Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
File:                     eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft (raw, json)
Hash identifier:          cayEr5hwgzQPp9OeWNi0WgRYCYT4iITfstHBLC2KXSE=
Subject key identifier:   B8:28:77:C9:77:66:F3:D0:4D:EB:5D:2A:76:C3:79:59:EE:19:6F:4F
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1DDE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
Manifest number:          1DCC
Signing time:             Tue 30 Jun 2026 16:15:11 +0000
Manifest this update:     Tue 30 Jun 2026 16:15:10 +0000
Manifest next update:     Tue 07 Jul 2026 16:15:10 +0000
Files and hashes:         1: eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl (hash: RZlLe2a2UBjHgn+tUKgUpet6fa+BpFCfV8xlZAwnn10=)
                          2: 8D3981D8E27F11EEA6719536C4F9AE02.roa (hash: EH6q56ISDCHDpLM+gTINYlfYJSkWlD4ZZojPS20s3Yw=)
                          3: DBB62584510F11EE91E98858C4F9AE02.roa (hash: f1TZSDO6dOE9en1CMS/wAFiLo9UGCV0vwp3Y9mMVLew=)
                          4: 8DB2B8E6E27F11EEA6719536C4F9AE02.roa (hash: pnBR0xS0dQQ2SDLLqNdwnP0A7v24fxl8+oyuwqvoLV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 07 Jul 2026 16:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7646 (0x1dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A, serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
        Validity
            Not Before: Jun 30 16:15:10 2026 GMT
            Not After : Jul  7 16:15:10 2026 GMT
        Subject: CN=6a43eb8e-ceb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:43:80:f8:9e:df:86:7f:83:45:19:d8:9d:
                    5e:1e:3a:91:0a:54:d6:7d:8a:75:be:2c:da:4b:85:
                    90:fc:cc:8a:d5:e5:68:b4:d5:ce:4d:e2:c0:f6:de:
                    92:d0:cb:81:ef:7d:bc:de:6c:39:47:1e:73:fc:18:
                    19:90:a8:79:b8:b3:fb:24:f2:5b:5e:3e:4d:d2:6c:
                    1a:ce:5e:0e:c4:0c:76:6a:36:93:0c:6c:5e:d5:9c:
                    9d:6e:c8:10:1d:2b:81:96:03:7d:46:81:af:9c:f8:
                    f3:41:03:d4:39:00:41:05:b1:b7:ed:f2:94:4f:bc:
                    17:05:28:3d:6a:18:28:17:52:66:58:87:18:e8:31:
                    97:09:43:3e:bc:eb:50:18:3c:56:0a:2a:e5:1e:3f:
                    29:8f:d7:dc:db:4b:74:2f:36:39:72:e1:8f:28:a0:
                    79:e9:1b:6a:b8:c5:2d:57:a8:26:47:d6:13:98:02:
                    28:16:c1:e2:96:d0:bd:aa:17:0b:f8:65:28:81:ed:
                    98:34:ea:ef:d7:35:1d:43:33:fe:1d:d7:46:27:3a:
                    f9:74:2b:80:80:fe:35:93:fd:72:7a:2d:9f:eb:73:
                    82:5a:37:6b:2a:60:21:1a:39:b7:52:ab:c9:9f:f9:
                    4f:fd:1a:29:c4:b3:31:61:43:e8:3c:22:42:78:61:
                    71:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:77:C9:77:66:F3:D0:4D:EB:5D:2A:76:C3:79:59:EE:19:6F:4F
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:d0:3a:5a:d5:43:68:98:4d:ec:d2:9f:26:21:ee:ee:47:
         a7:71:b6:3c:d9:fc:b3:ec:e5:92:da:07:ea:0f:97:4a:56:67:
         a4:aa:c7:e2:a7:e0:08:e2:9f:51:c4:91:23:c0:92:ac:11:1e:
         16:e9:67:d9:29:30:a3:6c:73:8b:fa:d3:a4:16:e3:47:bf:3c:
         22:6e:78:f2:ad:d1:36:3a:0b:e1:88:a9:ee:04:c2:78:c1:d9:
         6a:c2:d3:86:4b:1b:a3:90:b6:77:24:57:8a:5d:56:87:70:f2:
         a4:bb:a3:de:09:57:da:13:63:fd:78:0a:0d:fe:c2:42:c7:b8:
         f6:a9:91:88:f6:21:02:a8:7a:b2:b6:c8:87:42:2e:a6:da:b5:
         ca:29:ad:3b:e8:6d:0d:28:f8:d4:9b:6b:45:99:06:9c:c4:cd:
         d0:37:27:6e:59:d7:3b:7d:a7:b9:02:1e:60:8c:d7:8b:be:77:
         66:70:a8:85:c3:d9:26:81:bc:14:53:6d:67:28:9c:d3:f7:3f:
         71:6f:ad:1b:71:11:d9:de:26:db:6f:a7:3c:57:c1:b5:85:50:
         44:50:33:3b:73:74:5e:0f:14:86:26:49:71:a5:70:a3:86:63:
         4c:1b:94:67:3c:eb:ab:d3:27:eb:56:9e:fb:fc:2c:f1:a5:c5:
         c0:e2:5f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:38 2026 by rpki-client