Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
File:                     eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft (raw, json)
Hash identifier:          FKTEcuFeH7VUfk5SmzJbyERcMvMRqCe7j7iZVD3kaCg=
Subject key identifier:   3A:C3:FA:0D:2C:0B:73:4E:A9:AE:5B:67:F2:27:25:7E:98:89:86:F6
Authority key identifier: 78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2
Certificate issuer:       /CN=A914BFE5/serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
Certificate serial:       0909
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
Manifest number:          08E6
Signing time:             Wed 22 Jul 2026 20:51:25 +0000
Manifest this update:     Wed 22 Jul 2026 20:51:25 +0000
Manifest next update:     Wed 29 Jul 2026 20:51:25 +0000
Files and hashes:         1: eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl (hash: aDxvbDYE767wh7YZ6K7sqE+Jk5uksoCWl1603P/FV/c=)
                          2: 93FE3B60220111EE8E5D8D0FC4F9AE02.roa (hash: cJfzdxVNCRGQQr7NwQRxvNVS78tppuu9mzDc8jjC650=)
                          3: 58A9026623AD11EBB858645DC4F9AE02.roa (hash: DpnrDLtmUYXL+QS+EesHCO03r/B2g7JpvqZf7zraP80=)
                          4: C5639A24E0F511EABB96D531C4F9AE02.roa (hash: 4WRaKk2cTpYFo/oZ1tSpXVomBfLw7g63zvt2u39jxhQ=)
                          5: C664689AE0F511EABB96D531C4F9AE02.roa (hash: e7xh0EsycLj4xWIjRzWHI3/y4rIpItug3rbcYHWwZyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl
                          rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 20:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BFE5, serialNumber=78A9977FFB47AF3EC1E946BC10F81376949EBEC2
        Validity
            Not Before: Jul 22 20:51:25 2026 GMT
            Not After : Jul 29 20:51:25 2026 GMT
        Subject: CN=6a612d4d-c4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:d5:48:c9:ed:a9:95:c2:8f:fb:6f:be:cc:
                    ab:fa:78:68:18:ee:73:d5:c9:8e:aa:22:63:81:7d:
                    b3:11:9d:28:30:a7:f4:6c:b0:f7:9c:ed:73:be:2d:
                    e9:7e:f0:dc:e2:55:dd:96:00:02:74:1d:84:74:57:
                    3a:cb:d9:d2:26:c5:23:67:33:5b:9b:0f:82:e2:c2:
                    cd:3c:17:b6:c2:a9:64:5b:29:5f:4c:d1:7e:f4:6f:
                    c8:4b:ab:e0:93:30:4b:27:1a:7e:c4:48:ed:a0:98:
                    33:41:c4:be:6e:32:3f:bb:22:a2:1e:e7:5e:4d:49:
                    34:7e:10:0d:ab:b5:3d:50:ff:51:18:8a:65:b2:1c:
                    1c:8b:82:9e:60:9b:ac:bd:62:38:d2:72:a8:80:4a:
                    66:40:a6:2f:01:7b:0c:12:e2:39:a9:3d:f5:62:5f:
                    f9:2d:c7:71:10:bc:cb:7b:b4:75:c7:f7:ee:a8:23:
                    d7:46:79:20:ed:06:80:ab:82:42:f8:90:92:c9:ee:
                    34:f1:ab:ed:04:2d:ad:81:aa:4f:9d:e3:73:56:e0:
                    86:46:9a:07:dd:cb:be:fa:ed:9e:43:32:eb:d7:12:
                    87:30:06:1b:34:ec:a0:a1:6e:ec:53:5c:04:94:38:
                    f7:cc:7f:db:49:22:a2:e7:2b:37:d4:a4:00:7e:61:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C3:FA:0D:2C:0B:73:4E:A9:AE:5B:67:F2:27:25:7E:98:89:86:F6
            X509v3 Authority Key Identifier:
                keyid:78:A9:97:7F:FB:47:AF:3E:C1:E9:46:BC:10:F8:13:76:94:9E:BE:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKmXf_tHrz7B6Ua8EPgTdpSevsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BFE5/9DAF486EDDEB11EAB30ED921C4F9AE02/eKmXf_tHrz7B6Ua8EPgTdpSevsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:19:7d:e3:16:99:b1:d0:b1:6e:a4:e0:ff:2a:21:0f:d3:
         d5:f3:10:57:91:95:29:54:2b:09:45:91:c2:16:40:d2:87:61:
         98:f2:e6:32:7e:0e:b3:ca:4a:e2:51:ab:4b:17:0d:ea:2d:3c:
         48:71:a7:05:de:47:e3:15:b3:6f:3c:94:d6:c0:4c:65:e2:46:
         e9:99:96:ce:24:ca:2b:65:16:06:ea:9d:c7:c1:28:54:39:bc:
         f0:d0:3b:14:26:3b:df:1f:73:1b:da:d4:0f:9e:39:12:db:c3:
         0e:31:04:54:ad:3e:26:85:f3:54:fb:e7:57:02:a5:78:bb:05:
         9c:6a:cb:cc:11:ad:80:2d:87:7f:dc:36:29:a3:29:2c:ef:4f:
         59:3a:41:ef:e0:9b:b7:30:8b:b5:95:8a:df:05:a2:ec:47:76:
         72:82:19:72:1a:b2:c3:3f:5b:84:32:21:ac:f9:03:1d:96:fd:
         08:4a:87:2b:c3:d3:d7:59:1d:a0:1f:bb:89:01:a7:63:c0:ae:
         53:e1:73:bc:c5:bc:f4:15:95:af:89:86:11:96:1d:b3:76:0f:
         ae:18:09:81:ed:b5:1d:b3:4f:a3:bc:2f:b5:c7:8e:95:04:18:
         92:20:7f:bd:3f:96:bf:f5:ea:be:94:00:14:4f:79:dd:c6:9d:
         f5:54:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:18 2026 by rpki-client