Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
File:                     0eKZ-egsk3yysqaQYegXNB-FCPU.mft (raw, json)
Hash identifier:          FGqxeEpyJ5QTFYtM/WjwdDjxLpKlUXtDefhU+neRcyI=
Subject key identifier:   87:6E:41:7E:9B:4D:25:53:21:2F:15:1B:1B:30:4B:4D:37:90:E4:4A
Authority key identifier: D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5
Certificate issuer:       /CN=A91886CC/serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
Certificate serial:       0252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
Manifest number:          0248
Signing time:             Thu 21 May 2026 02:32:27 +0000
Manifest this update:     Thu 21 May 2026 02:32:26 +0000
Manifest next update:     Thu 28 May 2026 02:32:26 +0000
Files and hashes:         1: 0eKZ-egsk3yysqaQYegXNB-FCPU.crl (hash: 3dqvQa8rYtUv3+O+/hBJekU3Ml66T1cuFyloQXbNd+A=)
                          2: AD9C1DEE9E2311F0A35D7D1FC4F9AE02.roa (hash: Tnjt2fGEhLyDlPP5wmN279sZk46aIOs3pcrgnxrQla0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl
                          rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886CC, serialNumber=D1E299F9E82C937CB2B2A69061E817341F8508F5
        Validity
            Not Before: May 21 02:32:26 2026 GMT
            Not After : May 28 02:32:26 2026 GMT
        Subject: CN=6a0e6eba-c1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:56:02:a0:28:a9:f7:24:5c:1b:69:99:fb:35:
                    75:ae:62:ae:7b:a8:5b:a2:a5:41:7b:60:13:f8:2c:
                    13:10:21:bc:29:e4:c5:23:fd:52:fd:89:16:eb:d1:
                    a0:7e:3c:a7:44:b0:4d:d8:3f:e2:7e:06:1d:a1:0e:
                    ba:98:4d:77:cf:9b:01:47:3e:ad:34:52:31:1e:d1:
                    fa:25:69:e8:0f:09:bd:4a:d5:a7:61:61:7e:b8:47:
                    e3:ae:c7:55:c9:36:2a:43:a2:ae:5f:7a:f8:1a:59:
                    d7:4f:36:fa:2d:ae:21:8a:89:3f:91:a2:4c:cb:f8:
                    d8:10:bb:3a:15:7e:02:00:c3:52:30:40:34:bb:5e:
                    6a:b3:04:51:78:5f:7b:c1:33:ae:7e:86:9c:4f:23:
                    5a:3a:47:54:a9:1d:e2:14:17:22:1e:b5:d6:c2:77:
                    ff:00:8e:14:28:f0:fd:fc:2c:5c:49:ea:e2:b9:2a:
                    f3:3d:cc:a8:1e:a1:a1:03:9f:a8:ab:ee:84:f2:fd:
                    74:f2:4c:e2:b8:5b:b1:b0:1d:33:b0:d2:b1:50:1b:
                    d5:57:cf:68:85:a7:84:17:17:b8:b8:d8:cc:1e:48:
                    22:69:65:68:bc:d5:ed:e6:ee:bd:1c:f5:77:5c:bf:
                    de:a6:aa:df:03:57:35:2f:2b:11:01:42:65:44:93:
                    b3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6E:41:7E:9B:4D:25:53:21:2F:15:1B:1B:30:4B:4D:37:90:E4:4A
            X509v3 Authority Key Identifier:
                keyid:D1:E2:99:F9:E8:2C:93:7C:B2:B2:A6:90:61:E8:17:34:1F:85:08:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0eKZ-egsk3yysqaQYegXNB-FCPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/4EA6C618E8BD11ED8B892522C4F9AE02/0eKZ-egsk3yysqaQYegXNB-FCPU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7f:a8:0d:37:1a:2d:c4:92:1c:df:30:07:10:2d:14:0a:9c:
         61:87:31:f6:85:8f:71:4a:a2:da:83:6c:c0:29:cc:ae:87:02:
         37:fc:b9:13:30:3a:39:c6:e0:36:3b:28:f8:03:99:46:9e:18:
         71:af:5b:d5:6f:94:62:b6:fc:9d:be:28:a2:25:14:74:ca:59:
         d1:b6:86:f4:3e:4a:06:15:df:a4:a3:6f:5a:08:cb:1b:fa:d1:
         66:d8:06:bf:b4:0c:52:7f:72:64:d9:c3:3f:28:0d:16:85:01:
         62:17:b5:85:16:29:8f:f0:ae:55:68:a2:bf:4b:d7:0b:e8:a5:
         49:61:3d:be:a1:35:4c:f0:d4:cf:62:bb:ac:ea:4a:0d:ce:36:
         2e:de:aa:52:d5:e5:99:10:c3:97:06:20:10:01:2f:9d:e6:e8:
         6e:31:61:68:fb:54:1d:48:40:f6:7e:1c:d1:3f:f2:0e:9b:9c:
         52:e5:ff:ba:8f:a7:a7:b9:50:8e:b6:10:f7:df:13:fd:17:ee:
         e2:b8:d0:ff:75:32:d2:71:03:67:dd:bf:23:bf:52:19:da:eb:
         74:4e:cd:f1:54:2f:1d:49:4e:d2:ff:99:b7:98:9f:d1:0b:e7:
         52:ce:8a:59:3e:2d:ae:ab:e4:76:9f:f3:53:bd:ba:9a:78:4f:
         49:a3:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:11 2026 by rpki-client