Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
File:                     EvCJbho8vyUBkQAJ2YeQa6U8bME.mft (raw, json)
Hash identifier:          ms/uqbriPbTPlXif1+8gEL4JUZLuP+QulwbfqIRcB9s=
Subject key identifier:   96:C6:57:5F:05:C5:00:3D:2B:B1:2A:20:D5:7C:15:3D:5B:BF:1E:ED
Authority key identifier: 12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1
Certificate issuer:       /CN=A9153F90/serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
Manifest number:          49
Signing time:             Thu 23 Jul 2026 10:24:53 +0000
Manifest this update:     Thu 23 Jul 2026 10:24:53 +0000
Manifest next update:     Thu 30 Jul 2026 10:24:53 +0000
Files and hashes:         1: EvCJbho8vyUBkQAJ2YeQa6U8bME.crl (hash: dWXQRY9BCmJv7HolpwgvCEw9iS9DHc+HBcc5aX3Jao4=)
                          2: A1B61AAC1C3B11F1A9F167973A3D8C67.roa (hash: A3c7atco3d4E3cIrhHmLieVqgFTfi0qUJCdFz0a95To=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl
                          rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 10:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153F90, serialNumber=12F0896E1A3CBF2501910009D987906BA53C6CC1
        Validity
            Not Before: Jul 23 10:24:53 2026 GMT
            Not After : Jul 30 10:24:53 2026 GMT
        Subject: CN=6a61ebf5-2e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:37:26:2b:5e:e7:12:c4:af:9d:ff:32:e0:
                    54:9c:2f:f3:6d:f3:2e:dc:a1:c4:da:2d:ab:5f:c1:
                    a2:19:52:df:ed:67:d7:a5:93:ec:98:d8:02:23:bb:
                    e2:b9:d9:c5:9e:7a:c4:eb:f9:2b:0c:9a:11:be:d8:
                    d8:97:0b:d4:86:4a:5f:ac:ba:c7:2d:58:62:0b:47:
                    65:70:d4:85:59:6e:46:e9:e4:3f:49:5e:ea:61:06:
                    b9:0d:05:96:72:3b:81:ee:36:57:b0:a3:0d:b8:1f:
                    be:e2:2e:9e:d0:f0:fe:76:e4:e5:9b:9d:d3:26:58:
                    69:57:74:75:62:6a:75:1c:61:28:e1:4a:0c:03:d0:
                    47:ec:b4:16:23:06:f3:9a:9d:7f:4e:3e:92:58:d8:
                    b9:8b:68:e5:fe:32:49:45:68:0b:6f:15:0a:b2:cf:
                    05:22:2b:8c:5c:a8:df:da:b6:24:81:d4:e8:58:19:
                    ab:9b:6c:ec:82:db:ca:b2:90:ae:ed:fb:9a:b7:07:
                    a4:35:44:c6:ce:ee:34:4c:92:0c:23:98:55:5b:ec:
                    8d:e7:cd:9c:f1:a2:24:ae:53:8d:38:cc:9b:04:e5:
                    fb:f1:23:5a:79:a7:3b:3e:97:d8:c1:cc:dd:9b:f9:
                    71:72:00:c4:60:48:be:23:c3:5e:48:6b:5d:29:af:
                    51:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C6:57:5F:05:C5:00:3D:2B:B1:2A:20:D5:7C:15:3D:5B:BF:1E:ED
            X509v3 Authority Key Identifier:
                keyid:12:F0:89:6E:1A:3C:BF:25:01:91:00:09:D9:87:90:6B:A5:3C:6C:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EvCJbho8vyUBkQAJ2YeQa6U8bME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/01FA00721C3711F18847AB2B383D8C67/EvCJbho8vyUBkQAJ2YeQa6U8bME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:59:b5:a8:3b:c4:c3:db:88:7c:f9:cd:7f:a3:88:96:38:
         2a:72:6f:74:5d:45:17:bf:c8:2b:c9:c3:d8:dd:8f:2d:5b:f7:
         68:1c:b5:b5:34:2a:42:28:35:7b:7b:d4:4e:df:14:67:b7:e2:
         87:78:69:53:45:ee:b3:75:75:e2:77:f0:26:06:9e:c9:1b:34:
         82:97:8c:4c:a7:dc:e3:0e:7a:3e:6c:db:44:3d:ce:b5:b1:83:
         4e:4b:cf:0e:9a:e2:52:60:5d:5d:61:39:42:9b:b8:13:64:2c:
         27:e7:34:1f:8b:09:71:bd:3d:d8:e7:fc:04:84:19:e7:fc:ba:
         53:93:ca:b4:44:83:6d:f3:fd:e2:66:fb:61:91:dd:ef:70:4b:
         0c:38:24:b0:4a:82:18:d5:e5:bf:48:03:a0:5f:08:4d:cd:8e:
         04:04:37:48:fd:2a:5e:8b:44:a7:76:86:13:79:f1:ba:02:12:
         af:88:52:7d:e0:2a:86:b2:fe:69:9a:07:8a:84:7c:a1:3b:c9:
         b4:49:a1:36:ec:15:a1:30:dc:1a:f6:73:ce:70:1a:82:cf:ae:
         31:99:e1:b9:d6:f9:13:9f:76:da:7d:03:13:ab:7a:fa:a5:5d:
         8e:3e:98:0f:97:12:d7:14:f8:b7:b5:c2:32:32:f4:f1:28:05:
         b6:d1:14:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:24:08 2026 by rpki-client