Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File:                     ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier:          ohsoRBKKdURanGf55kHMhdnm266RaosZpOFO30Jo3pw=
Subject key identifier:   68:03:AB:79:F4:3D:19:A0:8E:5E:72:F4:4C:10:85:F7:C3:10:11:A6
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer:       /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial:       0AF5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number:          0AEA
Signing time:             Mon 20 Jul 2026 19:47:03 +0000
Manifest this update:     Mon 20 Jul 2026 19:47:02 +0000
Manifest next update:     Mon 27 Jul 2026 19:47:02 +0000
Files and hashes:         1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: 56kUEnvziLZrI9bobauRJDaWAFCF0PIlKQtIuj2AbP4=)
                          2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
                          rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2805 (0xaf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
        Validity
            Not Before: Jul 20 19:47:02 2026 GMT
            Not After : Jul 27 19:47:02 2026 GMT
        Subject: CN=6a5e7b37-6300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a1:d3:99:27:88:96:5e:14:2c:25:6c:5f:a9:
                    b8:ec:2e:09:23:fe:ca:e7:2d:86:85:61:3a:64:e7:
                    e8:eb:ef:8f:42:e8:b2:f2:18:19:50:1c:f6:75:bc:
                    21:2b:dd:0e:64:ef:62:ab:b3:ab:ca:0b:74:37:bc:
                    6b:18:f0:b4:a4:8b:9c:4d:04:e9:4c:15:dd:3c:99:
                    cd:2f:e8:ad:81:ce:22:af:e9:1a:a7:b2:1a:f8:d5:
                    eb:75:a4:48:e3:29:cb:bb:78:25:93:8f:ed:b7:da:
                    a4:9f:22:52:2e:ce:ab:a0:ae:fe:b6:c5:c6:30:75:
                    7f:dd:c8:75:27:08:16:5d:eb:21:2d:c0:f2:da:88:
                    b8:bd:1c:4d:05:1f:48:22:4b:c8:e3:42:c5:e1:a2:
                    ad:e3:22:27:c1:5c:29:e8:3e:dd:8c:b0:40:5b:5e:
                    b5:2f:64:bc:ac:22:16:25:43:93:56:2a:30:71:db:
                    15:26:34:7e:f8:33:b4:54:0e:0c:3c:45:97:76:37:
                    51:03:4a:e4:dd:8c:52:2c:63:fc:8e:71:01:50:77:
                    90:e8:ac:6a:38:8f:32:29:69:44:3e:0f:ad:23:e1:
                    7c:50:82:63:a3:3c:41:7e:83:44:ab:f1:29:c4:e2:
                    dc:bf:3e:bb:eb:f7:51:be:eb:e5:dc:ca:24:f3:3e:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:AB:79:F4:3D:19:A0:8E:5E:72:F4:4C:10:85:F7:C3:10:11:A6
            X509v3 Authority Key Identifier:
                keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:d0:2d:91:c3:1d:72:79:88:bb:f3:19:ea:16:26:14:39:
         e6:09:6a:a0:5f:51:04:93:76:f8:5b:69:30:da:f5:d3:cc:1c:
         37:b9:06:dc:de:49:62:2f:82:93:90:2e:3d:d1:49:8a:74:79:
         96:c2:a9:bc:93:28:79:e7:f1:8b:72:a3:37:c1:95:08:93:ea:
         f2:3b:46:e6:40:df:15:e1:9d:05:e8:1c:50:2f:78:d2:8e:af:
         42:8b:7d:42:22:bc:e0:18:1a:ff:8a:fa:5a:c7:31:01:fd:15:
         22:bc:9f:47:0a:45:61:29:54:a0:4c:99:66:96:38:e1:9a:c6:
         38:91:e4:d1:1e:46:12:2e:a2:5f:00:0f:e9:f0:b1:67:27:e7:
         73:75:6c:cd:86:a8:79:ee:68:e6:07:d9:06:02:05:46:a8:78:
         d1:49:0b:d6:b8:86:dc:61:03:95:4b:ce:51:f3:a4:c0:32:9f:
         4b:dc:a8:d6:5f:89:39:31:20:7b:59:dd:ea:c5:e0:8c:ed:53:
         e5:5b:9d:2b:f0:3d:a5:42:5d:19:18:ec:c8:78:59:dd:21:2b:
         81:53:b0:27:3b:a9:16:d5:0b:db:59:2d:fe:a9:ca:54:a8:2f:
         5e:a5:61:eb:b2:31:a9:b3:13:d3:d2:54:d7:26:dd:a8:3b:ab:
         66:54:dd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:07:02 2026 by rpki-client