Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
File:                     eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft (raw, json)
Hash identifier:          Lr0ecpiKDsdmg/SCkQYObm1f8MEw0NPwZHV0+Tyj7KY=
Subject key identifier:   EB:DE:DB:26:E8:2C:4D:49:9F:C5:0A:53:FA:1C:CE:1B:83:CF:10:E3
Authority key identifier: 79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8
Certificate issuer:       /CN=A9136359/serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
Manifest number:          58
Signing time:             Sun 05 Apr 2026 07:27:18 +0000
Manifest this update:     Sun 05 Apr 2026 07:27:17 +0000
Manifest next update:     Sun 12 Apr 2026 07:27:17 +0000
Files and hashes:         1: eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl (hash: DBjMBVavk98+DMU1/RVIO9fAGJhIXxI58yskwJST+nA=)
                          2: 698A914EAE2711F096416455C4F9AE02.roa (hash: y+r9i7TzL2RD/9MvqzeTGW3javTKIi4osSyKTznpviY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl
                          rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136359, serialNumber=792C4566B9B0258AB16553822F19DFFE84A2DCB8
        Validity
            Not Before: Apr  5 07:27:17 2026 GMT
            Not After : Apr 12 07:27:17 2026 GMT
        Subject: CN=69d20ed6-0b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:77:f5:f1:52:68:80:1f:d7:9f:7a:d7:52:50:
                    54:75:ea:54:3c:0c:4e:46:4e:37:7f:56:8d:6e:4b:
                    f2:18:ce:27:2d:f6:4f:5a:be:58:a4:fa:51:63:14:
                    7f:45:fa:a6:7c:1d:49:c8:89:bc:dd:6d:26:5d:02:
                    de:15:ea:cf:1d:f9:46:c2:fb:c9:00:61:f9:6b:02:
                    f3:ca:86:ac:ac:ad:d4:6b:27:60:e1:ff:37:18:38:
                    c0:f0:98:41:37:09:5b:a9:b8:c1:81:5f:fc:0b:22:
                    7d:0a:14:73:bf:c8:20:f6:5d:ae:14:30:82:12:5e:
                    84:40:98:64:8c:e1:a9:8d:25:72:07:74:b1:e0:ca:
                    9a:33:72:af:c1:a0:3d:3c:66:3b:3d:d6:4f:ce:66:
                    fd:ec:2a:15:5f:87:f5:fe:40:9f:0f:5b:9e:88:2a:
                    98:6d:94:b2:f2:9b:65:0a:d4:e3:96:80:28:90:f4:
                    88:b1:b0:85:a0:88:1a:91:29:71:86:0a:ba:58:ff:
                    7d:51:dd:7a:f4:f1:73:69:aa:65:fc:df:dd:08:80:
                    3a:9e:69:91:08:05:b1:d8:d6:9a:8c:e3:28:1c:06:
                    95:8c:c1:41:8c:9e:cd:f1:89:eb:23:8a:3f:a9:38:
                    98:cf:a1:79:9f:cb:64:18:2f:71:fc:e3:74:e4:8f:
                    1d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:DB:26:E8:2C:4D:49:9F:C5:0A:53:FA:1C:CE:1B:83:CF:10:E3
            X509v3 Authority Key Identifier:
