Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          StTaKVxhqVPmk2D/YyMdFcNJbXtDxxGgIv2ZVpNHvMg=
Subject key identifier:   87:3C:34:84:93:16:D8:CA:85:3E:9D:77:1E:19:29:3B:83:64:D0:9C
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       0257
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          0252
Signing time:             Fri 21 Aug 2026 02:20:22 +0000
Manifest this update:     Fri 21 Aug 2026 02:20:22 +0000
Manifest next update:     Fri 28 Aug 2026 02:20:22 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: DnNVViqweLGC5CNnpHy67xv64tj4fP48Buv1KVJAeOg=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: ndu4mgSQM3DACuyqK9fSXueNEcWTd56NuNmOeSBu16I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Aug 21 02:20:22 2026 GMT
            Not After : Aug 28 02:20:22 2026 GMT
        Subject: CN=6a87b5e6-17c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:45:d0:cf:ca:f1:90:31:57:f5:4f:a0:b2:
                    81:17:c6:bc:ca:a0:d3:32:e6:9e:2a:0c:0f:69:24:
                    a6:a9:a7:d1:21:63:c2:c6:ba:85:4b:f5:ca:f4:a5:
                    25:bb:47:20:60:74:4d:31:70:89:21:78:2c:c7:d8:
                    b5:62:5e:7c:d3:46:aa:dd:6b:99:fe:e9:08:72:6d:
                    7b:d6:a5:b3:94:7b:6b:a2:2d:bb:2d:3d:28:d8:50:
                    c9:f6:43:96:43:a4:bb:a9:53:73:4c:78:17:5a:9a:
                    b7:68:7c:72:fc:fc:cd:72:5b:f0:96:ad:e5:28:3a:
                    e9:99:2f:34:0b:04:c5:bf:cf:ac:ef:29:49:d1:52:
                    18:e2:35:08:9f:76:df:bb:d0:3d:b6:52:10:74:41:
                    22:41:ed:1b:0c:9a:88:e0:bf:57:34:68:7f:08:19:
                    21:cb:42:2d:ad:10:f7:6e:6a:df:7b:02:95:12:2b:
                    d8:45:c5:02:b8:c5:df:c3:a1:fa:65:6e:ba:98:3d:
                    ef:ab:0f:5f:6b:3e:04:0d:a8:19:06:d9:f7:c8:eb:
                    30:21:1b:4a:eb:d7:4d:2f:70:94:89:87:ba:ca:f0:
                    f3:29:3b:14:35:a0:ce:f1:5f:be:5e:22:b0:fc:14:
                    ff:45:5b:71:e0:f8:53:87:ab:75:2b:c5:2c:d3:c3:
                    17:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:34:84:93:16:D8:CA:85:3E:9D:77:1E:19:29:3B:83:64:D0:9C
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:7f:32:25:e9:b4:d4:49:e0:22:d4:0d:18:83:3f:81:fc:
         51:82:ba:31:c0:5e:10:00:ad:35:86:4e:8b:a3:76:3b:49:09:
         74:94:a6:fc:6c:ca:f8:41:f6:03:03:63:14:c7:9c:dc:68:fd:
         90:7a:c5:74:e5:a1:bd:75:4c:c0:05:30:39:54:4e:da:21:72:
         45:7f:bf:5f:3a:3b:35:28:45:12:99:55:29:d4:a1:96:cb:f4:
         aa:17:3d:22:60:67:08:11:b2:60:35:6c:a9:6f:da:26:42:54:
         94:46:01:a5:0d:29:46:1f:71:75:8a:a3:f3:c2:34:91:d2:52:
         f3:12:e8:5e:39:c8:98:2f:7b:d9:e0:82:f9:df:0c:7e:a3:08:
         80:1e:18:04:65:24:88:ed:79:c4:77:cf:12:24:29:53:6e:79:
         cd:78:a8:c8:fe:ea:3e:ca:01:59:fb:69:a5:1a:5f:35:32:ba:
         e6:32:30:93:3c:b6:77:64:f4:43:2a:c8:3a:1b:d3:31:47:0c:
         29:1b:a5:41:a0:ad:b2:a3:5f:66:f1:f4:09:21:e8:87:c3:8b:
         e1:ac:e0:67:0d:ec:80:58:a5:dd:89:4b:4e:8c:16:10:31:76:
         36:c9:1f:64:5f:9b:b3:23:24:8a:03:c8:d4:b5:4d:be:2d:c7:
         76:f6:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:20:43 2026 by rpki-client