Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
File:                     EPSBzyjc51gajMuOUN4Jj3yLyRU.mft (raw, json)
Hash identifier:          T+WrBn5t43WE4iumkcUtyIaTfBEFcqOTbCJgNWjslpE=
Subject key identifier:   C1:6B:46:7F:93:0B:39:94:82:F6:7A:74:CE:BE:54:63:E4:0F:4C:58
Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15
Certificate issuer:       /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
Manifest number:          01C5
Signing time:             Thu 21 May 2026 03:51:36 +0000
Manifest this update:     Thu 21 May 2026 03:51:35 +0000
Manifest next update:     Thu 28 May 2026 03:51:35 +0000
Files and hashes:         1: EPSBzyjc51gajMuOUN4Jj3yLyRU.crl (hash: wluwQTuvhrceGxmEjMrp0//EqBgnzJHT6cqrc/fnSfg=)
                          2: E070CA0CAA2E11EEA404D421C4F9AE02.roa (hash: o96mpuKrzwB2gFvcEtod8cNkmbA+4sMQIapyn3FXveM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl
                          rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
        Validity
            Not Before: May 21 03:51:35 2026 GMT
            Not After : May 28 03:51:35 2026 GMT
        Subject: CN=6a0e8147-9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:99:ca:c0:e5:14:45:28:a9:d1:67:49:19:59:
                    44:bb:db:4c:c5:1a:44:99:c6:a3:d2:93:60:77:22:
                    3c:35:e0:d2:d1:1f:42:4e:4f:5c:9f:89:ac:ea:31:
                    48:ae:d0:c8:5f:18:68:2a:59:9f:79:7d:db:6a:2d:
                    0b:c1:ae:90:fa:e9:b8:c1:d6:a7:f0:8d:da:25:76:
                    06:44:2a:3b:77:d9:eb:dd:43:01:aa:5c:8d:be:52:
                    be:dd:3a:c6:55:04:23:b8:5f:46:c2:7e:1c:cf:8d:
                    79:c5:6d:ee:16:f4:59:f9:6b:80:4e:47:2d:32:f2:
                    34:fb:32:fc:50:a8:53:e7:5a:db:2c:2c:93:c8:43:
                    c4:b2:7c:4d:e7:91:5d:bb:f7:ba:41:36:ee:3d:7c:
                    89:29:46:fa:6d:19:62:8c:f1:c6:f5:6f:c1:29:a5:
                    5b:a3:80:2c:0c:75:fa:26:79:26:a2:7d:a6:56:2c:
                    d0:41:a5:ca:ba:6b:9c:d6:b9:b8:86:22:de:bb:40:
                    36:88:48:4c:98:ac:f2:8a:7d:7a:96:10:35:93:bc:
                    44:a8:e4:d2:95:6f:07:76:78:44:0a:08:f6:94:27:
                    67:b7:18:dd:34:16:48:de:fb:4a:58:f6:3f:27:0f:
                    43:28:03:5e:da:31:c3:95:b2:c8:64:5d:58:83:07:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:46:7F:93:0B:39:94:82:F6:7A:74:CE:BE:54:63:E4:0F:4C:58
            X509v3 Authority Key Identifier:
                keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:8a:93:64:f9:3b:d6:cc:e5:66:34:97:cb:41:65:43:74:
         73:11:b2:2b:87:5c:d5:50:ed:76:39:e5:cd:6b:6a:1e:3e:17:
         9d:31:74:af:d5:20:f5:42:1d:36:91:8a:1d:ac:4d:b4:5b:37:
         1d:c4:31:ea:a8:60:ef:3f:62:3f:a7:74:c2:82:b9:93:4c:33:
         71:2e:98:9f:23:87:1d:e9:70:1b:92:62:85:a2:7f:e4:80:64:
         32:d1:76:8d:c9:7a:8a:90:86:63:7e:2a:e9:a7:44:d4:76:18:
         55:3d:1d:44:5b:8b:88:03:ad:0d:c1:c1:58:a9:2e:5c:4d:05:
         84:45:9e:48:53:f2:4d:ea:3b:fe:23:76:88:b5:7a:84:36:58:
         e7:f7:61:b6:ca:c1:02:51:17:ed:ff:ef:80:e7:9f:ad:2d:eb:
         e4:f3:94:c7:aa:a6:8b:1e:ea:ad:70:4c:47:71:d3:ec:66:e2:
         70:7d:b6:9c:61:1d:d7:3e:21:62:34:e7:dc:00:e2:18:d1:7f:
         47:7f:dc:a1:f0:46:09:6d:14:cd:e1:26:30:9e:7c:de:c6:8b:
         d2:8d:f0:86:44:45:4d:2a:ed:06:72:a2:78:d6:8b:bd:0e:41:
         50:d6:7a:f6:c7:66:15:0e:f4:3f:0f:62:fa:3f:f3:c3:73:a2:
         11:3e:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:19:33 2026 by rpki-client