Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File:                     eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier:          1axZZNVJ0jxMhkfVU8K8CGaBryb5fcBcRwVUSkCSPDk=
Subject key identifier:   33:5A:13:AD:66:91:DA:A2:80:FE:04:EB:FD:DC:83:35:3D:07:B5:5B
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer:       /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number:          01F8
Signing time:             Fri 09 Oct 2026 03:54:12 +0000
Manifest this update:     Fri 09 Oct 2026 03:54:12 +0000
Manifest next update:     Fri 16 Oct 2026 03:54:12 +0000
Files and hashes:         1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: q+gGE6TH6rXmij6e/4LvLo+b4iPjR7zsXfLJHFAy03s=)
                          2: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
                          3: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
                          4: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
                          rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 Oct 2026 03:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
        Validity
            Not Before: Oct  9 03:54:12 2026 GMT
            Not After : Oct 16 03:54:12 2026 GMT
        Subject: CN=6ac86564-0113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5f:8d:73:31:7e:0a:dd:db:f3:cf:b5:4c:d7:
                    ea:5b:99:78:fe:1e:b8:cf:23:b1:20:48:87:84:b0:
                    55:5b:81:c0:36:c8:a1:17:e3:8b:11:01:40:86:cb:
                    8a:68:1f:80:e8:99:2c:a7:c7:6f:7c:f2:38:1b:c6:
                    95:83:49:e1:ad:ea:10:e1:b5:cd:fd:37:c3:b9:7f:
                    c9:e0:d1:ac:10:91:52:27:23:95:40:20:a3:9e:55:
                    9a:d8:30:ae:eb:ea:eb:4d:c9:2a:a4:06:86:e0:94:
                    58:ae:91:24:e5:df:a8:0d:5d:0b:ab:7c:ac:03:04:
                    a1:74:e8:fb:5b:d6:db:bd:f8:33:bd:af:cd:7d:69:
                    0c:0a:1a:a8:bf:a8:2c:9f:a0:ab:0a:42:3f:c3:1a:
                    be:7f:34:2c:dd:ff:74:60:e3:92:a4:c5:e9:f3:1e:
                    c9:8f:5d:06:5f:ec:6a:79:03:7e:f5:ca:7b:14:cf:
                    05:eb:ed:7f:44:28:7e:e7:3c:e6:ee:52:d8:75:6f:
                    3e:b7:b6:39:e0:ed:5d:08:ec:8d:a9:b9:a0:55:28:
                    b5:dc:c7:7f:42:62:dd:6d:72:78:90:50:e7:b1:60:
                    3c:f5:8a:9d:d3:db:4e:b8:7f:c2:9c:c5:e5:8d:e2:
                    96:81:0b:51:fd:e6:da:0e:29:4b:11:15:e9:87:a7:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:13:AD:66:91:DA:A2:80:FE:04:EB:FD:DC:83:35:3D:07:B5:5B
            X509v3 Authority Key Identifier:
                keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:48:39:84:98:86:1b:0f:1b:0c:90:9c:b5:51:89:2c:a5:6e:
         7d:3a:cd:f8:37:52:22:9d:96:07:d7:d5:47:8a:8e:12:ff:e2:
         ae:9d:7d:2a:a8:79:b8:c1:29:b4:79:ed:8c:ab:ed:a0:48:34:
         23:7c:0a:bb:04:8b:3e:24:a4:2e:a2:6c:a9:ae:da:19:b6:87:
         59:9f:21:5b:1d:89:d6:e9:f3:b4:7f:8b:48:1d:2e:6f:9b:b4:
         c0:5e:65:4f:36:5a:26:4a:8c:f7:74:1f:89:4e:9c:90:01:b9:
         da:a9:19:7e:d7:7d:49:4f:9c:a2:10:27:4f:62:29:f1:b8:e0:
         75:7d:88:c5:6a:59:70:ea:e8:92:86:e4:db:a3:67:b1:3c:6a:
         07:71:44:0f:61:7f:1b:ed:d4:f0:db:d8:16:1e:e4:3c:2c:2c:
         96:35:86:25:b8:07:c9:45:84:3b:d4:6f:9b:0c:23:47:c9:aa:
         44:bc:4d:58:ba:e5:f6:21:b5:c8:64:28:8d:82:70:16:7f:7e:
         73:10:7c:93:ea:16:57:4f:05:60:d5:b6:68:c2:f2:32:17:60:
         7d:a7:a2:7e:cf:a4:b0:ec:d3:ac:17:14:00:a0:d2:8d:c2:a9:
         cc:bb:c2:13:11:71:0c:57:42:ee:2f:cb:56:fb:b9:da:be:3d:
         eb:c2:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:11:48 2026 by rpki-client