Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File:                     EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier:          F7aqSlaffJKgLS3OaJ/uNyod+MPzVsAaCTrJGEGbk88=
Subject key identifier:   23:84:1F:21:88:69:18:85:93:03:76:6D:5F:DB:14:5D:79:09:53:8F
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer:       /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial:       01A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number:          0199
Signing time:             Thu 21 May 2026 04:20:27 +0000
Manifest this update:     Thu 21 May 2026 04:20:26 +0000
Manifest next update:     Thu 28 May 2026 04:20:26 +0000
Files and hashes:         1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: 9pAFFgL9N1mFFC5+wCbPN2n0OBCnS7MsNs+zq+Om/D4=)
                          2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: qHKPAO+iCN/5xje+tGrEHy5PZ4Gr8KsPsnqdqu/3QUc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
                          rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
        Validity
            Not Before: May 21 04:20:26 2026 GMT
            Not After : May 28 04:20:26 2026 GMT
        Subject: CN=6a0e880b-6a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:f3:fa:69:2c:6f:36:23:98:bc:89:eb:99:
                    20:dd:8c:98:f3:da:fe:51:8e:7d:a3:c1:c7:64:2c:
                    b5:8a:4c:e9:56:f3:74:f1:87:5a:9e:df:72:2f:a3:
                    8d:41:53:a7:a9:84:07:0f:c2:2f:ea:95:eb:fb:6d:
                    ed:27:c7:c0:74:c1:fc:c6:92:56:c4:cd:ec:c5:5c:
                    cc:ca:dc:e0:c9:84:9b:92:cb:28:d2:46:70:4b:26:
                    ba:27:ff:9f:53:13:e5:55:3f:c5:b4:cc:5c:37:ad:
                    e0:22:e9:8b:05:36:fa:b9:bc:f0:d8:61:33:02:de:
                    1d:af:bb:c6:82:35:3e:95:01:d9:6a:93:1d:c3:83:
                    92:9a:5e:27:6c:66:f5:32:86:43:7a:16:28:31:f9:
                    b2:60:8d:a8:86:1b:49:02:eb:e9:6d:46:4e:62:71:
                    e1:17:61:d3:9c:20:24:d6:63:bf:7d:1d:e5:cb:4d:
                    c4:0b:7a:a2:c5:6b:ec:5f:fa:85:4f:a7:06:cb:a1:
                    c5:ac:ce:9d:fa:9f:07:c1:4a:c7:94:fa:73:aa:b3:
                    cc:36:99:b6:78:56:46:ce:1c:e0:b4:bc:09:bc:8a:
                    2b:75:46:a2:05:a4:be:fe:64:67:13:f4:fd:c1:ae:
                    3b:b7:a4:09:db:87:a3:50:ab:4e:e9:19:a6:ca:d5:
                    18:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:84:1F:21:88:69:18:85:93:03:76:6D:5F:DB:14:5D:79:09:53:8F
            X509v3 Authority Key Identifier:
                keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:90:04:9e:36:fc:a9:d2:a0:bf:9d:4f:8a:50:01:1c:b3:61:
         91:04:d4:1f:69:49:fb:39:df:fa:9f:98:85:a7:bd:00:c3:00:
         b9:95:73:3c:0e:34:fd:64:8a:b9:12:ab:23:cd:aa:0a:5e:10:
         8a:43:a0:c6:2e:81:14:25:6a:f2:4c:9d:7c:28:96:06:cf:c7:
         60:79:84:8b:7f:53:73:d0:15:31:f3:af:5f:c8:60:cb:91:af:
         4a:fb:df:54:0e:38:56:b5:22:dc:4f:fc:9a:2e:8d:b4:df:c9:
         05:e6:21:ee:c3:a5:e0:a1:aa:e5:81:4b:44:68:5d:01:a8:fb:
         96:45:ae:56:64:bb:fb:d4:4f:63:1c:26:06:8a:13:26:57:ca:
         4d:6d:9c:c3:74:40:19:fa:2d:b2:75:e3:ed:90:dd:b2:63:89:
         bb:0e:bc:1d:c1:d7:c6:da:25:89:67:eb:ea:93:fe:bc:18:86:
         0d:33:d8:cf:37:e4:e6:1f:d6:44:65:e8:08:69:20:98:b6:d1:
         de:56:d7:63:ae:30:dc:75:d9:21:11:b7:08:72:21:fc:ef:2c:
         b5:0d:ce:86:65:9f:c4:c4:b9:62:62:52:98:87:23:71:e4:25:
         20:88:0e:31:b4:d8:09:23:bc:ba:1b:28:8e:e2:ba:96:7e:60:
         31:2d:43:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:24 2026 by rpki-client