Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
File:                     EA50kJn6U4BRdLz4MMPrIcUwMac.mft (raw, json)
Hash identifier:          zI53lAV/zRRA+KmD9ZiJ67t9zKDy+jPQH20BWTJpPr0=
Subject key identifier:   D0:3B:7F:B4:73:00:6A:77:E1:A7:98:5E:5A:35:2D:84:6B:36:6E:EC
Authority key identifier: 10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7
Certificate issuer:       /CN=A916A027/serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
Manifest number:          0500
Signing time:             Wed 20 May 2026 23:45:43 +0000
Manifest this update:     Wed 20 May 2026 23:45:43 +0000
Manifest next update:     Wed 27 May 2026 23:45:43 +0000
Files and hashes:         1: EA50kJn6U4BRdLz4MMPrIcUwMac.crl (hash: 9gE9tWGrXc5qi6P/+vqBGZjEzHiApnq8ZNyIpAvea10=)
                          2: 385B6DAE577411ECBF021B66C4F9AE02.roa (hash: cud5ZYppqVgYBIjkpiC3yJU+yvRz4SnHLnsmET8Y4GA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl
                          rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A027, serialNumber=100E749099FA53805174BCF830C3EB21C53031A7
        Validity
            Not Before: May 20 23:45:43 2026 GMT
            Not After : May 27 23:45:43 2026 GMT
        Subject: CN=6a0e47a7-6de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:eb:3e:0e:ae:a8:89:bf:11:87:a9:97:2c:
                    69:8d:78:40:c8:52:b5:41:a9:83:37:65:78:f4:92:
                    68:b2:3a:81:f4:d5:9c:d0:4e:0e:d8:a7:de:36:a6:
                    11:bb:4c:bd:ec:6b:98:d6:20:94:18:03:46:05:d4:
                    5f:e2:64:e0:16:c7:9f:f7:d9:c9:ff:33:ff:4a:32:
                    53:9f:e5:58:24:ab:5a:0a:72:56:58:8d:50:76:6d:
                    94:e4:0c:73:30:b4:7b:9c:29:a9:43:77:01:48:8f:
                    be:bd:e4:70:34:98:34:6f:ec:36:40:8a:5a:6b:f5:
                    fc:c2:93:91:5a:92:4a:02:0e:e2:95:94:9d:93:22:
                    75:5c:1f:ab:61:b7:03:5e:cd:79:35:f8:37:0d:19:
                    24:c7:e0:b9:39:d1:49:a1:a1:6f:15:46:76:c0:66:
                    09:18:a1:5a:2d:48:e2:35:a4:78:5c:5c:93:b4:81:
                    4f:e5:d6:09:c2:26:f9:00:22:d4:8a:6e:c2:a9:74:
                    0b:a2:6e:94:08:72:83:19:c4:02:98:2e:8e:63:8b:
                    fe:aa:0e:eb:cd:31:3e:dd:77:ca:b5:d4:4d:36:20:
                    fe:3a:97:3c:c6:d2:f5:1e:b8:92:36:98:73:75:a2:
                    b1:a5:11:2c:c8:7c:42:2b:55:e1:28:c9:30:29:aa:
                    67:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:7F:B4:73:00:6A:77:E1:A7:98:5E:5A:35:2D:84:6B:36:6E:EC
            X509v3 Authority Key Identifier:
                keyid:10:0E:74:90:99:FA:53:80:51:74:BC:F8:30:C3:EB:21:C5:30:31:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA50kJn6U4BRdLz4MMPrIcUwMac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A027/04207DF8577011ECB9577A5BC4F9AE02/EA50kJn6U4BRdLz4MMPrIcUwMac.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:a4:b3:ce:29:63:07:b8:0a:0b:f1:af:75:b0:a8:c2:b5:
         14:5a:17:7a:e0:ed:70:35:63:6f:c8:99:24:33:0f:11:c0:ce:
         52:33:98:f5:7a:46:18:c6:ea:bb:e1:08:1d:91:31:62:a2:f5:
         98:eb:5c:d7:20:29:2a:2e:d7:fd:40:2a:e9:e6:6c:4c:c3:8b:
         f4:2c:4d:9d:1b:50:45:cc:78:88:f4:57:0f:f9:cb:c6:5c:be:
         e6:ee:28:df:41:4e:d2:6d:06:7f:77:8a:90:3a:8f:50:72:3b:
         2b:2c:75:eb:f2:4c:a2:ec:75:9a:69:1b:a1:5b:70:9b:10:b7:
         04:76:64:17:41:f1:74:25:88:62:1e:03:dd:7b:11:86:59:ae:
         fe:d2:dd:78:12:c5:76:77:3a:3a:17:fe:7c:ea:3e:38:02:da:
         9b:91:7f:e2:6c:ea:b2:c0:b1:7e:60:62:b1:02:98:bf:f4:88:
         d5:8d:e0:1e:6a:60:02:3b:a3:f2:58:02:7b:ff:0d:08:8c:43:
         2e:84:60:2f:cf:ea:78:15:30:df:bf:71:64:93:b1:4b:8b:7c:
         21:15:e0:32:ed:20:0d:81:07:fa:e1:ca:c0:45:0d:eb:ee:c1:
         68:f2:b4:1e:11:0f:e9:bc:a1:90:4a:b5:61:f4:90:87:97:13:
         ab:a0:0a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:15 2026 by rpki-client