Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
File:                     Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft (raw, json)
Hash identifier:          hMEh6OJATsjgGUIGfvEuFZQO+u6txc+HhsF6GVcvXu4=
Subject key identifier:   6E:FD:F7:9B:69:35:F2:3F:60:0D:F3:9B:A4:79:A8:2A:59:A9:1E:D5
Authority key identifier: 12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E
Certificate issuer:       /CN=A9166D4A/serialNumber=123EFB1DD05524591E011F00625654DD8E95B07E
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
Manifest number:          07
Signing time:             Mon 01 Jun 2026 10:02:07 +0000
Manifest this update:     Mon 01 Jun 2026 10:02:06 +0000
Manifest next update:     Mon 08 Jun 2026 10:02:06 +0000
Files and hashes:         1: Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl (hash: fmy7RJoWYLpyrCWXk1HwVW1G/dAf8dfqzZTy/7KBcmo=)
                          2: 0D9753385C0811F18768733790833773.roa (hash: XsipbiBiNNSReaao381J1GUc+kBTumYcFrVSdsCJQEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl
                          rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 10:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166D4A, serialNumber=123EFB1DD05524591E011F00625654DD8E95B07E
        Validity
            Not Before: Jun  1 10:02:06 2026 GMT
            Not After : Jun  8 10:02:06 2026 GMT
        Subject: CN=6a1d589e-108c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:71:1d:b0:ce:3d:a2:ea:cd:26:70:26:9e:
                    87:78:72:57:11:10:2d:9d:6e:d7:e4:be:c0:0d:6b:
                    57:54:a8:26:03:74:ec:dc:1c:a3:b2:b7:0a:f2:3f:
                    20:0c:9b:96:18:26:75:ab:ba:86:05:02:70:29:2c:
                    9c:cb:62:ad:18:90:45:24:59:54:5c:61:f6:b0:5c:
                    1c:0d:28:a8:f2:2c:0d:89:cc:63:47:d7:2e:15:1f:
                    df:1f:b7:49:46:91:70:2c:a0:e2:d9:b1:7b:0a:b2:
                    8a:9d:c1:48:fd:55:ec:f6:5b:a5:14:fe:f8:67:53:
                    b5:fa:5f:06:aa:4a:18:e8:b5:fc:b6:52:71:b1:e2:
                    01:9a:66:36:51:df:72:f6:a9:ac:13:6c:d2:aa:39:
                    ed:31:4d:c6:dd:cd:21:fe:08:81:25:e4:00:9e:60:
                    68:51:79:c7:de:fa:ca:91:34:a7:e5:2f:9b:bb:45:
                    3c:36:11:f5:7e:39:0b:84:55:47:ca:76:de:da:12:
                    8f:0f:0b:dc:90:32:16:d8:d6:d5:50:4a:61:53:de:
                    92:16:33:b1:3b:e3:25:48:33:65:91:29:f3:67:86:
                    45:74:23:51:25:18:cc:e1:fa:e1:aa:bb:d9:a2:85:
                    9a:6f:4c:aa:ad:0e:ab:f9:0b:f1:b8:4f:9e:1f:db:
                    54:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:F7:9B:69:35:F2:3F:60:0D:F3:9B:A4:79:A8:2A:59:A9:1E:D5
            X509v3 Authority Key Identifier:
                keyid:12:3E:FB:1D:D0:55:24:59:1E:01:1F:00:62:56:54:DD:8E:95:B0:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D4A/A3B26C685B8111F1A8E84177A7833773/Ej77HdBVJFkeAR8AYlZU3Y6VsH4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:16:a6:7a:0b:24:d1:90:a4:f6:89:4a:ca:31:5b:71:04:9a:
         3e:75:dc:b6:e6:c7:24:ba:a4:56:05:75:a5:1e:ba:32:48:b1:
         ad:c3:1c:b2:04:39:da:b1:be:e7:9d:3e:1f:e8:e6:a3:e1:30:
         88:74:f1:dd:c6:d6:2e:bc:cd:01:4b:be:cb:71:b8:72:9d:74:
         5e:0d:a5:b6:b8:c1:6f:98:ca:98:44:e4:3c:14:7e:09:f8:38:
         39:bf:52:ac:ec:bb:92:b3:2c:04:01:fc:ca:bc:d3:c8:01:09:
         81:ec:70:0d:11:ef:ec:be:a8:4e:5f:dc:16:10:de:8d:49:14:
         b7:58:de:4a:ba:a4:3a:bf:1b:96:c2:7e:9e:bd:9f:2b:04:1b:
         3f:19:7d:94:81:28:00:50:82:22:16:9d:13:27:0e:d1:33:d1:
         8b:03:01:df:ec:c1:ae:3c:db:11:97:c0:bb:82:1d:77:de:5f:
         56:57:a1:00:1c:49:7b:ee:10:86:b4:a9:59:e0:13:37:61:7d:
         a3:88:d8:20:d8:9d:ee:1b:b8:b8:dd:e4:81:88:6c:d9:6b:1c:
         a1:1e:b8:9d:47:f1:58:76:d9:f2:57:44:b3:7f:bc:a2:06:51:
         59:a9:6b:3c:11:ff:80:0a:d1:ab:00:d7:79:47:9f:1d:74:d8:
         dd:cc:f1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:51 2026 by rpki-client