                keyid:79:2C:45:66:B9:B0:25:8A:B1:65:53:82:2F:19:DF:FE:84:A2:DC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136359/6660D88AAE2611F0BCFF8053C4F9AE02/eSxFZrmwJYqxZVOCLxnf_oSi3Lg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:44:fc:90:56:8c:4c:1b:28:91:54:99:e2:d1:4f:68:77:
         22:99:a1:6b:f8:2f:79:c5:8c:95:ac:85:ce:60:25:fe:94:ca:
         f3:82:3a:ee:3f:40:38:81:1d:a6:a9:44:40:aa:44:29:e8:ea:
         77:dd:b8:41:45:08:63:3e:d8:72:c4:d9:df:d3:d0:02:12:01:
         be:66:f8:0b:3b:1e:57:27:5d:e2:69:a6:39:09:38:f4:86:75:
         93:f3:fd:cb:18:9b:55:1a:53:2a:2b:d0:e6:6e:40:61:e5:ad:
         08:1d:dd:7f:61:e2:6b:c8:85:42:11:00:c9:f7:3b:82:b9:51:
         c9:03:50:4a:15:38:ad:69:49:1d:d6:0e:84:ae:cf:5c:b6:09:
         72:1e:5d:5c:05:92:d3:5a:6e:1f:86:bc:07:4d:9a:0f:0f:4e:
         81:24:9d:1a:68:29:9f:e5:1b:04:63:c5:bf:cf:9f:08:ac:42:
         d0:76:61:29:34:8f:09:1c:4b:4b:88:4b:23:24:16:e0:71:7d:
         a7:2f:32:5d:90:2d:e4:7d:88:f0:68:86:0f:12:d6:27:c2:a3:
         0b:bd:fd:b1:7e:ee:19:db:f8:6b:76:f8:ef:74:50:ff:1c:d5:
         b7:0f:f5:db:17:a6:7c:2a:a7:13:d4:4d:fe:8c:c5:e7:4b:28:
         38:74:a2:a6
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NjM1OTExMC8GA1UEBRMoNzkyQzQ1NjZCOUIwMjU4QUIxNjU1MzgyMkYxOURGRkU4
NEEyRENCODAeFw0yNjA0MDUwNzI3MTdaFw0yNjA0MTIwNzI3MTdaMBgxFjAUBgNV
BAMTDTY5ZDIwZWQ2LTBiN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPd/XxUmiAH9efetdSUFR16lQ8DE5GTjd/Vo1uS/IYzict9k9avlik+lFjFH9F
+qZ8HUnIibzdbSZdAt4V6s8d+UbC+8kAYflrAvPKhqysrdRrJ2Dh/zcYOMDwmEE3
CVupuMGBX/wLIn0KFHO/yCD2Xa4UMIISXoRAmGSM4amNJXIHdLHgypozcq/BoD08
Zjs91k/OZv3sKhVfh/X+QJ8PW56IKphtlLLym2UK1OOWgCiQ9IixsIWgiBqRKXGG
CrpY/31R3Xr08XNpqmX8390IgDqeaZEIBbHY1pqM4ygcBpWMwUGMns3xiesjij+p
OJjPoXmfy2QYL3H843Tkjx1pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU697bJugs
TUmfxQpT+hzOG4PPEOMwHwYDVR0jBBgwFoAUeSxFZrmwJYqxZVOCLxnf/oSi3Lgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2MzU5LzY2NjBEODhBQUUy
NjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13SllxeFpWT0NMeG5mX29TaTNM
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVN4RlpybXdKWXF4WlZPQ0x4bmZfb1NpM0xnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2
MzU5LzY2NjBEODhBQUUyNjExRjBCQ0ZGODA1M0M0RjlBRTAyL2VTeEZacm13Sllx
eFpWT0NMeG5mX29TaTNMZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBjyET8kFaMTBsokVSZ4tFPaHcimaFr+C95xYyVrIXOYCX+lMrzgjruP0A4gR2m
qURAqkQp6Op33bhBRQhjPthyxNnf09ACEgG+ZvgLOx5XJ13iaaY5CTj0hnWT8/3L
GJtVGlMqK9DmbkBh5a0IHd1/YeJryIVCEQDJ9zuCuVHJA1BKFTitaUkd1g6Ers9c
tglyHl1cBZLTWm4fhrwHTZoPD06BJJ0aaCmf5RsEY8W/z58IrELQdmEpNI8JHEtL
iEsjJBbgcX2nLzJdkC3kfYjwaIYPEtYnwqMLvf2xfu4Z2/hrdvjvdFD/HNW3D/Xb
F6Z8KqcT1E3+jMXnSyg4dKKm
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:01 2026 by rpki-client