Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
File:                     EZQLtYNEqix5xJU51t-RUZbv6CY.mft (raw, json)
Hash identifier:          Fo47Kr47Q/Mp/dekFQozSEznB9/8P2F6HxUqwiCdTaQ=
Subject key identifier:   AD:41:23:E5:44:44:1B:73:D4:3F:5C:20:27:32:46:D2:BD:DE:EE:0E
Authority key identifier: 11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26
Certificate issuer:       /CN=A912B600/serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
Certificate serial:       0889
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
Manifest number:          0880
Signing time:             Thu 16 Jul 2026 14:47:11 +0000
Manifest this update:     Thu 16 Jul 2026 14:47:10 +0000
Manifest next update:     Thu 23 Jul 2026 14:47:10 +0000
Files and hashes:         1: EZQLtYNEqix5xJU51t-RUZbv6CY.crl (hash: 9uTw8Dew+/aaB0FDY0zr/HMrhI7xsZdv2Z3lHaVGETc=)
                          2: 5DE12890180311EBA311E181C4F9AE02.roa (hash: UDT/sxEbJJ4LLH0Gq0n3HSWFZpUlaRKaU2gtkgxvimw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl
                          rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 14:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B600, serialNumber=11940BB58344AA2C79C49539D6DF915196EFE826
        Validity
            Not Before: Jul 16 14:47:10 2026 GMT
            Not After : Jul 23 14:47:10 2026 GMT
        Subject: CN=6a58eeef-b229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a2:67:6a:6a:30:92:4e:5c:c6:ba:b2:5d:66:
                    5d:00:d7:97:a4:7e:5d:14:cd:1f:26:b4:6e:41:3b:
                    ee:54:8e:9a:75:1d:1a:b2:cc:fe:42:01:05:42:09:
                    db:a8:ac:12:f0:aa:e8:0e:19:fb:73:07:01:d9:b1:
                    50:3b:49:1c:57:a9:15:ef:0d:0f:fa:5a:fb:d1:0d:
                    1b:18:cf:b3:a5:28:88:74:c1:50:09:73:09:1d:39:
                    f2:88:b1:69:b7:dc:76:f5:48:e4:98:45:b0:c3:77:
                    92:92:ff:26:33:bb:84:bc:4b:68:37:ed:30:d4:ad:
                    f5:fb:a6:40:57:61:05:42:68:94:c0:3d:72:e9:e8:
                    7b:be:f0:16:ac:ec:d2:16:86:5a:1c:cc:f2:3d:27:
                    3f:cc:07:40:d2:ed:f9:e7:91:69:b2:b3:3d:30:55:
                    3b:39:1c:d6:70:06:bc:db:35:26:35:6f:54:43:66:
                    dc:85:f2:82:25:40:b9:88:71:6d:ff:c0:5f:39:e5:
                    0c:ed:f3:46:62:0b:09:99:07:09:38:85:9a:74:9c:
                    e7:c4:ba:48:1f:b9:0a:ab:75:01:2e:92:12:24:13:
                    11:78:f7:2a:76:5e:97:66:97:c0:a1:ca:d1:2a:a7:
                    cb:48:4c:e9:70:a0:ed:dd:46:63:66:4e:f3:27:ac:
                    bd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:41:23:E5:44:44:1B:73:D4:3F:5C:20:27:32:46:D2:BD:DE:EE:0E
            X509v3 Authority Key Identifier:
                keyid:11:94:0B:B5:83:44:AA:2C:79:C4:95:39:D6:DF:91:51:96:EF:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EZQLtYNEqix5xJU51t-RUZbv6CY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/C0B57422097511EB9D461B30C4F9AE02/EZQLtYNEqix5xJU51t-RUZbv6CY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:de:e1:27:86:20:2d:7b:38:9f:fd:da:6d:ff:1b:73:73:
         47:74:64:ed:b6:b4:c2:a5:a1:a3:92:38:91:52:13:b1:b5:c3:
         68:a8:06:d5:78:f0:06:37:be:58:11:38:4d:b6:3a:0a:86:ad:
         18:75:f8:91:0a:f6:52:be:f6:4e:1e:9e:ee:23:61:ae:92:33:
         f9:0b:32:77:26:20:e1:71:78:81:08:39:ba:a2:f0:73:61:fc:
         73:88:11:30:e3:32:c2:4a:9e:45:db:1f:b1:29:e9:d9:e8:ef:
         ce:0e:36:37:5d:b6:b6:f6:58:fb:b7:70:35:7a:b7:8d:52:0f:
         e1:ae:d4:4c:a0:69:9f:71:31:fb:02:1c:b8:db:c9:e5:6b:ee:
         ea:fe:74:2d:1a:3e:a4:0e:ec:f6:ab:1b:95:b7:5a:af:1a:96:
         24:c9:1d:81:1f:4a:ff:ae:9b:86:50:e4:af:d8:01:2b:18:ea:
         6b:a2:31:fa:aa:d0:75:cd:e7:7b:60:1f:29:9e:32:e1:9c:14:
         a4:d5:27:d8:3e:4a:44:98:0e:de:c9:11:b0:8c:d1:61:dc:18:
         92:c5:28:c2:d9:83:97:6e:06:ff:86:cf:70:2d:79:6c:02:65:
         d6:4e:0f:5c:47:70:46:e6:bd:b8:94:98:32:a0:e0:25:80:28:
         57:b6:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:16 2026 by rpki-client