Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          oVoiMfL8FlJNvNKt7SpV+QSQfiNHvS2CIFTWYW4/8y8=
Subject key identifier:   D6:12:31:DB:34:C7:44:BA:B6:39:58:2C:11:FF:7F:62:78:60:0A:34
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       35D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3596
Signing time:             Sun 26 Jul 2026 14:33:09 +0000
Manifest this update:     Sun 26 Jul 2026 14:33:08 +0000
Manifest next update:     Sun 02 Aug 2026 14:33:08 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: H4R1Z3iLjkc+66CbMmkP3OV+E2eyI83kNnd158lqDNM=)
                          2: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: 1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=)
                          3: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=)
                          4: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: pEr2wO5ZAQqRLVAqVCe90KJfFg9AIXlsq7twE8fo5s4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 14:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13776 (0x35d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jul 26 14:33:08 2026 GMT
            Not After : Aug  2 14:33:08 2026 GMT
        Subject: CN=6a661aa5-ac40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:6a:c6:c4:41:9e:d5:54:a1:39:b6:34:dd:
                    98:16:d4:16:cf:7e:e0:87:39:55:59:4a:71:46:62:
                    d3:10:ab:e7:b3:bb:0e:ed:8d:4b:d0:5d:b1:64:90:
                    a0:2e:d0:86:7a:e0:7c:33:8e:ca:50:e3:92:21:03:
                    e0:b4:1c:35:da:56:c9:26:a0:dd:53:cc:c7:75:15:
                    0a:ee:45:48:56:2f:71:d2:33:0a:23:ed:96:66:35:
                    5d:26:59:d0:3e:84:b1:7a:e3:f4:37:fd:09:5e:28:
                    e6:25:2e:e2:03:78:9a:72:16:9f:1f:4c:b9:4d:13:
                    8c:8b:f0:38:d2:d6:8e:04:93:d2:0c:e6:20:ab:8e:
                    4b:ac:14:11:48:1c:ab:5f:d3:68:81:ee:6f:fb:2e:
                    cb:81:98:53:49:4e:f6:bc:4e:bd:99:a1:33:ba:c5:
                    0e:76:5b:e8:3f:68:10:4a:ad:27:e0:a6:53:d1:a9:
                    03:01:01:60:15:ec:75:99:72:63:b1:1c:ab:f8:a9:
                    44:d1:b1:40:b9:15:1a:a2:af:30:a7:cf:e5:d6:fb:
                    7f:9f:22:44:3c:49:59:bf:7d:ff:dc:5b:2e:65:71:
                    95:de:9e:2a:42:16:df:46:4d:08:ce:98:10:a8:03:
                    0d:6d:8c:74:7f:f6:2e:a4:1e:e1:85:33:1f:cb:34:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:12:31:DB:34:C7:44:BA:B6:39:58:2C:11:FF:7F:62:78:60:0A:34
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:68:ec:a4:f9:25:54:ac:22:9d:79:28:49:54:54:c2:3e:
         0e:f8:95:d6:45:df:cb:33:2b:1b:4a:ce:3a:c9:27:62:47:3c:
         59:00:24:56:ca:bc:7e:3a:35:2a:09:03:3a:fd:f6:46:23:59:
         5c:d0:b3:fa:0d:fc:77:89:9b:08:2a:ab:0a:f7:56:65:a5:92:
         1f:db:a9:28:92:5c:d2:dd:66:c9:91:e3:b6:b0:cb:91:1e:56:
         89:00:a4:f5:e9:91:7f:f1:e1:26:f7:9d:41:55:6e:bf:aa:e7:
         f3:d4:b7:8a:ca:ed:f5:0a:83:03:ea:5c:79:87:e5:f7:83:c7:
         39:0f:a5:37:4f:64:06:d8:73:da:87:3f:e8:52:79:0a:19:f6:
         ef:ac:c6:c0:06:55:a7:d9:b0:26:a9:87:11:f6:2f:03:c7:88:
         f5:34:75:ac:b5:7e:ef:dd:f0:ef:84:6f:48:33:45:dd:21:a3:
         cc:41:7f:f8:0c:25:af:8a:03:8a:7b:64:bd:87:5c:d2:63:35:
         41:05:74:bb:22:50:03:e3:06:ff:b4:a6:2d:7d:49:e3:c2:0f:
         12:79:79:6a:c0:c7:79:8d:08:9f:60:55:73:a2:c9:5e:19:16:
         e4:01:4c:65:f4:18:09:e3:c4:bf:73:20:ed:56:02:07:86:a2:
         18:aa:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 22:57:08 2026 by rpki-client