Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
File:                     eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json)
Hash identifier:          OOrd10o9JvyP0Uy1TwDcxzxTFujstAuWyoMcQrwmhaw=
Subject key identifier:   A0:FD:52:2D:79:66:07:E5:4D:76:33:A5:7B:83:43:5A:52:F5:32:F2
Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A
Certificate issuer:       /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
Manifest number:          012A
Signing time:             Wed 19 Aug 2026 06:27:09 +0000
Manifest this update:     Wed 19 Aug 2026 06:27:08 +0000
Manifest next update:     Wed 26 Aug 2026 06:27:08 +0000
Files and hashes:         1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: KSXISQMI5+JwflEWK9ZIo7goUYVyTWEJ48dU/OhYP+g=)
                          2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: JpLGsHIY2yS8bZvm382sIzqCSLe8QgPUX8GSUQYq0TE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl
                          rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 06:27:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A
        Validity
            Not Before: Aug 19 06:27:08 2026 GMT
            Not After : Aug 26 06:27:08 2026 GMT
        Subject: CN=6a854cbd-fe04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:12:31:6f:81:95:e7:94:05:e3:1c:6e:29:
                    81:a3:86:5d:67:f7:37:a4:17:3d:46:72:83:17:9c:
                    1b:fd:62:73:16:e6:bc:c3:25:8a:88:bb:c9:0b:4e:
                    18:c8:aa:fe:d2:9f:06:36:54:1b:79:b7:3e:5f:2f:
                    25:2f:8c:d8:90:5b:58:29:91:eb:a7:04:1c:89:1b:
                    65:00:29:ad:2e:d4:8a:35:db:e7:84:a2:1a:b6:a0:
                    98:0f:e8:3a:ff:4d:1c:ba:8d:57:aa:c1:ea:e3:63:
                    ac:53:ec:d2:54:ce:90:6f:02:cd:6c:dd:e0:bf:32:
                    43:9a:28:1d:f5:9d:e1:f1:9d:67:e0:be:76:71:6f:
                    64:7a:2e:1d:a5:ee:95:90:23:c5:e2:00:de:a8:56:
                    c5:58:bf:ec:57:29:65:7d:cb:58:dd:46:13:f7:9d:
                    4a:d0:be:f6:e0:64:1b:7e:cb:1d:45:ec:f1:97:0c:
                    b8:f9:5b:29:12:b1:a8:59:02:3c:13:ee:e5:32:5f:
                    b8:17:00:50:0a:2d:4b:bf:68:01:55:d3:e6:dc:be:
                    71:71:e1:38:87:eb:f1:9e:41:d9:3b:d4:af:8a:13:
                    61:f7:af:a0:c2:71:48:bf:af:b1:3f:0b:fb:8d:10:
                    0a:df:39:91:6c:e8:bb:92:3f:90:70:cd:21:f7:12:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FD:52:2D:79:66:07:E5:4D:76:33:A5:7B:83:43:5A:52:F5:32:F2
            X509v3 Authority Key Identifier:
                keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:8e:cb:78:fb:8b:88:1d:28:37:f1:d8:ae:cb:74:49:c1:57:
         62:82:1a:0e:5a:a8:65:11:d1:30:88:0a:67:89:f2:68:03:61:
         83:a0:6d:28:df:26:26:77:26:89:bf:3e:73:a1:90:fc:ce:39:
         98:ef:a5:f3:2f:c4:0a:72:37:56:27:a8:56:d7:1b:97:90:74:
         11:d0:3c:db:10:b5:92:ef:73:d0:6d:63:31:ce:a6:a3:6f:a9:
         a6:37:25:c0:22:76:a6:6e:a9:ee:53:c5:6f:23:70:e8:ac:3c:
         66:ea:8c:eb:ce:79:c9:41:2d:2e:f0:33:0e:15:3a:35:3b:7a:
         62:6b:22:a9:e0:19:ce:55:26:9b:5e:b9:dc:b2:61:45:7d:e9:
         2f:6b:0b:40:14:fb:e0:6f:06:54:d8:b1:bb:2a:ee:e4:41:fa:
         65:72:ef:79:0f:85:dd:1b:b9:b2:c3:1b:70:41:0e:fd:da:02:
         07:be:12:1b:60:be:11:27:95:0e:29:cc:1e:45:ea:d2:b5:91:
         be:d6:59:75:c2:d9:9a:91:e1:8d:ea:f3:26:08:ba:13:6a:59:
         b9:4f:3e:af:09:21:9f:23:37:25:c4:85:ee:3f:2b:95:6f:20:
         ef:b0:a4:fb:7b:d4:04:4f:89:14:d0:f6:e8:b4:af:88:43:0c:
         48:d1:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:47:33 2026 by rpki-client