Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          rbZCqv2OTQcJmh/EfFKZj/tehayc1JhiVK+I7aShDNA=
Subject key identifier:   53:C5:3B:BA:3D:6B:07:38:05:20:8B:5C:5D:AE:09:BA:84:F8:EC:72
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0900
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          08DD
Signing time:             Sat 04 Jul 2026 20:33:08 +0000
Manifest this update:     Sat 04 Jul 2026 20:33:07 +0000
Manifest next update:     Sat 11 Jul 2026 20:33:07 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: WfkOvAmyAgjw/cJ9ovl7O9p5vDQ9L835GgiT1d7yoVc=)
                          2: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: DpnrDLtmUYXL+QS+EesHCO03r/B2g7JpvqZf7zraP80=)
                          3: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: 4WRaKk2cTpYFo/oZ1tSpXVomBfLw7g63zvt2u39jxhQ=)
                          4: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: cJfzdxVNCRGQQr7NwQRxvNVS78tppuu9mzDc8jjC650=)
                          5: C664689AE0F511EABB96D531C4F9AE02.roa (hash: e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Jul 2026 20:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2304 (0x900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Jul  4 20:33:07 2026 GMT
            Not After : Jul 11 20:33:07 2026 GMT
        Subject: CN=6a496e04-f008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:ca:2e:7e:d7:8f:48:b0:8d:ef:76:2b:ba:
                    75:d2:a7:f6:d6:92:53:41:33:ec:32:85:03:f0:0c:
                    85:76:d4:89:a5:4b:19:b5:2f:0b:c5:ed:31:8f:f0:
                    d5:31:c0:f6:c5:ab:a7:81:6e:f8:2b:f4:be:82:ae:
                    36:57:7c:1a:c3:f4:88:37:e2:94:b8:74:6a:a7:d1:
                    30:77:16:a9:43:1f:01:3a:e3:00:42:06:fc:c6:50:
                    50:a8:67:5a:0d:d5:5b:f6:76:97:c4:c7:38:7b:51:
                    3f:76:4b:ac:09:94:08:e7:fb:dd:53:d9:90:ab:c5:
                    35:48:41:48:bb:03:4c:f8:c8:18:7c:ac:c4:c6:ea:
                    88:c7:61:b8:86:1c:5c:c1:56:5e:45:da:6b:b9:cb:
                    2d:b2:db:3e:04:fd:77:97:ac:10:39:d3:bb:2b:6f:
                    fb:e3:21:c3:66:a8:52:9e:de:e1:5e:3d:8f:89:36:
                    80:a4:7e:13:35:8f:2b:8d:e8:7d:23:44:cd:94:8b:
                    55:25:33:87:f6:3b:2d:7b:12:3d:53:f3:5c:5f:ba:
                    25:25:df:6d:a9:cb:4d:5d:86:03:db:8a:2c:86:53:
                    47:1c:fe:c1:fe:3d:f8:b8:09:28:3f:fc:f6:51:0a:
                    59:b3:7b:f9:96:8d:1c:97:dd:3b:80:5d:44:53:a3:
                    7b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:3B:BA:3D:6B:07:38:05:20:8B:5C:5D:AE:09:BA:84:F8:EC:72
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:d2:b4:35:d1:40:82:f8:98:78:27:9e:3f:d5:e6:72:e7:
         a6:0a:1c:23:38:03:8c:80:e6:dd:b4:7f:8b:63:f4:91:2e:db:
         30:65:67:9f:e8:f6:ac:57:be:86:09:55:03:99:d1:ab:5d:2b:
         2f:b9:82:83:b9:fb:22:eb:40:e0:d1:42:38:26:4d:f9:48:b7:
         d2:f8:a8:44:08:d1:1f:78:31:75:a2:4c:3e:ae:91:1f:7b:ce:
         c1:a1:3d:c3:52:c0:8c:fe:8b:90:84:2b:21:78:4b:c3:11:fd:
         39:77:a4:b2:28:5d:73:c0:7d:37:45:d6:6b:79:94:21:d2:e8:
         d1:57:1b:d5:8e:14:89:ef:11:6d:2a:e0:81:53:74:58:e0:65:
         92:b4:26:88:e5:56:c2:33:99:ee:fb:4f:d0:fd:25:2d:f9:0b:
         7f:fa:f8:51:47:6f:13:89:2f:19:da:80:09:a8:25:fc:d7:39:
         fb:28:0e:e7:65:6d:b5:b3:30:5d:eb:eb:55:ad:f0:1b:61:ae:
         b7:6a:62:25:7c:52:a1:50:bc:95:d2:0a:93:9f:8d:cc:18:88:
         78:bd:00:ea:f0:6f:22:63:34:f8:75:42:4a:17:40:2e:b6:44:
         3f:f6:dd:46:d9:62:3e:c0:3f:2e:98:60:65:8b:40:93:2f:c1:
         47:55:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:03 2026 by rpki-client