Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
File:                     x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json)
Hash identifier:          i3JSJqrsGZrRBtopxQL+K3iFnp13QecUWVvU9grYfD0=
Subject key identifier:   6F:22:82:39:E6:B4:43:9A:FB:C8:23:86:D0:7F:32:24:08:34:9F:97
Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB
Certificate issuer:       /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
Manifest number:          02C5
Signing time:             Thu 13 Aug 2026 00:57:10 +0000
Manifest this update:     Thu 13 Aug 2026 00:57:09 +0000
Manifest next update:     Thu 20 Aug 2026 00:57:09 +0000
Files and hashes:         1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: CDmZryxOh88CmLuTRDT5I3tUcrz8TmhnGn6PETHMxC4=)
                          2: 71E6B7F48BDB11F1A5F20D8F3311F970.roa (hash: Y5v3FjIPvdcusoX29pBxfg1nvFUkAyu6SvOVbkZcVQ4=)
                          3: GxgucsSUgosAU3XrEdg2VAHcZ1A.asa (hash: u7R/ikCvSd4wV0dZOX8iGJTL3SOAHexzFM4JmSKBwvw=)
                          4: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: Gb6Sv2PR2ZxyHabUMBcrUJFirPirEWwtzztzYQgXRmw=)
                          5: JeO3CtxkzPAcVMCreayejidrFVo.asa (hash: 51oWaKu0sYjZS07/IFjH1aIk6mMJDCGbung40phF1rs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl
                          rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 00:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB
        Validity
            Not Before: Aug 13 00:57:09 2026 GMT
            Not After : Aug 20 00:57:09 2026 GMT
        Subject: CN=6a7d1666-9657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e5:49:83:53:ea:00:a7:fd:ae:bb:ab:6f:9f:
                    9d:3f:1d:5e:df:7a:6f:85:74:9d:f7:c2:fd:7f:15:
                    fb:b0:0b:af:de:5b:28:8b:8c:04:14:50:b3:7e:7a:
                    9f:b6:28:0b:52:20:34:cc:c7:fa:42:d4:50:c1:86:
                    a2:a3:fa:cc:a4:73:0f:13:16:14:1b:eb:b0:3c:9c:
                    b1:71:74:34:fc:22:7a:16:d1:df:06:f7:df:51:df:
                    5e:cb:a5:7f:4d:ed:01:23:9b:93:2d:2c:04:df:90:
                    50:64:1c:7a:84:fe:88:69:73:25:20:d2:d8:75:ae:
                    17:07:e1:05:61:44:0a:b3:7c:b2:8f:45:95:04:4b:
                    72:f5:7e:ef:cc:3d:82:0f:05:3f:74:d5:1d:40:42:
                    54:fd:22:d2:b5:ac:14:10:b6:49:9b:a3:09:97:7b:
                    01:5c:98:e6:ef:fd:28:09:48:33:04:f4:d9:f1:4c:
                    bf:76:0f:1d:e6:f0:7a:6b:7d:f9:23:ec:95:de:94:
                    d8:73:92:83:40:41:59:6d:37:98:d8:cd:43:ec:ee:
                    e9:de:43:52:ea:35:07:fa:3b:f2:02:1b:6c:a0:de:
                    00:ff:d4:de:fb:53:8e:53:67:34:75:55:de:01:1e:
                    6a:9f:f1:f4:c0:39:5e:dc:55:67:53:0e:d1:da:23:
                    72:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:22:82:39:E6:B4:43:9A:FB:C8:23:86:D0:7F:32:24:08:34:9F:97
            X509v3 Authority Key Identifier:
                keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:31:5f:16:76:9d:6a:7b:a0:c8:2f:5d:5c:6c:ac:ca:58:ee:
         ba:07:2e:9d:1d:0e:39:d2:6a:b1:2c:cb:33:17:ab:38:84:d7:
         06:2c:86:ed:15:15:c4:c7:03:61:ab:df:fd:78:63:3e:ea:c5:
         2e:91:48:9b:05:2e:4f:68:14:f0:76:5e:60:49:a5:d5:0f:1b:
         28:9d:8a:99:f5:fb:8c:73:72:5b:55:03:6b:77:61:fb:7e:38:
         5b:ee:c7:af:a2:e6:aa:1e:8b:dd:80:2f:40:eb:11:6e:c4:e1:
         53:f3:c5:b1:85:2a:58:70:b8:5d:97:9c:8e:6c:9b:55:90:68:
         b6:90:a6:11:59:08:2b:f7:fe:7f:47:1b:f1:f8:80:67:8a:ee:
         06:48:d8:b2:d5:8f:ad:d3:10:dc:24:1b:24:ec:f9:86:39:06:
         a2:63:d9:74:c9:4b:f5:f8:b1:dc:5d:5c:43:53:c8:69:fa:4d:
         57:4c:20:f8:7a:a5:10:9c:d0:08:06:a0:87:d9:cc:31:d5:f5:
         b1:8d:fd:24:37:a5:de:e8:7e:18:fb:ea:4d:8d:3f:4c:7b:2f:
         04:dc:00:6d:a7:a9:64:00:7a:a2:12:d2:f5:dd:58:4b:bb:cc:
         f8:7e:0d:43:c2:a5:2c:a2:42:7f:18:6b:5f:5f:49:f8:26:3b:
         11:41:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:35 2026 by rpki-client