Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
File:                     EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft (raw, json)
Hash identifier:          SZ2oQsixzPIQjTK/8hVOJXgxUiYwmdEmPWlYLUGMGKU=
Subject key identifier:   41:97:16:A3:E9:A1:7F:0A:32:B0:C3:06:67:30:CC:9E:5F:35:5D:1B
Authority key identifier: 11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1
Certificate issuer:       /CN=A91EA7B2/serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
Certificate serial:       0F2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
Manifest number:          0F0F
Signing time:             Mon 26 Oct 2026 17:37:56 +0000
Manifest this update:     Mon 26 Oct 2026 17:37:56 +0000
Manifest next update:     Mon 02 Nov 2026 17:37:56 +0000
Files and hashes:         1: EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl (hash: CLlfqynKZQrbGB5ZwSAjeYdAfKsA/1yF4YGX7fwevZQ=)
                          2: C145485EAE9A11E9B17AC77EC4F9AE02.roa (hash: rUpaSwZKGK2SflEl5oRSUOsZ6h9lQccT+3OZkbf79PI=)
                          3: E7DFF7B8CA1D11EE8037E217C4F9AE02.roa (hash: IXDMktuW1eMer2Jfj/UCXO4EyeiZ3TkOZOE5RKCxpb0=)
                          4: 14ED07C27B8D11EDB395B621C4F9AE02.roa (hash: 8IEOcn859bdj07hvdLHHiu5te9v+Mf6Y9BRqk4uy5v8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl
                          rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 17:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3883 (0xf2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA7B2, serialNumber=1156205EC7380A00F10F3410114D040357F00FF1
        Validity
            Not Before: Oct 26 17:37:56 2026 GMT
            Not After : Nov  2 17:37:56 2026 GMT
        Subject: CN=6adf8ff4-bea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e7:27:a2:b0:93:11:cc:2f:cd:3c:e5:8f:6b:
                    db:42:04:81:67:f3:03:27:d0:be:66:68:8b:ee:01:
                    0b:68:b4:79:6b:c9:b5:a4:e3:c5:67:ff:36:46:70:
                    ab:46:80:4e:6e:6f:a7:f6:2a:30:86:14:d6:b1:03:
                    ef:15:94:17:fe:5f:99:7b:76:fb:15:fd:1c:8a:f4:
                    d7:7b:a4:95:9b:5b:e4:b3:2b:eb:b6:05:31:86:c6:
                    f9:71:78:a2:75:bb:3f:28:f7:93:ad:f8:af:e2:2f:
                    fa:7d:f6:65:35:e4:58:ae:e2:c3:73:74:4c:bc:8c:
                    90:6b:bf:e8:41:23:bd:e2:09:57:3d:9e:b4:a6:1f:
                    49:de:b2:96:83:d3:74:f1:56:9f:53:77:d6:52:7d:
                    10:ca:d0:dd:a9:8b:60:a3:fe:a7:9c:77:1f:66:93:
                    a7:12:86:ab:92:d7:50:f7:5f:c3:ff:00:f2:dd:0a:
                    a6:6a:c1:f2:4a:90:54:69:95:d9:26:b6:25:4f:f4:
                    17:ee:b8:49:34:1f:09:40:93:ba:67:c9:f9:7d:ff:
                    50:e6:fc:00:f6:8c:cc:fe:77:22:ab:54:d4:04:35:
                    5b:30:67:f4:3d:c2:36:45:5b:f2:57:03:8a:6e:fe:
                    76:7b:73:6b:96:14:5d:34:87:ae:84:79:13:2f:fd:
                    d0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:97:16:A3:E9:A1:7F:0A:32:B0:C3:06:67:30:CC:9E:5F:35:5D:1B
            X509v3 Authority Key Identifier:
                keyid:11:56:20:5E:C7:38:0A:00:F1:0F:34:10:11:4D:04:03:57:F0:0F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EVYgXsc4CgDxDzQQEU0EA1fwD_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA7B2/3EE3235AAE9911E9AC50E17BC4F9AE02/EVYgXsc4CgDxDzQQEU0EA1fwD_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:00:12:bb:2d:c0:d6:0e:3f:35:2e:e4:75:c2:9d:1a:06:28:
         79:46:13:31:bd:5f:ed:f9:af:fd:d5:9f:be:ed:c0:94:be:00:
         0c:9a:7e:71:35:90:51:d1:eb:20:88:77:f1:7a:28:55:be:2b:
         d9:2e:4f:35:8a:1d:36:e2:06:9b:97:1f:51:b7:c6:53:36:88:
         58:6e:87:d2:8e:10:20:6b:a7:95:28:d5:20:26:66:8b:d9:59:
         96:d1:fe:c9:84:b2:16:0a:6b:bc:03:85:46:b7:30:1d:28:ea:
         af:8c:20:2b:b8:4e:bc:fd:83:33:75:b3:25:48:3f:da:20:4c:
         76:07:8c:d7:e9:ae:72:59:03:be:c3:7d:17:60:12:0e:7f:44:
         0b:26:16:b7:1c:84:69:9d:3a:7e:be:6b:30:7d:50:27:5e:38:
         aa:dd:8b:cf:df:fc:8a:96:cf:4b:2d:0f:eb:ab:34:44:12:4d:
         68:7d:57:41:a1:67:bb:7c:0b:ae:be:e2:b3:ef:80:35:db:49:
         33:fd:f2:85:2c:45:01:f7:74:4e:d2:8b:1b:dc:e4:f9:d3:94:
         be:8a:7a:09:61:4d:ff:6e:f1:48:4f:c4:1b:a3:6d:3f:22:e7:
         8f:22:b2:09:26:2e:c0:59:4f:f4:d1:5f:2f:c7:b7:ab:1e:8e:
         22:2c:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:22:27 2026 by rpki-client