Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File:                     eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier:          eWr7Cqwo9Mt2cWAqn15EnYDTz/CzB3wIU2TQ2NkXvlo=
Subject key identifier:   FD:FA:55:68:D0:88:A9:0F:38:5F:FB:92:D7:99:25:49:6F:9C:04:D4
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number:          01C3
Signing time:             Sun 05 Jul 2026 04:26:50 +0000
Manifest this update:     Sun 05 Jul 2026 04:26:49 +0000
Manifest next update:     Sun 12 Jul 2026 04:26:49 +0000
Files and hashes:         1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: swTvlDMESD5ONg6oSLdH1AUUsP9aXUgCbqLuseWAidg=)
                          2: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
                          3: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
                          4: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 04:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Jul  5 04:26:49 2026 GMT
            Not After : Jul 12 04:26:49 2026 GMT
        Subject: CN=6a49dd0a-9b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:96:3e:fb:ab:63:9d:69:3e:00:12:7d:30:22:
                    ef:81:d7:82:73:b4:44:8e:67:4f:e0:04:af:d8:52:
                    38:ac:78:86:39:75:c9:6d:b0:f7:0d:5f:e1:6f:fb:
                    44:c6:1b:35:d7:53:48:8d:3c:b6:0f:c0:31:f6:7d:
                    53:f8:c4:1c:c3:c3:6f:ff:10:be:2d:48:8d:56:d4:
                    f5:0a:a4:a3:a4:2e:78:7f:1b:4e:49:11:12:de:95:
                    12:20:10:9f:fb:eb:ac:5a:29:82:50:a2:b6:13:94:
                    af:53:c1:03:7f:0f:d3:1b:52:eb:99:c1:71:76:94:
                    7f:0f:26:69:6a:67:70:7d:7a:aa:de:63:b7:8f:65:
                    a8:95:69:22:12:34:26:b9:e2:39:95:c2:e8:39:0b:
                    5f:b7:02:37:13:73:d5:6a:cf:ad:76:e7:02:be:1a:
                    07:ad:c5:ea:ea:09:4e:be:16:86:cb:4d:00:d2:c7:
                    d4:59:57:72:c6:a0:42:cd:ef:5a:44:a2:08:f1:c3:
                    b2:a3:a1:3c:ae:1a:78:04:8f:4a:bc:fe:b9:cd:30:
                    5e:d4:0c:1f:b1:f7:a5:41:80:d6:38:2e:52:8c:84:
                    f0:1d:fb:71:f8:a0:ee:38:69:e6:ef:6b:a0:96:39:
                    a8:f8:82:f3:5a:da:8b:26:7e:21:b4:a8:56:16:3d:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FA:55:68:D0:88:A9:0F:38:5F:FB:92:D7:99:25:49:6F:9C:04:D4
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:69:07:53:80:bb:b1:d7:e8:0a:1f:d8:67:b3:98:0a:48:
         bf:bb:0c:ae:ab:4c:cf:10:c7:2a:b8:10:e0:79:04:15:29:aa:
         fd:30:f8:cd:09:7e:54:ba:57:1f:05:34:f0:00:de:2f:99:49:
         56:b9:2f:d2:17:27:af:96:32:55:60:e4:d9:53:5f:b8:c6:b8:
         b3:6d:8d:2f:95:ca:ae:8c:6b:06:01:d6:e3:c5:00:75:a5:aa:
         34:ea:47:95:48:22:23:b9:08:b9:fc:56:e1:e6:6e:75:04:ff:
         7f:d3:c7:2e:26:41:19:ab:d5:09:c9:5f:44:96:24:f7:a6:0b:
         0b:4d:08:9e:ce:a0:b9:06:de:d4:72:27:5b:85:ff:c5:10:eb:
         33:67:95:16:06:1e:db:b4:89:fc:25:1b:4e:0f:be:39:0d:5f:
         1d:1d:c9:91:ba:ad:29:42:22:da:f4:97:29:1b:5d:25:87:b3:
         72:09:79:d1:b0:37:5e:34:e0:94:30:0c:ec:4f:0d:8a:ff:04:
         0b:75:a7:d5:07:73:be:ab:ec:80:8d:7e:4b:98:f6:71:89:d1:
         ae:6f:66:ff:f9:0e:7e:01:74:7c:e4:d3:6c:ea:57:58:0d:04:
         3f:48:83:dd:bf:c9:b7:2d:2f:6f:27:fd:c0:a3:4b:3e:cc:84:
         c1:ab:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:59 2026 by rpki-client