Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          MEzAWIknyQkEH+FJ/x0gPKWkgUQKK4KDlLyDWdMGe5M=
Subject key identifier:   7D:73:FA:FD:57:B7:B5:79:01:FA:6B:E2:C2:BA:07:9C:6F:91:61:01
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       0424
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          0407
Signing time:             Wed 19 Aug 2026 00:53:29 +0000
Manifest this update:     Wed 19 Aug 2026 00:53:29 +0000
Manifest next update:     Wed 26 Aug 2026 00:53:29 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: fRvsKEopAmzojVydSNVXJaCpYgPAwB4+CgOK5jyvTtE=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: vOR7MkFdjtwcQmI8Q2E4naB63wEs/ZKiAQLoEidZx/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 00:53:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: Aug 19 00:53:29 2026 GMT
            Not After : Aug 26 00:53:29 2026 GMT
        Subject: CN=6a84fe89-8698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:80:7b:60:06:76:69:0d:60:fb:62:4f:44:
                    13:6a:87:d7:65:d8:46:62:29:d3:04:21:ca:18:ec:
                    b9:af:51:1f:6e:f6:e1:f9:a1:ad:eb:f3:a9:95:6e:
                    df:88:65:31:1c:15:50:e7:ed:91:94:a8:dd:ef:b1:
                    06:5e:88:b5:b6:a2:1e:47:11:8c:8f:e0:a9:a2:98:
                    2d:7a:db:04:28:f3:ac:0d:b1:07:4e:e9:58:af:a1:
                    cf:5c:24:74:76:97:68:90:5d:49:f1:ec:a8:39:07:
                    2c:7a:34:a3:b7:1c:5a:07:d0:87:1b:14:29:39:c3:
                    56:d9:f8:ba:59:c2:8a:e1:08:3d:8b:c6:9f:51:df:
                    98:18:51:66:50:7c:79:25:af:31:2e:f8:ab:4c:11:
                    68:c5:11:26:80:11:52:5c:7d:a5:56:5d:d5:e5:ee:
                    0b:ee:da:51:ea:4b:2c:5c:f3:87:ff:16:63:1a:3c:
                    b6:92:61:b8:6d:c4:a0:53:62:66:0f:5f:c0:9c:e2:
                    f9:be:99:09:81:63:62:6f:b1:d2:1d:23:f3:0f:28:
                    7b:05:6a:ac:31:63:22:7a:fc:c9:41:92:56:51:6c:
                    80:88:d3:68:74:f1:c8:f9:65:ce:1f:53:70:4c:d1:
                    b2:bc:47:e2:d3:b9:aa:7c:a2:51:e0:23:5e:47:be:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:FA:FD:57:B7:B5:79:01:FA:6B:E2:C2:BA:07:9C:6F:91:61:01
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:26:35:ed:ef:3d:62:01:e4:05:c4:a3:1b:21:3c:5d:3c:
         98:bb:39:73:97:d6:a0:19:7e:e2:33:56:0a:e8:ca:07:fc:c0:
         d0:97:6e:22:6c:15:46:50:75:dd:56:04:19:c6:69:d8:44:4d:
         33:fa:70:fe:2d:04:82:3b:e8:11:51:b0:3d:86:50:09:7a:f2:
         9a:53:b6:3b:0d:db:14:b5:4f:c6:45:c7:8b:14:67:ac:85:45:
         cd:a1:50:28:98:93:56:81:fc:d5:5e:fa:40:e0:2b:a0:1b:5a:
         37:6a:ca:a3:07:c4:1e:dd:d3:fc:fc:b7:7b:dc:c6:d0:d4:2e:
         b4:e1:ef:7c:fc:88:ad:08:f3:85:fe:83:32:02:82:6a:39:1f:
         27:80:97:4c:cf:18:35:95:ec:01:e8:02:3f:3a:62:2e:2f:29:
         62:7d:39:a6:53:7f:ba:64:50:77:10:ba:7a:c9:c4:07:53:61:
         f2:28:17:c3:b3:bd:8f:99:d2:57:a1:e5:01:5b:a3:15:64:b8:
         75:b4:70:bb:f2:e8:99:31:23:b1:c4:fa:b7:24:7c:1c:8e:b8:
         f9:ba:82:71:2d:9f:28:1d:16:03:05:96:87:66:78:0e:dd:b6:
         b1:d5:95:35:60:19:9e:83:d4:7f:7e:44:24:54:96:54:c5:6f:
         64:9d:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:56:30 2026 by rpki-client