Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
File:                     eiygmoVxKbGAQoJJIxJDPat15sI.mft (raw, json)
Hash identifier:          K31uGLv2xIFnGW+FkFWHE/7s23SBhwf6zRRC3DJKTDk=
Subject key identifier:   4B:81:BC:BE:B4:5D:B9:F7:54:26:47:F9:FA:16:FA:A9:1A:81:B2:09
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       02AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
Manifest number:          0297
Signing time:             Wed 13 May 2026 01:45:33 +0000
Manifest this update:     Wed 13 May 2026 01:45:32 +0000
Manifest next update:     Wed 20 May 2026 01:45:32 +0000
Files and hashes:         1: eiygmoVxKbGAQoJJIxJDPat15sI.crl (hash: KTCzXwNRhPuD6ozWx6YZ5747vuBI69FRcMrDjDOgF5Y=)
                          2: ECDFCD86656711EDBED7F511C4F9AE02.roa (hash: 8IACVOF1lhPTJN0lhLFFp1SWYA6BHv6zLt1gxO2Ww3k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: May 13 01:45:32 2026 GMT
            Not After : May 20 01:45:32 2026 GMT
        Subject: CN=6a03d7bc-9e9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:b6:c0:3c:ac:fd:f2:79:87:9e:39:1f:f2:
                    57:e0:f5:6d:78:9d:23:cc:9d:94:e7:9e:fa:0f:9c:
                    20:55:b2:2c:21:4d:44:02:04:a1:a9:97:4b:ee:67:
                    76:ed:09:4c:ee:d6:b4:60:5e:8c:52:51:a3:f7:b5:
                    a3:60:aa:c3:84:88:cb:ea:a2:2a:76:01:41:4d:ab:
                    69:a5:bb:de:3b:7f:50:4d:f5:28:78:81:35:bb:c7:
                    b1:ea:b7:2f:03:44:5a:65:5a:c5:0e:3b:1a:d9:2d:
                    25:a7:1d:3a:c5:16:93:5f:a7:c1:b9:ae:b5:02:a1:
                    aa:75:fa:9c:9b:4c:ae:16:27:ca:84:d7:04:59:a8:
                    77:47:ea:3e:71:0d:b3:48:a4:37:c1:e9:b7:39:3e:
                    ba:b8:29:2d:a2:7a:21:4a:72:ca:24:4b:d0:73:d6:
                    9c:54:be:59:b3:1c:68:85:75:38:c3:59:ef:7c:8c:
                    dc:09:c8:dd:6a:6c:35:78:4d:ab:52:e9:76:83:2e:
                    9c:f1:aa:43:de:a2:89:c0:d4:d6:2b:53:f7:86:d5:
                    cd:68:08:56:3f:14:97:c6:14:99:30:5e:a8:c0:16:
                    bb:a6:4b:79:04:82:4b:95:c9:53:e9:aa:de:c3:c9:
                    99:56:de:d1:61:63:65:c6:20:0a:a7:0e:b8:4c:0f:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:81:BC:BE:B4:5D:B9:F7:54:26:47:F9:FA:16:FA:A9:1A:81:B2:09
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1c:b0:4b:b8:9b:8b:67:12:00:ca:83:13:1b:b1:21:28:34:
         04:74:ad:13:be:21:c2:73:8d:b0:0a:86:62:9f:c5:a0:4e:2d:
         55:bb:b0:b5:63:59:b4:e6:11:46:3c:da:ae:b0:4e:c4:b8:96:
         25:50:c3:84:66:4b:74:c5:e4:f7:d0:4d:94:4b:e3:4e:94:51:
         e6:35:85:84:d5:f8:76:5d:de:28:4f:37:e5:4f:0d:a6:38:c1:
         b5:f6:e7:e4:d3:d9:59:e4:e7:e9:47:90:a1:72:1a:b1:50:7c:
         03:8c:d0:13:fc:65:dc:0f:b4:3e:87:d5:fd:2c:b8:f0:d6:44:
         bb:58:89:81:cc:c3:81:cc:83:19:b5:5d:3b:1a:f1:20:ad:82:
         50:25:42:df:a6:fb:d8:c7:d7:13:d4:5b:99:7b:ab:09:29:93:
         da:44:02:07:e9:42:9a:24:97:cd:a2:fe:39:aa:f3:28:0b:b0:
         0d:06:db:27:f2:5f:9f:73:99:84:70:45:d0:dd:f6:be:c3:91:
         ab:ac:87:c4:d2:70:bf:0a:bc:4e:88:d6:b6:7e:4f:1e:28:fc:
         19:66:f4:6e:5c:3a:e7:2a:38:de:85:ec:c9:61:bd:97:6a:06:
         53:a4:e9:66:b0:ee:cf:c8:de:6c:c0:8a:26:c1:bd:85:5f:d3:
         55:69:bb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:39 2026 by rpki-client