Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File:                     EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier:          5Gf4t/dNyNHe6APZCx20/HtFjRHNDA9mzLXF70TB8gk=
Subject key identifier:   C6:0D:AF:23:05:47:C9:9A:93:03:B7:FF:86:8F:A9:B6:DD:F4:35:68
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0F2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number:          0F23
Signing time:             Fri 10 Jul 2026 17:45:31 +0000
Manifest this update:     Fri 10 Jul 2026 17:45:31 +0000
Manifest next update:     Fri 17 Jul 2026 17:45:31 +0000
Files and hashes:         1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: sJ5FAgknkqnCKEow+J8ZHQ0e2HyavWgcLyyYWLnDaM8=)
                          2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 4bbcXUAySLXOzdFL1tioIfucTJOOmIVK2SW9Cfab4LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 17:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3887 (0xf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Jul 10 17:45:31 2026 GMT
            Not After : Jul 17 17:45:31 2026 GMT
        Subject: CN=6a512fbb-1a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fa:a2:31:30:83:7b:f6:9b:5a:da:f7:07:4c:
                    c2:c4:90:e2:48:38:76:e5:57:90:05:c3:cd:6d:27:
                    c8:e3:76:ec:23:d4:5a:92:2a:e1:c2:7f:fa:69:a6:
                    49:47:d0:19:58:c0:19:1f:58:d7:50:a3:eb:f4:b7:
                    1b:1c:c3:66:f0:ec:bc:1b:da:e3:9f:7e:30:97:d7:
                    66:7c:a9:87:b0:2a:b7:37:81:e4:96:b5:50:e8:a1:
                    4b:a9:8d:2c:be:92:b9:b7:0b:95:0b:28:89:5f:a2:
                    fe:62:ee:1c:d7:1f:16:13:a6:ee:b0:83:12:35:58:
                    bd:46:49:fc:9f:7b:ef:a8:35:15:3b:e0:9d:2b:5e:
                    31:1f:79:c5:50:a1:7a:1a:c2:2b:0e:ac:c5:9b:9f:
                    cd:18:3a:2b:de:a1:08:a6:74:c2:7c:64:2d:30:56:
                    ca:be:55:db:1a:6c:9f:16:1b:9a:20:81:e6:61:7c:
                    4b:dd:c4:7c:92:86:6b:bd:a4:81:dc:17:a2:00:b8:
                    08:f8:e3:8d:e0:06:28:c1:dc:d1:84:9c:b3:54:92:
                    60:3f:43:ac:a9:70:1c:b4:d2:16:82:f0:e4:02:16:
                    d3:8d:a9:1c:12:8b:68:37:c9:18:52:f3:83:e8:86:
                    50:9d:47:1d:9f:8b:94:9e:1e:f8:43:a3:f9:09:53:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0D:AF:23:05:47:C9:9A:93:03:B7:FF:86:8F:A9:B6:DD:F4:35:68
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:69:21:ce:f1:87:52:0d:2b:f8:d6:ad:03:44:88:99:f6:91:
         82:28:b9:9c:7d:65:ed:13:29:05:64:68:92:1b:9b:8d:82:be:
         73:76:d2:6a:73:dd:0f:c5:d9:28:20:5c:e7:ae:d3:f7:f4:a9:
         d1:6c:c8:42:80:59:94:d4:2c:57:32:89:50:c7:c2:10:af:c3:
         ee:07:0d:e5:c6:bb:a9:7b:62:2c:13:56:9d:99:82:10:6b:e3:
         c7:d6:2f:5c:cd:0f:37:01:17:85:98:ac:94:89:eb:1f:e3:0e:
         b9:3b:2f:d6:33:de:16:82:47:04:85:c3:89:0d:f8:31:36:d5:
         e8:bc:4c:2f:a1:64:e4:da:7b:7c:23:56:e9:85:86:ad:f5:d0:
         98:70:a1:97:20:8d:3d:e8:e1:df:db:92:a8:13:f2:d0:d3:c8:
         11:f3:5d:63:6f:8b:89:b3:95:1f:d0:a7:03:5b:6f:2e:57:6d:
         55:d7:ac:f0:11:c5:28:c8:0b:34:fe:74:ab:99:a4:d2:94:6a:
         09:13:e2:5f:5e:ab:28:48:a3:8c:fe:a1:4f:ab:03:c5:43:d4:
         a5:70:40:a3:44:c0:68:8d:f8:cd:f6:5a:23:25:4f:8d:89:22:
         7c:d4:2f:5b:85:14:34:37:fc:d8:c6:6f:15:2b:df:14:f7:ee:
         6a:c1:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 04:36:34 2026 by rpki-client