Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File:                     EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier:          YVnp7RE0/gC4tqAC1T9MFBjnV29LSa1bfMdRFRnV/XE=
Subject key identifier:   3A:03:8B:B9:BE:4A:5B:BE:8A:49:8F:A7:1A:F0:38:21:48:3B:A6:8D
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       024F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number:          0245
Signing time:             Tue 21 Jul 2026 03:42:24 +0000
Manifest this update:     Tue 21 Jul 2026 03:42:24 +0000
Manifest next update:     Tue 28 Jul 2026 03:42:24 +0000
Files and hashes:         1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: H0Rym9y5K1ViY+whaTW/f9lyENb4UMv+N/zt7VeppKU=)
                          2: 32D39C06224511EE81776175C4F9AE02.roa (hash: hNFbYhd9+ijqK3DkikE6pXZI2IbUd5uk8px8ztk57j4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: Jul 21 03:42:24 2026 GMT
            Not After : Jul 28 03:42:24 2026 GMT
        Subject: CN=6a5eeaa0-97a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a7:c2:66:ce:e2:96:2d:3d:a3:d1:b2:89:7c:
                    55:ae:0a:50:65:87:ad:43:1d:29:1d:43:f3:e1:6a:
                    db:27:d8:1b:f6:13:01:9f:f1:5e:42:81:98:29:9c:
                    8c:35:67:4b:e4:84:b4:fc:d4:4e:28:f3:d0:a5:9e:
                    4a:f5:20:1d:f9:be:d5:e0:16:b8:b0:aa:97:4a:cd:
                    0c:b5:a6:a0:0d:81:bb:02:c5:6a:70:61:34:f3:9a:
                    7a:c2:6b:8b:0c:af:5e:08:5c:32:a6:28:1b:97:66:
                    62:38:c7:7c:02:a4:2d:82:38:53:bc:6a:0b:b9:71:
                    94:d8:8d:b5:f9:e1:91:64:17:03:cc:2f:d0:7a:e8:
                    4e:16:dc:30:e3:a7:3b:60:3c:cf:b6:c4:fb:a9:51:
                    2a:9e:6d:9f:8b:0f:19:4a:97:a2:cf:34:fc:5b:14:
                    07:60:0a:ee:70:ca:35:90:7e:0b:05:73:4d:1c:81:
                    6f:45:c4:15:50:97:61:11:ec:be:e3:28:40:87:03:
                    2a:01:0a:f5:64:ea:fc:14:ba:26:29:b5:fd:ba:68:
                    df:8e:58:e9:b1:d5:6e:45:d8:b1:48:2b:e3:bb:08:
                    7a:69:90:c4:0c:aa:7c:26:a3:e1:37:0a:cf:34:d8:
                    8f:7e:9e:8a:ee:04:e5:46:98:56:3f:51:32:9d:a7:
                    f9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:03:8B:B9:BE:4A:5B:BE:8A:49:8F:A7:1A:F0:38:21:48:3B:A6:8D
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4e:e9:c2:52:76:fe:61:d9:b8:e5:3c:99:5d:3f:af:35:50:
         02:49:b1:5a:07:09:46:b3:89:31:69:5e:e0:55:2c:ff:7c:76:
         75:d5:6f:7d:75:b3:f0:ba:0c:9d:58:8d:d0:a7:81:97:7b:8a:
         4d:d5:90:4f:53:35:86:05:6d:9f:37:ce:be:5b:e0:81:78:66:
         0d:c5:66:89:44:97:e9:e7:ef:16:43:c4:27:c2:f8:1f:05:a7:
         db:a6:f5:8d:94:a1:b5:8d:8b:c8:c7:42:f1:5a:44:e5:74:76:
         7d:a1:cc:91:1d:90:69:42:d2:0b:02:9b:c0:96:f6:fd:8d:01:
         14:be:7d:c4:38:60:70:68:c5:19:68:19:6e:de:e0:bf:0b:cd:
         b7:1e:49:92:6a:84:83:d2:b9:9a:c0:14:b3:7a:ab:86:83:94:
         c3:57:28:01:1d:3f:50:23:2e:b5:55:c6:e4:5f:92:be:ca:bb:
         f6:e6:7e:04:a7:6e:12:94:81:3f:df:35:8f:a5:92:98:13:ea:
         16:9f:de:99:65:0a:35:88:de:e3:45:35:98:14:02:e9:a3:87:
         5c:29:31:89:83:87:bf:af:2d:fc:09:eb:63:c7:a2:22:3e:b1:
         31:89:83:fa:c5:b8:8a:13:7c:34:1e:e7:56:32:e8:4a:44:b6:
         8e:79:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:47:03 2026 by rpki-client