Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
File:                     EPYca742dARRL7yDzdqFqZx_PHU.mft (raw, json)
Hash identifier:          bB+DiJxC7AdcVFCkm9bvxWOvgZn/+Vtb+p1wH/fCspw=
Subject key identifier:   53:3B:6E:E9:70:93:A3:3B:26:3E:19:2B:86:7A:50:F1:2D:71:69:1D
Authority key identifier: 10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75
Certificate issuer:       /CN=A9120974/serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
Certificate serial:       1134
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
Manifest number:          1125
Signing time:             Wed 20 May 2026 17:17:02 +0000
Manifest this update:     Wed 20 May 2026 17:17:01 +0000
Manifest next update:     Wed 27 May 2026 17:17:01 +0000
Files and hashes:         1: EPYca742dARRL7yDzdqFqZx_PHU.crl (hash: 6D2YlHOrcCycMsdSYNG7Dh5u6AwpFbeQouwR5mPAtBA=)
                          2: 33F4955E3A3411F1992413829C833773.roa (hash: xzrc0aZMkP3QUOKDSz7VwBlE/D9wG/T3IpXcxQAIOWA=)
                          3: EAE5FA0068F111EC8890FA3FC4F9AE02.roa (hash: 6KS9OCsrsIMN/yuwvdA00TtrzykhEoQMpStopN33PPg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl
                          rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4404 (0x1134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120974, serialNumber=10F61C6BBE367404512FBC83CDDA85A99C7F3C75
        Validity
            Not Before: May 20 17:17:01 2026 GMT
            Not After : May 27 17:17:01 2026 GMT
        Subject: CN=6a0dec8e-702b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ab:86:87:b0:f6:01:02:d4:9e:7f:74:27:09:
                    37:4b:fe:53:e2:70:a6:59:a3:5b:93:de:ec:0d:ed:
                    31:67:ff:95:92:21:20:a3:ab:14:d3:ab:7d:67:3f:
                    56:54:f7:d2:ff:04:44:31:19:0c:6c:55:6c:ac:15:
                    5e:46:0b:dd:9c:c2:9f:e2:11:95:a8:b9:22:94:2d:
                    0a:07:4c:ec:f2:cb:f3:23:96:09:90:d5:6d:17:d2:
                    5e:a9:0d:8f:f0:2a:12:89:30:e5:49:ab:d1:30:ae:
                    bc:36:cf:0b:1f:bf:c1:25:b9:76:2d:a9:c1:9f:dd:
                    3e:ac:e7:16:88:9d:28:bb:75:49:88:f5:ad:4d:b8:
                    3e:16:41:3d:eb:3e:0d:37:2e:ed:32:dc:62:ce:b4:
                    ab:e7:4f:68:16:fb:30:23:53:bf:7a:7c:4c:b3:76:
                    b1:8f:7f:1d:fd:6b:63:30:da:fa:c8:c3:7e:04:47:
                    7a:62:79:65:f9:e5:cd:7d:ca:12:4c:f2:47:b9:e0:
                    20:6b:af:4a:8f:26:be:a9:7a:b1:60:fa:b7:47:96:
                    fa:06:ae:40:12:82:67:97:81:e0:4d:7a:1e:87:8d:
                    d4:96:14:21:07:43:6d:78:d0:3e:b7:36:86:e9:3a:
                    37:42:88:64:da:c1:aa:eb:ac:95:34:86:60:19:83:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3B:6E:E9:70:93:A3:3B:26:3E:19:2B:86:7A:50:F1:2D:71:69:1D
            X509v3 Authority Key Identifier:
                keyid:10:F6:1C:6B:BE:36:74:04:51:2F:BC:83:CD:DA:85:A9:9C:7F:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPYca742dARRL7yDzdqFqZx_PHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120974/EC8230E23A4911E9940F2D16C4F9AE02/EPYca742dARRL7yDzdqFqZx_PHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7d:44:28:c6:43:5b:13:e4:f1:5d:ce:2d:8c:c6:50:31:a8:
         f6:10:11:ca:e1:4c:75:79:75:47:bd:0c:be:a7:f1:b8:1b:33:
         f9:f6:54:e8:7f:ff:c7:88:31:fa:c3:74:b4:a9:88:d7:b7:ed:
         8a:98:7a:bc:14:ed:3b:02:2d:74:28:96:40:cb:cf:20:7a:f0:
         d0:19:a8:fe:6e:d1:b4:86:b8:f5:e0:99:a4:b9:65:21:74:a6:
         ab:27:8f:59:77:e5:e8:22:42:a0:dd:98:2b:23:8b:d4:36:fd:
         0c:53:41:1c:5c:fe:77:32:36:90:e3:49:af:fe:da:cf:7e:a5:
         08:08:e7:e8:80:84:d5:c6:d5:fa:5a:c7:35:2e:9c:e1:d5:e4:
         91:1b:d5:00:b6:5a:a9:9b:03:e7:a5:94:f1:e9:e3:0e:6c:0e:
         c7:bb:76:c7:8f:90:e1:07:56:01:74:fa:71:b5:88:4a:72:a6:
         8c:5c:35:06:79:c5:5b:50:de:9e:b9:03:eb:0e:68:63:30:f3:
         f0:7c:81:76:47:a3:21:86:c2:b8:de:52:f7:db:68:6e:81:40:
         08:20:b0:86:89:a4:11:73:98:71:fe:1f:3e:34:54:e7:e7:eb:
         57:60:26:00:1c:4b:2e:f4:57:82:64:72:8b:61:6c:e9:85:a8:
         30:97:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:45 2026 by rpki-client