Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File:                     epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier:          /SKN1kKJRtqrY6QxHCX+WGeBX4Xi8JdlWzr5nOovB+o=
Subject key identifier:   43:71:C5:B5:21:C5:13:5C:60:4F:38:DA:8A:C4:03:77:B6:AE:16:72
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       35E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number:          359A
Signing time:             Wed 22 Jul 2026 14:23:05 +0000
Manifest this update:     Wed 22 Jul 2026 14:23:05 +0000
Manifest next update:     Wed 29 Jul 2026 14:23:05 +0000
Files and hashes:         1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: QuQkhToNmOFAev2K69FTbRwKDuk8xZcOh8XW2cwg7HM=)
                          2: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: VXO5/U8cHHCFaikukuqO1qnp6nbKhmKzeuFoVz0LqaU=)
                          3: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: qiT/GVvRCXwwQO5czxfwtuP70nIiPr4STQfaVH+7UL0=)
                          4: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: CWD+yCy6yNtHR/CgsSdRActZ6Gz+ygW0qqlW1BWQfN0=)
                          5: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: c5BWjsV+5qy4Czn1fNB7N39xouqCRvW12ZZgXgS4ZDQ=)
                          6: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: izVvMKnosN85WDCwiZeSTea3usmMiFXGuieIuV+2wlI=)
                          7: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: Im+A1kygYXCcmKM1N88CQpYfMfI1pkZXcprVNJAgc7Y=)
                          8: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: ledywzn44AtfNdf65irkSbejoe2qe67kQVSrxPSpLj8=)
                          9: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: BJoCud12RqYU139X5Hg1YEdiSoJoBorro9yFYj7EiQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13798 (0x35e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 22 14:23:05 2026 GMT
            Not After : Jul 29 14:23:05 2026 GMT
        Subject: CN=6a60d249-444e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:05:e4:8d:f7:5b:28:d9:8d:58:be:de:c7:
                    d1:37:f0:8c:c8:81:0d:4a:09:28:a1:cd:b1:55:1d:
                    5f:d7:9b:a3:01:97:dd:a9:37:80:f2:a8:1c:9b:70:
                    04:09:4c:bc:c3:3c:49:6f:fe:4a:41:9c:e2:6d:73:
                    75:89:28:c4:fb:79:d6:05:49:3f:9f:e0:e1:9f:84:
                    51:fc:f9:87:e2:2a:32:94:4d:74:f0:ef:91:0e:5c:
                    c8:6d:5e:57:77:92:f2:fd:0d:27:2f:df:c0:60:b3:
                    77:2f:0b:cf:0f:c0:8d:fa:05:d7:47:6d:69:ce:4c:
                    77:bf:5d:d8:3c:30:86:9b:d0:e1:10:e9:df:2e:1b:
                    1a:eb:eb:1a:db:ad:55:81:8f:fb:3e:c2:79:b7:3f:
                    4a:88:ba:ad:5f:d8:eb:2c:97:4a:b6:f1:ab:78:39:
                    3b:8a:42:3e:63:79:11:75:f1:47:c8:b3:e8:93:ab:
                    16:f0:7a:45:43:4b:50:5c:97:a7:62:34:92:5f:aa:
                    e2:5e:8b:47:f8:35:20:2a:85:4a:59:9b:91:bf:25:
                    0b:eb:02:38:83:7e:00:b3:94:3b:5c:ea:76:a0:cb:
                    f7:3f:9c:49:7b:ea:90:d7:29:ca:ef:12:d1:5a:4d:
                    af:c2:20:04:68:2a:e4:39:8f:27:c6:ed:8f:fe:f9:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:C5:B5:21:C5:13:5C:60:4F:38:DA:8A:C4:03:77:B6:AE:16:72
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:64:49:66:97:86:e9:11:2d:07:fc:51:22:b4:b2:20:68:10:
         80:b4:95:28:ca:fb:b0:09:7a:aa:ea:f3:71:ad:2b:a5:b4:ac:
         dd:d7:7e:0f:3d:ea:dc:3c:57:1d:73:80:18:63:68:c2:dd:d3:
         2b:e5:b9:e2:47:e7:c6:c7:fb:d6:5c:c1:1f:3a:73:32:c5:fd:
         a3:c1:b6:a7:da:09:8c:e5:6b:ee:a4:79:0c:3e:78:03:81:0c:
         57:c0:d9:6a:3e:6d:bc:84:3c:fa:61:23:db:05:b1:39:e0:8b:
         67:b3:b6:fa:bc:e1:37:1d:86:71:b1:eb:85:a1:6e:02:93:8b:
         86:b7:cc:1e:86:df:98:d5:8b:cb:0c:1d:b2:18:cb:0e:ca:67:
         46:75:41:33:a5:c7:fa:1f:15:02:78:dd:82:65:b4:69:9c:e7:
         09:ae:7a:87:a3:0b:43:1f:50:5f:6a:bc:9b:4b:82:b4:e7:93:
         28:a2:f5:b0:9d:49:90:36:f9:3f:7e:a7:18:d4:f7:11:fa:8a:
         d5:b5:82:33:2c:3c:15:72:33:4c:56:a6:f5:11:a9:3b:e5:fd:
         72:d8:a8:f3:be:a4:67:e6:64:26:a1:29:8f:8a:50:b4:1f:72:
         06:5e:f2:ee:1b:c0:ae:3a:fe:42:90:a1:88:bf:03:44:64:47:
         35:01:a3:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjYwNzIyMTQyMzA1WhcNMjYwNzI5MTQyMzA1WjAYMRYwFAYD
VQQDEw02YTYwZDI0OS00NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvDAF5I33WyjZjVi+3sfRN/CMyIENSgkooc2xVR1f15ujAZfdqTeA8qgcm3AE
CUy8wzxJb/5KQZzibXN1iSjE+3nWBUk/n+Dhn4RR/PmH4ioylE108O+RDlzIbV5X
d5Ly/Q0nL9/AYLN3LwvPD8CN+gXXR21pzkx3v13YPDCGm9DhEOnfLhsa6+sa261V
gY/7PsJ5tz9KiLqtX9jrLJdKtvGreDk7ikI+Y3kRdfFHyLPok6sW8HpFQ0tQXJen
YjSSX6riXotH+DUgKoVKWZuRvyUL6wI4g34As5Q7XOp2oMv3P5xJe+qQ1ynK7xLR
Wk2vwiAEaCrkOY8nxu2P/vkPGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFENxxbUh
xRNcYE842orEA3e2rhZyMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx
MEttX21TVm9PNjczTTZMeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASGRJZpeG6REtB/xRIrSyIGgQgLSVKMr7sAl6qurzca0rpbSs3dd+Dz3q3DxX
HXOAGGNowt3TK+W54kfnxsf71lzBHzpzMsX9o8G2p9oJjOVr7qR5DD54A4EMV8DZ
aj5tvIQ8+mEj2wWxOeCLZ7O2+rzhNx2GcbHrhaFuApOLhrfMHobfmNWLywwdshjL
DspnRnVBM6XH+h8VAnjdgmW0aZznCa56h6MLQx9QX2q8m0uCtOeTKKL1sJ1JkDb5
P36nGNT3EfqK1bWCMyw8FXIzTFam9RGpO+X9ctio876kZ+ZkJqEpj4pQtB9yBl7y
7hvArjr+QpChiL8DRGRHNQGjmw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:25 2026 by rpki-client