Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
File:                     EkcIHpupfBPH3T1o5EPR9UebKv8.mft (raw, json)
Hash identifier:          MHCi1N2eUKnman810Q0hiPxR3BIZnWZJ0kTrZXKaU8A=
Subject key identifier:   76:BE:66:CA:C0:E3:95:B6:B4:3A:E2:3D:52:9F:D7:18:9C:A2:09:D1
Authority key identifier: 12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF
Certificate issuer:       /CN=A91396E7/serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
Certificate serial:       0150
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
Manifest number:          014A
Signing time:             Thu 23 Jul 2026 06:53:19 +0000
Manifest this update:     Thu 23 Jul 2026 06:53:18 +0000
Manifest next update:     Thu 30 Jul 2026 06:53:18 +0000
Files and hashes:         1: EkcIHpupfBPH3T1o5EPR9UebKv8.crl (hash: 69Ic+l0PekoAo5p3xl9i8NMUghHzaiF/2XqGLNH5/3o=)
                          2: A1CF550A912511EF8FF0813AC4F9AE02.roa (hash: rVa/wWPzr3OwQnrIVB/RLkiVW7fhkqdwgET1KnDvQTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl
                          rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91396E7, serialNumber=1247081E9BA97C13C7DD3D68E443D1F5479B2AFF
        Validity
            Not Before: Jul 23 06:53:18 2026 GMT
            Not After : Jul 30 06:53:18 2026 GMT
        Subject: CN=6a61ba5f-9cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:81:2c:35:6e:23:dc:e9:9d:97:ab:09:ed:
                    de:4a:1e:37:f2:c3:78:a6:da:7d:c7:d2:d9:35:fe:
                    7e:43:cf:e8:39:1a:1d:af:bf:6b:4e:ce:fb:9a:49:
                    da:91:be:5c:4a:5c:6b:75:3d:bd:c7:7e:70:4d:50:
                    23:8b:15:e8:84:aa:56:9e:d1:60:a3:a3:ce:b7:bd:
                    1e:73:6c:7e:d3:de:64:f0:4e:10:75:d2:f7:e5:82:
                    fb:91:ce:4e:e1:81:8f:f3:0b:58:ab:02:a6:5d:79:
                    0f:75:0d:e9:e3:30:ac:93:77:2a:60:56:ad:bb:52:
                    79:e5:1a:f0:db:bb:10:ef:6c:4e:c4:14:20:c8:f1:
                    80:df:e8:ee:b2:0f:53:65:bc:1a:41:4d:a1:2c:f3:
                    74:dc:c8:f9:18:b2:26:fb:aa:26:e7:4e:24:87:db:
                    90:52:3d:12:e1:6f:fd:51:71:b0:ca:44:c8:e2:bf:
                    d2:97:6b:e7:67:8f:94:c8:5a:d8:f7:ee:29:0e:3e:
                    f1:ce:13:b6:1a:82:19:10:dc:0a:e5:49:91:06:4c:
                    86:74:23:a1:7a:25:c6:b4:c0:76:2e:fb:ab:26:7e:
                    9f:95:ae:b0:31:b6:1d:2a:df:ff:d8:1c:09:33:73:
                    1d:27:4a:1e:20:86:f3:6a:cf:56:b2:9e:af:ae:b4:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BE:66:CA:C0:E3:95:B6:B4:3A:E2:3D:52:9F:D7:18:9C:A2:09:D1
            X509v3 Authority Key Identifier:
