Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File:                     EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier:          xzDcOGlyf/sVhN0SZxpatuvwgKhkeqE50mUhdHureVE=
Subject key identifier:   1B:70:75:C1:B6:46:A3:66:4D:2C:6B:3E:98:9B:1F:1B:68:0D:70:7C
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer:       /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial:       2140
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number:          2134
Signing time:             Fri 12 Jun 2026 15:54:10 +0000
Manifest this update:     Fri 12 Jun 2026 15:54:10 +0000
Manifest next update:     Fri 19 Jun 2026 15:54:10 +0000
Files and hashes:         1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: 3eABC1MaYrpNwjOh8IY3P1S2Nie2SQ3rQ6E3EsJiR30=)
                          2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CbaVakrw0TtkU+Q7XuwXMaUsEoO5bFQk16pQPN02uwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8512 (0x2140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
        Validity
            Not Before: Jun 12 15:54:10 2026 GMT
            Not After : Jun 19 15:54:10 2026 GMT
        Subject: CN=6a2c2ba2-b3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:72:d1:bf:7e:99:ef:70:7b:10:fd:95:e8:
                    ef:95:23:06:f7:05:a7:f5:49:a8:3f:c8:c2:f7:33:
                    8e:90:3d:67:a9:09:54:f4:8f:e1:99:5e:6e:e8:76:
                    8e:99:ce:50:f4:0e:48:e2:2f:c3:aa:2b:b0:cf:39:
                    6c:e8:07:f4:95:0b:7c:b4:79:26:5f:69:27:e1:b1:
                    46:d6:71:19:f9:94:5c:01:b1:83:36:d3:7a:47:e5:
                    ea:b5:8d:60:8f:21:ae:9b:57:c8:5c:f3:6c:90:9e:
                    02:bb:ba:33:64:d0:8b:a7:a6:c6:73:b8:71:0f:01:
                    0a:ec:54:0d:a9:c0:f7:fe:a2:ac:e5:63:3b:75:8c:
                    51:09:fc:d5:e5:c7:bc:a9:1a:e3:61:a0:54:e1:e1:
                    57:2e:1a:5d:3b:84:bb:bc:93:38:e5:3c:49:72:84:
                    b6:79:a0:55:a5:9b:34:a4:26:44:1d:72:56:b9:44:
                    c8:9c:43:e6:b2:c3:bc:12:86:a6:78:29:29:a4:ec:
                    6b:d7:3f:32:de:ef:8e:d2:6a:4f:c4:cf:76:9b:48:
                    5d:47:d2:ba:f8:fe:23:5f:03:01:27:dd:10:d1:8d:
                    58:a3:a3:39:a9:bc:1c:5c:94:77:d5:cb:57:cc:68:
                    62:12:26:48:d0:8b:08:7d:e1:4c:8f:15:14:4d:ee:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:70:75:C1:B6:46:A3:66:4D:2C:6B:3E:98:9B:1F:1B:68:0D:70:7C
            X509v3 Authority Key Identifier:
                keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:bf:dd:9e:2c:95:c3:65:c7:31:69:3b:f4:1d:80:f3:a1:
         af:69:6a:2d:08:af:62:50:cc:09:15:38:8b:84:01:ce:3e:96:
         a3:c2:c0:26:1b:e8:70:39:65:dc:f0:08:92:38:c7:84:ee:3f:
         85:34:7e:ba:56:c0:fa:69:45:a9:d3:e9:ae:2c:1c:b9:87:25:
         da:0d:c2:22:30:23:81:41:05:19:67:a3:5d:48:24:d6:71:9c:
         19:94:84:36:d3:e4:ce:ea:e5:fb:0c:36:2c:1f:5f:93:6f:3f:
         56:24:0e:7b:3d:34:40:3b:63:b1:23:83:03:92:e1:8e:0a:de:
         af:28:e6:98:dc:7f:11:73:43:a2:82:23:a8:2b:83:98:0c:6f:
         9d:46:58:d7:0f:cd:9c:15:29:34:39:e0:65:83:20:51:03:47:
         eb:eb:b9:53:97:7b:bb:bf:d7:51:f5:0f:79:61:3c:f3:bf:ae:
         4f:b9:cb:5f:c3:32:68:dc:0a:7e:db:1c:4e:81:c8:04:2a:85:
         b2:43:44:f7:05:95:8f:13:8a:26:76:86:bf:dd:3f:34:86:15:
         40:5f:05:93:33:27:a4:bd:0e:71:82:a1:b4:7b:60:b3:81:85:
         d2:40:af:c8:1a:60:56:55:04:07:2b:f0:35:85:47:ee:19:d9:
         09:b9:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:41:50 2026 by rpki-client