:57:34:9d:4d:e0:94:
                    13:10:9c:11:99:1f:c1:45:58:45:cb:5d:d7:f2:66:
                    fa:ae:5d:fc:7f:2d:de:4e:e3:35:9c:ce:23:24:eb:
                    b9:9a:6a:45:40:eb:c2:b0:f8:e6:eb:f5:7c:b4:d8:
                    af:bd:24:84:8a:df:58:b7:73:e2:61:e7:8f:ce:1b:
                    c4:96:17:5d:60:67:53:14:07:68:9a:d0:9a:fd:75:
                    a3:76:a9:c5:6c:3c:bb:e9:26:a7:3a:ab:9b:de:0c:
                    85:a9:28:35:64:a3:26:4b:5f:03:6b:98:4a:4f:84:
                    1f:1b:14:36:8c:7d:ba:ea:cc:25:68:78:00:e7:a6:
                    11:79:a8:1d:f7:f5:e0:55:4e:c7:8d:63:27:cd:b2:
                    46:24:42:30:30:cf:9f:e9:7e:b2:b4:db:80:34:16:
                    be:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9A:F7:1B:DD:BC:DD:81:7D:AA:2E:65:2E:4B:45:07:89:20:26:57
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:bf:89:1b:62:6a:57:09:96:5b:52:b3:25:9d:98:2f:b5:34:
         8f:ce:c1:46:0c:9d:c3:da:7b:0a:11:f0:b5:91:8d:c3:e0:0e:
         ee:82:a9:13:8f:0f:a5:0b:03:af:11:62:ab:f3:de:5c:e9:ae:
         cf:fd:84:24:9f:ee:13:1c:78:b9:9c:b8:a8:44:35:ad:e1:c8:
         23:25:ec:99:ba:27:43:36:a6:04:67:46:78:f1:b5:cc:1d:ce:
         f9:77:14:37:15:35:ee:e9:61:45:a4:65:7a:96:29:06:eb:e2:
         9b:8c:e1:09:18:8e:08:56:86:19:b1:75:69:44:e5:c4:50:ee:
         40:fb:8d:fa:6b:da:72:1e:e5:d0:7b:e8:0e:59:04:a3:65:ef:
         58:82:31:43:2d:e9:f9:29:99:d3:67:79:25:a7:69:94:e1:fa:
         62:1c:60:9f:f2:50:b6:d1:07:8b:97:c3:a8:ca:0e:33:8c:68:
         3a:4e:38:ef:85:02:8f:4f:d1:92:07:b7:ce:7b:90:f8:0f:9b:
         da:31:86:e2:ca:f9:e8:5c:99:c4:46:a7:20:e4:62:f2:28:b2:
         8f:06:59:e3:b7:ce:f2:aa:00:ee:60:b2:aa:10:a9:4a:d8:3d:
         bc:7a:0b:d2:2c:fb:8b:7c:3b:fc:40:8e:a7:50:dc:9a:37:24:
         a2:ab:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:23:20 2026 by rpki-client