Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          ae84oYZGZpsWciGJ05fHtPiZTOShB7AqHfa2MQCTpzA=
Subject key identifier:   07:A5:50:CF:E0:09:40:9D:69:CE:2E:B9:DB:67:30:1F:98:9C:5E:48
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0918
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          08F5
Signing time:             Thu 20 Aug 2026 20:16:21 +0000
Manifest this update:     Thu 20 Aug 2026 20:16:20 +0000
Manifest next update:     Thu 27 Aug 2026 20:16:20 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: /cBLFdzjtfXHLNcE7Q+7hVboxY6effbt54kT1PVpOsE=)
                          2: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: 4WRaKk2cTpYFo/oZ1tSpXVomBfLw7g63zvt2u39jxhQ=)
                          3: C664689AE0F511EABB96D531C4F9AE02.roa (hash: e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=)
                          4: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: cJfzdxVNCRGQQr7NwQRxvNVS78tppuu9mzDc8jjC650=)
                          5: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: DpnrDLtmUYXL+QS+EesHCO03r/B2g7JpvqZf7zraP80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Aug 20 20:16:20 2026 GMT
            Not After : Aug 27 20:16:20 2026 GMT
        Subject: CN=6a876095-b042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:69:56:38:0b:e4:22:3d:c2:af:bb:73:fd:
                    97:19:0a:29:30:c0:49:15:a0:bc:d9:b4:0a:6a:e8:
                    91:30:03:98:04:10:00:10:54:ca:98:f7:53:f7:65:
                    a5:86:c7:46:5c:b3:ae:65:29:0a:ef:6b:08:25:1f:
                    f2:02:3f:a4:1f:64:28:c5:df:14:08:ff:65:0c:26:
                    e3:d7:c2:48:6d:d5:0d:2b:c7:58:50:20:eb:0b:7f:
                    c0:5f:8e:dd:e6:98:69:04:57:ff:97:66:66:15:3b:
                    89:8d:2c:72:d4:f3:83:e9:42:05:48:8a:79:83:6b:
                    c1:15:26:a1:27:49:32:ea:ae:35:5a:cd:60:26:b1:
                    2e:6a:91:ad:77:42:64:63:49:67:6f:d8:a2:d6:fd:
                    da:1f:ce:d1:63:c9:92:87:b5:32:48:d6:80:a4:2c:
                    66:f8:e5:61:3f:ae:23:3c:16:c2:57:fd:ee:49:9d:
                    79:68:d3:44:27:57:f4:0b:8c:bd:7d:5a:e7:cd:ba:
                    c9:be:b8:7c:0b:42:f1:5b:5d:41:ac:d4:a3:69:f1:
                    83:8b:d8:82:80:d3:5b:31:9f:3b:ca:18:59:4b:81:
                    a5:6c:cd:88:ac:ae:5b:bb:f7:27:0b:8e:4f:1d:f9:
                    03:48:c4:07:8f:c8:3f:e3:03:94:1c:87:40:69:1a:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:50:CF:E0:09:40:9D:69:CE:2E:B9:DB:67:30:1F:98:9C:5E:48
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:d0:39:60:c5:dd:59:0b:13:e2:1a:45:34:45:9f:23:77:
         07:d9:f4:16:fd:3d:e7:b3:cf:ea:24:e6:00:fd:e6:bc:fb:9a:
         59:38:12:9f:e4:af:64:d1:77:f0:54:4e:52:1d:e4:59:44:6c:
         15:04:02:f4:21:cc:99:bd:86:b8:9c:39:3b:47:89:26:1d:29:
         80:4f:c6:d0:d9:6f:3b:6e:43:d5:1d:ed:56:0f:15:81:0a:af:
         77:6b:56:f8:1e:b8:52:e7:86:62:ae:b9:c4:e2:49:d1:76:1a:
         3a:8e:6c:cb:eb:35:a8:7d:b9:9e:13:73:4f:3b:15:ae:83:01:
         c0:d4:72:df:bc:31:ca:f7:92:7f:e9:b9:76:2f:4c:1c:14:1d:
         f3:39:a4:c8:26:de:58:91:07:aa:f6:39:63:f2:72:5c:dc:42:
         1c:bd:e9:ca:eb:33:3b:4f:2e:1f:0e:e4:d8:d3:23:e2:98:41:
         f0:aa:e9:50:53:a0:3f:d2:a4:f7:fd:79:27:b3:01:62:b4:a1:
         68:de:a2:37:f6:18:cf:73:84:d8:aa:ce:ed:78:f8:fb:0e:87:
         28:b7:8e:74:4a:58:1d:78:3a:73:e1:75:19:1d:36:ca:aa:21:
         8f:84:d2:97:75:33:89:88:d9:77:a1:dc:a8:71:64:f7:01:b9:
         67:3b:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:28 2026 by rpki-client