Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
File:                     e9PkPRNOUjXpdgPOi6lIa2KpseY.mft (raw, json)
Hash identifier:          FU3aeE6dK8fNd5JFPdBDzAR0boorF7yh6VwB47UNF98=
Subject key identifier:   39:57:EA:33:0D:30:10:3E:9C:56:1B:94:67:4E:FF:9D:63:28:46:29
Authority key identifier: 7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6
Certificate issuer:       /CN=A915C631/serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
Certificate serial:       03F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
Manifest number:          03D7
Signing time:             Thu 21 May 2026 00:47:13 +0000
Manifest this update:     Thu 21 May 2026 00:47:13 +0000
Manifest next update:     Thu 28 May 2026 00:47:13 +0000
Files and hashes:         1: e9PkPRNOUjXpdgPOi6lIa2KpseY.crl (hash: oWhXaqOjZd/lXUucJQSP4QBya12eNgYpFzQb+bmy7GY=)
                          2: 63F05DE02F1D11EDA3E29B09C4F9AE02.roa (hash: qadfokkBTWd/thpofhVEGWVL+12kLw5uc1k0Mf3958k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl
                          rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C631, serialNumber=7BD3E43D134E5235E97603CE8BA9486B62A9B1E6
        Validity
            Not Before: May 21 00:47:13 2026 GMT
            Not After : May 28 00:47:13 2026 GMT
        Subject: CN=6a0e5611-c69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:f1:f8:a1:bd:4a:87:fd:87:da:1e:32:c7:
                    89:34:48:02:69:7a:f2:f6:3f:b1:09:0c:e5:cf:04:
                    7e:78:f0:cc:22:3e:dc:9d:a3:1d:1a:88:6d:d2:87:
                    8e:78:c5:64:b1:55:de:06:a1:eb:c9:2c:16:d9:9e:
                    77:e6:6f:64:e7:2b:cf:7e:bd:ba:67:c9:9b:a5:a5:
                    b0:64:84:13:fa:2f:e8:61:3e:23:42:2d:64:f1:10:
                    29:8b:0b:0a:f9:5d:d8:ca:72:03:bb:e9:a5:d8:32:
                    48:0b:99:af:aa:a0:2c:89:29:aa:d3:d7:37:66:8c:
                    30:d5:37:d8:7f:c5:40:24:28:e2:8e:46:8d:86:8c:
                    3a:3e:fd:9a:4e:cd:b7:6b:a9:46:7c:94:f1:b7:a1:
                    3d:c1:a2:ed:1a:12:04:86:d2:90:a9:d0:eb:1c:71:
                    67:8e:23:4d:1f:4a:31:d1:00:50:cd:06:27:40:9a:
                    e0:fe:2c:2e:5c:2a:8e:82:8b:94:e5:ab:c1:08:10:
                    67:24:7a:4a:27:fd:60:a5:07:69:09:62:b6:63:40:
                    45:ca:1f:e5:ec:91:cd:05:70:cf:b6:da:e5:c4:1d:
                    e5:51:b6:a3:90:41:18:51:01:81:59:08:fe:f4:54:
                    aa:c5:71:2c:0e:ff:9a:90:17:6a:67:9f:19:98:83:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:57:EA:33:0D:30:10:3E:9C:56:1B:94:67:4E:FF:9D:63:28:46:29
            X509v3 Authority Key Identifier:
                keyid:7B:D3:E4:3D:13:4E:52:35:E9:76:03:CE:8B:A9:48:6B:62:A9:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9PkPRNOUjXpdgPOi6lIa2KpseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C631/39E4D7A8DC7811ECA4E30617C4F9AE02/e9PkPRNOUjXpdgPOi6lIa2KpseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2f:4e:69:3c:8f:f8:69:71:63:e0:9c:d2:8e:c1:60:82:79:
         ed:d4:0e:14:65:d9:7d:f1:a4:29:ba:f8:4f:e5:de:35:90:54:
         94:fd:01:5d:3e:bc:df:24:0e:86:5b:3a:db:19:24:c9:29:af:
         25:46:3f:5c:23:e0:1b:85:15:d3:73:ad:a3:1c:19:d5:3b:46:
         5c:41:fd:e8:da:11:f8:c5:30:25:d8:8b:c4:83:50:2e:ec:43:
         c8:b6:c3:21:15:37:08:e9:4a:f0:c7:9b:ef:34:4a:8f:2d:b5:
         4a:36:f1:01:73:5a:d0:88:59:b6:a6:6e:c6:00:da:21:9c:60:
         c9:77:b5:18:84:74:90:b4:a8:7b:5e:fe:79:1a:3b:c0:b8:a3:
         11:26:8e:7d:5d:c8:cc:2f:b6:ed:0c:60:73:84:9a:a9:e9:66:
         73:d7:df:d0:ec:70:ea:f7:7f:c3:fc:9d:c8:e0:0a:2d:28:1e:
         80:21:53:0c:1d:2b:2b:8c:81:9d:64:18:55:89:e3:89:a7:9b:
         54:c7:1b:e9:0a:5e:98:1b:f2:f7:8e:1d:e0:6f:7e:c0:ff:43:
         ba:30:f5:16:ff:87:5e:b8:5b:c5:af:59:7f:ad:3d:e6:0f:1c:
         b4:62:06:3c:85:4c:0b:2f:89:f3:b2:6c:d2:79:da:b5:b7:17:
         90:b2:21:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:34 2026 by rpki-client