Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          LRurjk4Uxc/Yx3XMhtI9p7VV6o2VFLeqvHUJkf0zHX8=
Subject key identifier:   7F:D7:E9:BF:DF:CE:03:7E:45:25:F5:37:38:A9:5C:73:0F:9C:DF:48
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          0119
Signing time:             Mon 11 May 2026 05:58:47 +0000
Manifest this update:     Mon 11 May 2026 05:58:47 +0000
Manifest next update:     Mon 18 May 2026 05:58:47 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: GLoZqvjKLRZa/3Jm9SjWXK+54nAN4cH1/p8FL9AEYeA=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: OpU18Mvs2z700dAbPWy+rw1+oGqs2hvGC4cmM9zQ/YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:58:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: May 11 05:58:47 2026 GMT
            Not After : May 18 05:58:47 2026 GMT
        Subject: CN=6a017017-e3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:fa:74:e8:57:3b:09:9b:bd:9a:88:1b:a1:
                    2f:88:fc:53:4f:35:f8:44:e4:91:e4:64:fa:bb:95:
                    cd:55:4d:ef:11:2c:39:7a:05:95:e1:aa:6d:f6:45:
                    04:f8:d5:3d:c2:95:d4:ac:d9:c3:60:82:4a:fd:36:
                    af:d2:a4:56:17:f1:ee:a1:44:70:ac:9a:bf:9c:41:
                    d5:91:fd:66:48:a0:9d:49:6e:3b:d1:9b:f0:e5:4c:
                    ac:1f:d6:02:31:5c:ab:48:9e:6b:2e:7d:4f:b5:d3:
                    12:f7:79:dd:cd:58:d0:2f:a1:25:5a:7c:93:50:9f:
                    95:6a:80:c7:a3:a1:84:1e:c7:c0:c6:1e:a3:58:9e:
                    06:bc:5c:63:37:a6:32:5b:53:3c:d6:6d:dd:47:27:
                    2f:ba:df:f6:ea:b7:44:6e:21:e6:a3:3c:3d:cb:e0:
                    cf:92:da:64:fd:e2:aa:57:64:05:33:4f:8a:ad:70:
                    9a:c2:75:df:06:4d:3e:19:41:8c:2a:7f:8a:2d:21:
                    64:17:aa:05:2e:9f:b2:dc:44:f7:c9:d7:5a:24:c5:
                    05:40:a3:57:f0:a7:f4:ed:a8:b5:27:20:6e:87:16:
                    92:21:01:9c:b8:57:6b:af:b2:33:96:2d:90:6c:21:
                    db:71:57:71:33:5e:46:d5:d3:3e:c8:b1:9d:53:a2:
                    ef:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D7:E9:BF:DF:CE:03:7E:45:25:F5:37:38:A9:5C:73:0F:9C:DF:48
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ad:cb:6f:9f:f5:a5:a9:7c:3f:a1:92:32:c7:96:d3:a5:ad:
         43:66:64:da:f9:47:e9:f5:d9:13:89:84:ae:33:bd:07:bd:5d:
         d8:13:c8:54:78:12:98:e7:2b:20:40:12:10:be:8f:1d:f5:42:
         2d:7f:73:b9:c5:62:43:de:0c:b9:6f:ca:ba:66:c2:77:2e:17:
         ac:c6:ab:03:1b:90:3b:4d:bc:f3:09:cc:bc:2c:90:4f:a9:37:
         d5:99:a2:9d:b7:e3:3a:8b:96:e1:6f:03:6a:7b:3d:1e:13:d8:
         90:79:c4:af:6b:29:fa:80:76:89:58:67:2e:12:37:c5:f3:55:
         91:54:2c:87:52:e4:c5:70:47:25:b5:22:9a:63:d5:6c:2f:08:
         25:a5:52:dc:0d:6d:91:09:3c:df:3d:33:ba:09:a6:62:57:45:
         6e:d5:9a:2f:b3:2f:cd:71:6b:dd:75:bf:03:0e:54:37:73:8d:
         9a:6e:75:3b:b8:a4:d2:3c:2c:c0:7c:12:50:3c:ca:23:e1:18:
         ca:f4:20:d5:88:12:d4:8f:8a:4f:91:40:74:bc:07:65:a0:59:
         90:1f:cd:64:7e:ba:d2:ff:14:9e:2b:d2:7d:c3:28:60:67:fb:
         83:6b:bf:be:d9:c3:0a:49:6d:9e:65:29:49:6a:37:d8:41:ac:
         0e:aa:5a:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE5MkMxMTAvBgNVBAUTKDc5MjY4MzgwNkM4QkUzQUMxMzYxNEQzNzVFOTAxOTI3
NDA5OUJDN0IwHhcNMjYwNTExMDU1ODQ3WhcNMjYwNTE4MDU1ODQ3WjAYMRYwFAYD
VQQDEw02YTAxNzAxNy1lM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoUj6dOhXOwmbvZqIG6EviPxTTzX4ROSR5GT6u5XNVU3vESw5egWV4apt9kUE
+NU9wpXUrNnDYIJK/Tav0qRWF/HuoURwrJq/nEHVkf1mSKCdSW470Zvw5UysH9YC
MVyrSJ5rLn1PtdMS93ndzVjQL6ElWnyTUJ+VaoDHo6GEHsfAxh6jWJ4GvFxjN6Yy
W1M81m3dRycvut/26rdEbiHmozw9y+DPktpk/eKqV2QFM0+KrXCawnXfBk0+GUGM
Kn+KLSFkF6oFLp+y3ET3yddaJMUFQKNX8Kf07ai1JyBuhxaSIQGcuFdrr7Izli2Q
bCHbcVdxM15G1dM+yLGdU6LvaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/X6b/f
zgN+RSX1NzipXHMPnN9IMB8GA1UdIwQYMBaAFHkmg4Bsi+OsE2FNN16QGSdAmbx7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTkyQy9BNTI4MTREMkE2
MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi9lU2FEZ0d5TDQ2d1RZVTAzWHBBWkowQ1p2
SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VTYURnR3lMNDZ3VFlVMDNYcEFaSjBDWnZIcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTkyQy9BNTI4MTREMkE2MEUxMUVGQTY4QTZDMUJDNEY5QUUwMi9lU2FEZ0d5TDQ2
d1RZVTAzWHBBWkowQ1p2SHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASa3Lb5/1pal8P6GSMseW06WtQ2Zk2vlH6fXZE4mErjO9B71d2BPIVHgSmOcr
IEASEL6PHfVCLX9zucViQ94MuW/KumbCdy4XrMarAxuQO0288wnMvCyQT6k31Zmi
nbfjOouW4W8Dans9HhPYkHnEr2sp+oB2iVhnLhI3xfNVkVQsh1LkxXBHJbUimmPV
bC8IJaVS3A1tkQk83z0zugmmYldFbtWaL7MvzXFr3XW/Aw5UN3ONmm51O7ik0jws
wHwSUDzKI+EYyvQg1YgS1I+KT5FAdLwHZaBZkB/NZH660v8UnivSfcMoYGf7g2u/
vtnDCkltnmUpSWo32EGsDqpanw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:19:57 2026 by rpki-client