Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
File:                     EW8KKmpLkkLXeiULcXAIFdKY3bk.mft (raw, json)
Hash identifier:          kdAuu10W+/wa/vEJc50YNj+66c+MT3jTfXXhahJVbEk=
Subject key identifier:   64:B2:CE:C5:08:19:C0:5C:C4:E8:37:5E:D8:A0:61:2F:70:18:87:6E
Authority key identifier: 11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9
Certificate issuer:       /CN=A9175964/serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
Certificate serial:       015B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
Manifest number:          0153
Signing time:             Mon 01 Jun 2026 05:50:45 +0000
Manifest this update:     Mon 01 Jun 2026 05:50:45 +0000
Manifest next update:     Mon 08 Jun 2026 05:50:45 +0000
Files and hashes:         1: EW8KKmpLkkLXeiULcXAIFdKY3bk.crl (hash: C38o6kC27Kaf/N/Kpj8ztsqj9JiHMnkJT1EpR4nlj1w=)
                          2: 426E71C25B1511EF95122A62C4F9AE02.roa (hash: sWmhw22xeirzBkTQzvvE9hJncBsWONWyuiN7pZYxdxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl
                          rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175964, serialNumber=116F0A2A6A4B9242D77A250B71700815D298DDB9
        Validity
            Not Before: Jun  1 05:50:45 2026 GMT
            Not After : Jun  8 05:50:45 2026 GMT
        Subject: CN=6a1d1db5-cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:55:7d:9f:b1:21:65:1b:db:23:af:fb:41:
                    4f:c7:d2:3c:ff:3e:aa:de:d9:55:a4:ee:4b:dc:75:
                    11:f0:36:54:11:c0:ee:8e:c3:8a:eb:74:35:c2:de:
                    07:b5:45:47:cb:8e:8d:c8:5c:92:8b:99:fb:0a:a1:
                    1e:d8:0b:c6:db:74:d0:83:44:f9:62:3e:28:bc:eb:
                    08:d1:c3:a3:6a:35:80:14:58:65:8c:48:ba:41:3a:
                    f8:ed:33:9b:ce:bc:c2:fa:cb:46:ac:54:01:62:7b:
                    4f:d6:15:54:3e:86:f6:18:08:be:04:05:14:d4:8f:
                    ca:48:85:f5:af:14:67:68:fa:19:ca:1a:f2:34:06:
                    8c:2c:e0:0b:ab:1d:3a:28:76:d3:f6:24:99:aa:5a:
                    cc:8b:ae:fc:46:b7:d8:fd:f5:ee:6c:68:dc:86:3d:
                    a9:c7:08:c5:80:85:6b:53:3f:8f:aa:a3:97:21:af:
                    fd:34:00:d4:62:1a:a0:e6:d2:ad:30:c9:ee:15:08:
                    a1:af:3c:d1:8a:25:bd:14:40:b8:ef:a1:16:79:76:
                    15:82:7c:de:25:5c:e3:51:62:f0:78:31:5a:74:46:
                    a7:4e:f8:15:9c:7c:bf:c8:f7:3b:96:b1:2f:84:05:
                    16:53:0d:f7:0e:3b:ab:a1:94:1d:93:e6:0d:4d:31:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B2:CE:C5:08:19:C0:5C:C4:E8:37:5E:D8:A0:61:2F:70:18:87:6E
            X509v3 Authority Key Identifier:
                keyid:11:6F:0A:2A:6A:4B:92:42:D7:7A:25:0B:71:70:08:15:D2:98:DD:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EW8KKmpLkkLXeiULcXAIFdKY3bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175964/F531EDE45B1411EFAC974461C4F9AE02/EW8KKmpLkkLXeiULcXAIFdKY3bk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5b:d4:28:66:d8:dc:48:c0:59:43:ff:87:2d:93:6c:80:68:
         2e:58:d3:92:0a:85:16:b5:c4:f6:8e:25:f4:56:e1:bd:03:5f:
         83:9e:de:8b:c1:b7:cc:44:f1:31:01:39:c6:90:cd:2a:24:e6:
         13:14:7b:01:7c:de:a9:d1:11:f2:69:7e:cc:19:28:81:14:25:
         28:24:15:b0:59:a7:d5:97:30:00:24:50:60:94:80:f5:ca:30:
         62:a4:25:8a:f0:d9:d5:2f:0b:e0:88:aa:4e:aa:00:f4:3a:05:
         df:d9:cc:a6:7b:fc:74:fe:aa:bf:de:63:59:ee:99:d0:6b:2c:
         a1:d5:03:d4:3a:46:65:1b:b7:a7:10:e6:26:22:c6:32:9c:b5:
         61:96:68:6a:19:bc:36:6e:5a:a7:2d:8b:88:ef:3d:2d:ee:f6:
         0b:1f:20:36:56:ee:51:b8:ab:bd:24:db:aa:b6:5e:4d:5b:fa:
         7a:37:37:8d:72:cb:b3:40:5a:c0:2a:6b:1f:9b:93:80:b8:83:
         fe:e5:fc:c9:fa:d2:f0:9a:3c:99:e9:7a:8f:17:83:a9:a1:83:
         16:a3:b9:7f:c7:21:07:6c:a1:29:de:83:ef:14:b4:e8:19:22:
         d6:06:a0:e0:5d:13:16:fc:23:1b:0d:a7:ae:b4:20:fb:18:99:
         32:ed:ab:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:23:29 2026 by rpki-client