Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
File:                     ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft (raw, json)
Hash identifier:          orqh5+lLOWg12Iabtvn4j8HwPlBqrhbgOvKY6uTVxc8=
Subject key identifier:   65:66:E1:0E:95:2E:53:78:10:54:B1:54:B2:51:D7:F9:8E:60:03:B3
Authority key identifier: 7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04
Certificate issuer:       /CN=A915E18D/serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
Certificate serial:       07EE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
Manifest number:          07E4
Signing time:             Tue 24 Mar 2026 21:02:58 +0000
Manifest this update:     Tue 24 Mar 2026 21:02:57 +0000
Manifest next update:     Tue 31 Mar 2026 21:02:57 +0000
Files and hashes:         1: ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl (hash: MwM2dO4GJI8C826OPwOi+k4L+r5xmmfy1BEABzvAv/E=)
                          2: FFCBC5B4819B11EBA2616775C4F9AE02.roa (hash: y4q14mf6OHIEbk9YOEeNb2LUtltwDw2ZCHJ+tX6RWCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl
                          rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 21:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E18D, serialNumber=7B2F95CE6FDC2531BBCA3E53C1D6ED1BA2AA3604
        Validity
            Not Before: Mar 24 21:02:57 2026 GMT
            Not After : Mar 31 21:02:57 2026 GMT
        Subject: CN=69c2fc02-ccaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:c4:79:72:45:ca:50:df:01:99:9b:db:64:
                    94:6e:e7:e2:36:28:fc:16:f4:b5:0c:6c:f8:3b:ea:
                    2a:f8:e8:c9:04:39:a4:bf:28:33:46:e8:f3:27:84:
                    7a:fe:f6:a2:4c:84:00:c3:f7:5b:50:98:84:f5:e9:
                    85:0a:30:0a:13:76:a3:86:64:5d:72:ee:75:50:0e:
                    50:52:e8:c0:73:1b:41:37:0f:0b:fb:03:ea:e6:0e:
                    c4:e5:24:b3:69:55:39:0c:67:27:62:6a:c2:07:0b:
                    8d:26:d3:90:e3:f2:43:25:0c:b3:b9:ff:ae:ab:54:
                    ad:e9:48:6f:73:09:17:91:d9:4c:64:70:a2:f1:9a:
                    d6:69:0a:99:73:38:dd:c9:4f:77:06:ff:4c:05:19:
                    b2:36:97:ee:e2:87:97:31:ff:3c:ef:1e:96:20:ba:
                    bb:51:b0:b2:17:46:7d:64:8a:1f:d9:21:51:e2:4e:
                    a3:a9:a6:0f:2f:61:41:6f:1b:0b:1f:02:d4:43:b7:
                    02:f9:99:21:f6:dd:8f:44:38:c4:30:98:98:0d:81:
                    b3:19:4f:4f:ae:4c:eb:6e:f6:f7:08:8e:9a:58:7b:
                    24:f1:a8:e4:d0:b8:97:1d:a3:60:c6:29:2f:2c:f7:
                    be:68:a2:6e:fc:fc:ec:aa:6f:6b:76:07:8d:2b:b6:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:E1:0E:95:2E:53:78:10:54:B1:54:B2:51:D7:F9:8E:60:03:B3
            X509v3 Authority Key Identifier:
                keyid:7B:2F:95:CE:6F:DC:25:31:BB:CA:3E:53:C1:D6:ED:1B:A2:AA:36:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E18D/70015C422AE211EBBBFC4F0AC4F9AE02/ey-Vzm_cJTG7yj5TwdbtG6KqNgQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:52:ca:a8:66:d1:c9:d8:14:94:e5:23:6f:f0:f6:88:9b:35:
         39:b1:5e:b8:28:26:a0:3f:7f:af:19:a7:6f:a9:ad:45:6f:bd:
         7e:dc:aa:1e:e3:b2:1f:33:52:b2:ee:80:90:0e:34:17:1b:16:
         86:94:46:47:e7:0d:60:93:a5:cd:6e:03:da:bd:13:99:6a:a3:
         ad:a9:61:ed:c6:f8:dc:43:95:37:e1:e7:ac:c5:81:fb:ea:c5:
         15:c3:75:24:a0:cc:78:cf:c7:33:98:83:4c:18:ae:dc:fd:07:
         cd:07:f6:6e:fc:26:4f:00:e9:9f:97:53:76:89:66:54:cb:87:
         54:c8:21:fb:14:28:c8:7d:dd:4e:00:a0:2b:54:fb:77:65:f1:
         a6:0f:f1:f1:08:6d:30:f1:f3:bd:9a:50:b7:d3:9b:7a:44:ea:
         fd:93:92:c6:2a:18:e4:ee:a7:81:be:04:df:9b:90:d6:64:ac:
         dd:56:de:a3:4e:9a:43:01:42:e5:dc:a9:f6:54:9f:c9:28:af:
         1c:53:3c:c5:33:e9:0f:33:7f:a0:5d:e3:72:88:fb:cf:4a:46:
         01:e0:2c:6f:78:ce:94:91:51:8c:db:09:d3:c1:c4:47:31:89:
         e5:ce:ab:7f:7b:8e:c1:88:b1:f7:85:8b:6c:ee:cf:ac:57:ae:
         fc:2c:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:40 2026 by rpki-client