Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File:                     EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier:          Ow5AHXFZVrHzQzmYEDKVnN6NjMoqom0es57wS5gWlIw=
Subject key identifier:   5F:70:C1:B7:D1:D7:F5:CA:E3:AA:9D:7A:88:37:4F:08:30:71:9D:EE
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number:          01D2
Signing time:             Fri 17 Jul 2026 04:41:03 +0000
Manifest this update:     Fri 17 Jul 2026 04:41:03 +0000
Manifest next update:     Fri 24 Jul 2026 04:41:03 +0000
Files and hashes:         1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: dNiyDU9JoeC9zVNtlFZ3c985rY2CCvZUOa7xNQCZpV0=)
                          2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: sg5RK8LADXzmH369qo3Kwz612CokrUc7M6Afz3E8p9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 04:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Jul 17 04:41:03 2026 GMT
            Not After : Jul 24 04:41:03 2026 GMT
        Subject: CN=6a59b25f-16d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:95:96:04:26:7d:bc:a9:d3:48:d3:a5:82:
                    84:d2:67:6b:1c:e7:c3:8c:3f:35:2f:99:cf:4b:2c:
                    53:89:b7:d2:e7:ef:04:c6:84:37:e0:6e:45:15:20:
                    3f:0b:8c:0d:a2:ca:15:2a:1c:2d:03:9e:46:38:a9:
                    de:d3:1d:f3:c9:8d:2b:bf:fd:1e:30:33:35:44:8e:
                    39:bf:1e:be:34:3c:81:74:36:cf:c4:a5:03:42:19:
                    52:f3:b7:32:d3:c2:32:ef:92:8e:c0:45:27:e5:94:
                    c3:44:05:2e:16:e1:a2:0d:9a:c9:50:ce:8b:bd:5e:
                    5e:33:d3:e8:59:77:28:6f:b3:5a:87:5f:06:4e:17:
                    08:62:56:88:cb:94:d3:44:46:f5:6e:64:27:f3:fc:
                    74:92:4e:f0:1d:38:db:19:6c:7b:51:f4:30:ee:dd:
                    9a:ed:19:ef:0d:d4:f4:6a:a6:3a:6e:8d:b4:e0:bf:
                    77:73:e0:9c:f4:3d:d3:d8:52:96:c6:cf:cb:1a:f5:
                    6e:90:67:65:f1:5c:1c:1b:c9:e5:e1:2b:4a:0b:f2:
                    5a:03:1d:18:93:81:fc:72:96:b1:da:48:a3:81:af:
                    5a:35:35:1e:12:90:95:df:3d:bb:dc:8e:6e:f7:c2:
                    09:01:79:ed:20:ef:ae:56:29:bb:3a:ce:9c:28:5e:
                    c5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:70:C1:B7:D1:D7:F5:CA:E3:AA:9D:7A:88:37:4F:08:30:71:9D:EE
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:fb:ff:da:61:fd:3c:2f:8c:bc:db:70:d8:f0:b7:ad:55:
         26:a9:e0:e2:5c:90:82:db:a7:37:1c:7f:55:8b:7b:59:2c:d9:
         6b:b5:da:4e:a9:77:85:84:34:71:f3:2e:98:e3:bb:de:1b:ff:
         3d:f7:57:e2:1f:2e:a1:1e:2b:f3:c9:3a:12:9a:e5:2a:8a:7d:
         c0:d5:68:e8:d4:dd:18:fd:a0:af:b7:6c:8b:dc:d4:66:41:a4:
         79:c4:6b:84:e2:9b:ec:64:9e:d6:86:7a:0c:ac:50:f6:4e:ff:
         d6:a1:f6:62:14:a5:8e:bd:21:50:bd:c0:34:94:e4:b3:05:ce:
         2a:b2:a8:36:7e:56:c9:a5:7e:33:c8:c9:d3:29:7b:6c:d4:0e:
         cf:de:01:bf:76:b2:5d:cf:71:05:3a:08:6a:0a:3d:62:ac:52:
         31:8b:fb:85:21:06:41:1c:fe:98:98:9a:d6:2b:63:99:c6:97:
         4b:71:bd:ea:f2:9f:7a:fa:e8:37:e0:cb:9e:1d:75:62:a4:ca:
         99:bc:de:a4:c7:bd:38:f3:3d:26:33:48:95:ff:f1:2b:20:8f:
         33:e8:43:33:83:0a:df:16:59:1b:c8:f5:f3:a0:40:90:9c:0b:
         0b:81:26:1c:ad:7c:9b:97:d3:95:88:d5:a1:b1:2f:f2:cc:26:
         73:78:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:28 2026 by rpki-client