Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          DY8C8JESCKMk5B7K/T4wm+7kJNHEf9kNIIC9Orp4UXY=
Subject key identifier:   39:24:4B:3A:CD:BE:9F:01:D6:F7:9D:47:AD:D1:4E:21:1B:BC:BB:07
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          03E9
Signing time:             Thu 09 Jul 2026 01:45:20 +0000
Manifest this update:     Thu 09 Jul 2026 01:45:19 +0000
Manifest next update:     Thu 16 Jul 2026 01:45:19 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: dvxKW7g/DYJNFGRHMhXDdigmIkhkNUhynLaHIQwHsHw=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: 74deX67hI2qBziGNrnniX4uG01hCP465g7YKK+iDObQ=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: pgc094l2IccUiGHfBhpbDLm4Mx/YARY92WWKRNYIHII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 01:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Jul  9 01:45:19 2026 GMT
            Not After : Jul 16 01:45:19 2026 GMT
        Subject: CN=6a4efd30-7f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:81:ad:1f:7a:8e:98:78:05:3d:f2:b2:b8:
                    9d:fb:be:76:01:d5:2e:e7:38:89:d2:27:ad:d4:9e:
                    9c:a8:2e:5f:6b:18:f7:e3:46:cf:26:d8:16:54:dd:
                    94:5f:86:2b:11:cb:32:e5:52:d5:fa:a5:3e:ab:3f:
                    4e:be:6c:d9:0a:82:b2:31:e4:9e:c3:38:69:78:7d:
                    49:48:d1:2f:ad:92:61:73:0d:68:91:81:fe:dd:51:
                    10:96:8c:13:d6:8c:78:c8:cd:c2:66:41:f9:4c:13:
                    3e:6a:c1:89:86:0f:de:99:42:51:ac:03:59:da:eb:
                    8c:4a:c7:3b:8d:59:9b:e0:a9:6f:1f:46:e0:f8:66:
                    ef:b1:d9:32:a5:66:fd:9b:18:60:95:1f:fd:d5:83:
                    d1:93:e4:3a:3e:63:ec:3a:bc:9d:83:3a:2d:fb:bf:
                    7d:dd:6e:e6:36:18:d4:a8:3e:48:6a:87:80:ee:76:
                    83:19:6c:34:99:3d:c8:f8:8a:a6:a6:67:af:01:5d:
                    4b:68:c6:11:f0:c9:0a:15:01:c8:fa:4d:a0:00:25:
                    0a:6e:f5:5d:88:61:0e:5f:62:c9:ea:2e:2f:a2:fa:
                    c6:83:80:e1:fc:dc:dc:40:b2:81:18:0c:2a:12:aa:
                    e6:5b:5c:9e:67:b4:fc:a6:5d:b0:29:3f:88:92:44:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:24:4B:3A:CD:BE:9F:01:D6:F7:9D:47:AD:D1:4E:21:1B:BC:BB:07
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:71:75:31:8f:c5:19:13:07:e3:aa:5d:dc:98:b7:68:51:4d:
         87:92:1d:9d:c0:cd:c3:d2:42:09:ac:4a:a8:a2:90:34:f9:82:
         9b:98:2b:f4:05:d4:0a:1c:25:b7:84:30:f7:8d:8a:f6:49:71:
         9a:ee:9b:19:86:5f:4d:0a:36:04:65:08:77:0b:e9:62:a7:a2:
         c6:9f:38:75:a6:b3:a7:2a:55:11:0a:9d:e2:0d:77:be:30:75:
         2b:0d:1e:7e:42:34:a4:d6:da:74:b9:d1:e1:89:81:2e:62:21:
         bc:16:c9:e0:bb:8d:86:7c:bb:c9:2e:30:42:8d:18:2f:74:ea:
         dc:61:af:a3:05:5c:62:21:18:cf:fb:d1:3b:f7:23:8b:b9:42:
         cf:7c:67:dc:c6:13:32:58:80:c7:c3:2c:3c:ed:b4:d9:ff:86:
         69:e9:16:34:d8:cd:b3:55:02:bd:80:35:d7:40:62:1d:e4:e6:
         49:72:54:69:b3:4b:b5:35:bd:0e:a6:08:4a:1f:3c:5a:62:2a:
         93:12:b9:70:f7:ba:7b:be:de:e1:76:6c:3b:3c:d0:e4:b7:46:
         11:1c:5c:23:49:4f:1b:16:df:97:84:1e:95:12:7e:1f:9a:17:
         10:50:ec:e0:b3:7f:6d:8a:67:3a:35:ca:e1:d4:fb:ee:08:65:
         34:86:18:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 16:38:19 2026 by rpki-client