                keyid:12:47:08:1E:9B:A9:7C:13:C7:DD:3D:68:E4:43:D1:F5:47:9B:2A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EkcIHpupfBPH3T1o5EPR9UebKv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91396E7/0679ACF4912511EF942A2B28C4F9AE02/EkcIHpupfBPH3T1o5EPR9UebKv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:38:72:b1:d4:1d:b8:c8:db:37:ca:cd:e2:e3:11:3a:06:ee:
         e0:47:8a:33:cc:e4:dd:68:56:14:25:d0:48:e2:bf:47:0c:68:
         63:40:15:72:26:ac:84:57:f2:cd:cb:41:28:e2:de:eb:18:c2:
         0d:8b:fa:e6:49:35:8b:81:89:85:fa:6b:ff:c7:00:73:21:1f:
         62:0a:23:3f:fe:1e:71:15:24:03:19:1d:14:ff:cb:40:07:e3:
         81:76:99:66:d7:2e:94:2d:62:92:84:80:82:25:a0:91:25:32:
         58:03:c4:49:d9:b2:c6:51:c2:93:3a:0a:22:ca:02:06:0e:13:
         57:65:37:c4:67:d1:49:5f:4e:d3:38:1a:4c:f0:97:49:5c:d6:
         52:72:30:77:18:1f:c7:64:5a:55:e3:d6:1e:31:49:89:02:d2:
         5e:f0:64:dd:5f:31:8a:5e:93:66:d5:5d:26:ed:47:ae:af:f3:
         7e:a1:6f:81:ba:d4:70:b9:5a:a8:a5:e9:4a:f1:c0:3c:75:61:
         cd:b6:b9:53:90:33:d9:a2:94:b1:da:ac:5d:5e:13:d8:a5:b8:
         ac:34:e3:d4:59:29:c7:a2:ce:98:a3:71:58:85:5c:31:93:64:
         34:ad:af:4f:78:b5:f0:71:5e:3c:5c:86:4b:34:28:1f:a4:39:
         c6:9a:f0:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzk2RTcxMTAvBgNVBAUTKDEyNDcwODFFOUJBOTdDMTNDN0REM0Q2OEU0NDNEMUY1
NDc5QjJBRkYwHhcNMjYwNzIzMDY1MzE4WhcNMjYwNzMwMDY1MzE4WjAYMRYwFAYD
VQQDEw02YTYxYmE1Zi05Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlI2BLDVuI9zpnZerCe3eSh438sN4ptp9x9LZNf5+Q8/oORodr79rTs77mkna
kb5cSlxrdT29x35wTVAjixXohKpWntFgo6POt70ec2x+095k8E4QddL35YL7kc5O
4YGP8wtYqwKmXXkPdQ3p4zCsk3cqYFatu1J55Rrw27sQ72xOxBQgyPGA3+jusg9T
ZbwaQU2hLPN03Mj5GLIm+6om504kh9uQUj0S4W/9UXGwykTI4r/Sl2vnZ4+UyFrY
9+4pDj7xzhO2GoIZENwK5UmRBkyGdCOheiXGtMB2LvurJn6fla6wMbYdKt//2BwJ
M3MdJ0oeIIbzas9Wsp6vrrS0DQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHa+ZsrA
45W2tDriPVKf1xicognRMB8GA1UdIwQYMBaAFBJHCB6bqXwTx909aORD0fVHmyr/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTZFNy8wNjc5QUNGNDkx
MjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZCUEgzVDFvNUVQUjlVZWJL
djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0VrY0lIcHVwZkJQSDNUMW81RVBSOVVlYkt2OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
OTZFNy8wNjc5QUNGNDkxMjUxMUVGOTQyQTJCMjhDNEY5QUUwMi9Fa2NJSHB1cGZC
UEgzVDFvNUVQUjlVZWJLdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwzhysdQduMjbN8rN4uMROgbu4EeKM8zk3WhWFCXQSOK/RwxoY0AVciashFfy
zctBKOLe6xjCDYv65kk1i4GJhfpr/8cAcyEfYgojP/4ecRUkAxkdFP/LQAfjgXaZ
ZtculC1ikoSAgiWgkSUyWAPESdmyxlHCkzoKIsoCBg4TV2U3xGfRSV9O0zgaTPCX
SVzWUnIwdxgfx2RaVePWHjFJiQLSXvBk3V8xil6TZtVdJu1Hrq/zfqFvgbrUcLla
qKXpSvHAPHVhzba5U5Az2aKUsdqsXV4T2KW4rDTj1Fkpx6LOmKNxWIVcMZNkNK2v
T3i18HFePFyGSzQoH6Q5xprwQw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:06 2026 by rpki-client