Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          xBW9hX+2wYMUGW1Iq/E4z6pwCNQTRvTC3W8JZPl8Rh0=
Subject key identifier:   02:1D:50:15:C4:34:C7:88:F0:72:EF:B6:56:28:E4:0B:EF:44:C2:BA
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          46
Signing time:             Fri 17 Jul 2026 09:45:23 +0000
Manifest this update:     Fri 17 Jul 2026 09:45:23 +0000
Manifest next update:     Fri 24 Jul 2026 09:45:23 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: zHxQ/nmK1WUi+sH7GAlCqMMZ/9D2PiFgkbiHgH83CFU=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: Jul 17 09:45:23 2026 GMT
            Not After : Jul 24 09:45:23 2026 GMT
        Subject: CN=6a59f9b3-625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:e0:b0:fa:36:96:1d:39:72:3c:55:87:f5:
                    1a:09:2a:7e:08:62:af:37:aa:c7:d3:4c:29:c1:bc:
                    42:04:eb:35:31:e0:00:20:81:b8:db:b6:0e:49:19:
                    37:d5:f5:cc:fb:97:4f:b9:fc:77:0b:a2:a5:83:21:
                    3b:2b:f3:8c:5f:c1:68:30:e2:87:48:5a:7d:64:6a:
                    3a:ee:e9:ac:49:ec:e7:bb:79:fc:4c:d6:dc:0d:f2:
                    53:2c:37:5d:38:17:67:2b:1c:9f:a5:3a:99:79:de:
                    ba:04:77:8f:79:0b:8c:04:d4:80:e8:b4:02:7c:e6:
                    37:a6:5c:a3:dd:28:26:3c:ec:da:5f:52:fc:b3:60:
                    02:34:a1:45:aa:52:41:7b:85:63:2f:a3:5d:32:79:
                    6a:ed:a4:52:33:2f:32:e3:73:89:e0:17:17:ec:6f:
                    65:40:99:5b:b4:26:2b:2c:8f:dd:8e:f5:d8:e5:4c:
                    a3:fc:65:7e:04:d9:0d:56:e4:79:e6:4f:2a:96:75:
                    10:f8:f0:b6:70:73:7f:55:58:8f:e3:9f:c3:47:42:
                    78:14:db:6c:e1:ce:45:15:22:34:37:cb:39:d6:d5:
                    9c:a0:83:ee:7f:7d:60:65:5d:8c:84:89:be:94:86:
                    89:fe:8d:a6:24:02:b8:30:83:a9:c1:fe:85:8c:49:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1D:50:15:C4:34:C7:88:F0:72:EF:B6:56:28:E4:0B:EF:44:C2:BA
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:81:a1:ea:bb:b2:06:42:c0:a6:ce:4c:74:5b:91:ab:56:0f:
         27:68:8f:e2:ce:a6:14:08:e2:ed:29:15:3b:8a:03:58:a6:be:
         de:ac:cc:a0:82:13:28:5d:85:7b:09:6b:e6:d4:63:8c:81:c5:
         c4:fe:1c:f6:97:b5:01:dd:2c:92:27:50:5c:4a:34:df:94:9e:
         2d:0d:97:08:10:e4:f6:f7:76:6c:e0:92:41:35:90:5e:b0:52:
         05:ce:bb:13:1a:98:76:fb:92:37:72:93:f2:7a:58:df:4e:33:
         e5:74:f4:4b:1c:1b:37:bb:31:1a:a7:7f:77:60:96:3a:06:e3:
         6b:c1:b6:5d:d9:f6:53:c1:79:e7:82:bf:27:9c:ed:10:63:84:
         e9:32:1d:a8:88:dc:eb:46:d6:2b:5b:36:21:17:09:a5:b4:02:
         42:d9:23:9a:44:39:92:e7:c5:f0:e1:dd:8c:72:1f:33:37:8f:
         68:eb:05:1a:1e:00:f8:1c:e8:44:4a:b1:76:fc:27:b6:c7:12:
         5e:49:03:72:63:ad:2a:1e:ff:5d:a3:e9:67:44:ba:11:c8:c4:
         56:a9:b9:1b:49:a9:32:53:b0:27:86:d7:b1:23:04:61:29:c6:
         00:80:0f:f7:6c:01:1c:12:d8:32:94:3f:27:df:5e:cd:5f:2e:
         df:19:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:23:04 2026 by rpki-client