Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          M7turCO/r5jKL4qDBkXgiLlRShib6zTq0rz6WvtG16U=
Subject key identifier:   F7:9F:BF:3E:38:31:64:17:5F:E5:1C:84:1F:84:BE:99:9A:32:EE:BD
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          D3
Signing time:             Mon 31 Aug 2026 07:12:14 +0000
Manifest this update:     Mon 31 Aug 2026 07:12:14 +0000
Manifest next update:     Mon 07 Sep 2026 07:12:14 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: ByoW849UUu7bCch89r1vEsk7poUkn9jW0unVYbYvUzc=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 07:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Aug 31 07:12:14 2026 GMT
            Not After : Sep  7 07:12:14 2026 GMT
        Subject: CN=6a95294e-77f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:49:3d:a4:1d:d3:a4:c2:9e:4c:f9:84:4b:
                    0b:49:0e:23:72:a5:4f:2e:0c:23:f9:2c:36:65:a8:
                    39:64:05:96:9e:08:67:f3:57:32:97:ef:bb:f7:cd:
                    98:a8:21:1b:c5:a7:f6:ec:14:5c:fe:3c:2f:52:07:
                    4e:c4:c9:f3:fb:c8:1d:90:12:45:2c:41:cd:69:61:
                    74:f9:d1:18:15:a7:17:93:86:58:7c:60:c9:7b:4e:
                    44:ec:1f:3b:99:71:ad:b5:d5:07:70:35:28:20:ef:
                    6c:bf:a2:61:04:26:c8:77:35:eb:5c:17:21:83:ef:
                    47:9b:ab:f3:d1:fe:2f:4e:23:1c:c0:bc:21:f2:e0:
                    28:18:99:7b:a8:ef:3f:48:34:fc:a1:f1:5e:e4:95:
                    21:79:71:bd:88:9f:f7:e9:8a:ff:a8:21:90:e5:d6:
                    20:2a:75:36:7f:22:7b:5a:18:d6:be:25:84:fb:e5:
                    81:63:30:85:bc:eb:8c:04:e0:7a:73:2a:89:1b:9a:
                    e1:a0:ae:40:15:ca:13:92:96:7b:a1:0c:56:48:83:
                    e8:7a:0d:91:90:75:14:f7:f9:d3:e3:5c:9a:dd:3c:
                    75:a7:c8:be:e9:e5:e0:2d:b3:98:9b:4a:77:96:3d:
                    b0:48:21:78:c1:70:0a:a4:72:89:fb:43:8a:80:87:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9F:BF:3E:38:31:64:17:5F:E5:1C:84:1F:84:BE:99:9A:32:EE:BD
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c2:ce:35:bb:e0:6a:10:8b:d4:b8:18:ec:46:3a:81:ed:09:
         dd:da:27:70:ee:7f:c7:11:fc:2a:7f:15:90:53:a2:5b:1d:ed:
         6a:d1:ca:9c:04:12:e0:c6:e4:54:c3:55:e9:2b:78:24:e8:87:
         12:80:f9:94:0a:29:d1:f2:8c:81:cf:e5:6a:3b:59:69:96:fc:
         c1:e6:a1:24:59:4b:7e:e6:58:74:00:c1:4e:e5:7a:71:d4:aa:
         63:7a:9d:80:d6:de:32:4c:be:69:1e:96:0a:97:e1:c3:bd:e9:
         be:89:2c:d4:a4:6a:19:eb:69:01:b9:12:1f:61:1f:ea:dd:c7:
         2b:b5:90:3b:9e:c5:7d:06:20:71:af:05:5a:f0:d8:3e:c8:dd:
         49:bc:e6:6f:54:d5:aa:87:97:24:36:e6:a3:be:f6:f0:c3:d3:
         ee:2a:c5:57:61:4c:b3:e4:9c:ff:90:ff:0e:33:08:2a:91:b5:
         5d:8b:79:cb:fd:98:9d:97:9f:e7:f5:43:d7:0d:1d:ee:42:78:
         a2:e3:0c:35:fa:c0:d1:0a:f0:f9:7f:04:5a:83:bf:b7:cd:46:
         7c:6d:78:82:2e:73:23:40:ea:20:d4:27:1f:8d:6e:59:c1:b5:
         e3:cc:fb:13:8a:f7:9b:d3:7e:55:0b:b4:9a:55:d1:48:d1:27:
         90:40:d6:15
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODdENUIxMTAvBgNVBAUTKDEwQUM2MzA2NkU5QUJDNDIyQUM1RjQ1QTIyNzEwRDUw
MkVCRTQyQzgwHhcNMjYwODMxMDcxMjE0WhcNMjYwOTA3MDcxMjE0WjAYMRYwFAYD
VQQDEw02YTk1Mjk0ZS03N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvipJPaQd06TCnkz5hEsLSQ4jcqVPLgwj+Sw2Zag5ZAWWnghn81cyl++7982Y
qCEbxaf27BRc/jwvUgdOxMnz+8gdkBJFLEHNaWF0+dEYFacXk4ZYfGDJe05E7B87
mXGttdUHcDUoIO9sv6JhBCbIdzXrXBchg+9Hm6vz0f4vTiMcwLwh8uAoGJl7qO8/
SDT8ofFe5JUheXG9iJ/36Yr/qCGQ5dYgKnU2fyJ7WhjWviWE++WBYzCFvOuMBOB6
cyqJG5rhoK5AFcoTkpZ7oQxWSIPoeg2RkHUU9/nT41ya3Tx1p8i+6eXgLbOYm0p3
lj2wSCF4wXAKpHKJ+0OKgId0cwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPefvz44
MWQXX+UchB+EvpmaMu69MB8GA1UdIwQYMBaAFBCsYwZumrxCKsX0WiJxDVAuvkLI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0Q1Qi83OTgzMzg1QTY5
MkUxMUYwQkQwRjY4MTlDNEY5QUUwMi9FS3hqQm02YXZFSXF4ZlJhSW5FTlVDNi1R
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
N0Q1Qi83OTgzMzg1QTY5MkUxMUYwQkQwRjY4MTlDNEY5QUUwMi9FS3hqQm02YXZF
SXF4ZlJhSW5FTlVDNi1Rc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAucLONbvgahCL1LgY7EY6ge0J3doncO5/xxH8Kn8VkFOiWx3tatHKnAQS4Mbk
VMNV6St4JOiHEoD5lAop0fKMgc/lajtZaZb8weahJFlLfuZYdADBTuV6cdSqY3qd
gNbeMky+aR6WCpfhw73pvoks1KRqGetpAbkSH2Ef6t3HK7WQO57FfQYgca8FWvDY
PsjdSbzmb1TVqoeXJDbmo7728MPT7irFV2FMs+Sc/5D/DjMIKpG1XYt5y/2YnZef
5/VD1w0d7kJ4ouMMNfrA0Qrw+X8EWoO/t81GfG14gi5zI0DqINQnH41uWcG148z7
E4r3m9N+VQu0mlXRSNEnkEDWFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:52:38 2026 by rpki-client