Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File:                     iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier:          T1R7RCun0dsLh69G4OFqezulNiCkR2yljb2bIsL8JYI=
Subject key identifier:   C7:99:2C:25:46:1E:30:31:FF:0F:0B:B6:81:B0:FF:B2:4F:82:2E:D6
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer:       /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial:       01EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number:          01E5
Signing time:             Wed 25 Mar 2026 02:47:02 +0000
Manifest this update:     Wed 25 Mar 2026 02:47:02 +0000
Manifest next update:     Wed 01 Apr 2026 02:47:02 +0000
Files and hashes:         1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: q8lVvv6CuT6NTz1wVBwMFtt+GXNXsxayCEg6V+CrKdM=)
                          2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: hqi4EfEByf7DRDdVKKEhuybFmu2vxbKyTHgj9BM/DRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
                          rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
        Validity
            Not Before: Mar 25 02:47:02 2026 GMT
            Not After : Apr  1 02:47:02 2026 GMT
        Subject: CN=69c34ca6-716b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:18:a8:55:05:67:67:ee:69:eb:dc:a7:48:
                    cc:f6:94:db:0f:0d:6f:6b:57:c0:83:c0:2a:23:44:
                    28:89:62:f9:fd:25:f1:92:79:25:24:07:7b:fa:d1:
                    95:f5:d3:24:1d:e9:76:e7:50:52:04:15:66:cb:30:
                    e5:ed:1d:28:bc:c7:6c:74:ce:f6:2a:78:a3:cd:04:
                    b7:70:3b:8d:01:02:28:04:09:8c:7a:d8:3d:63:bd:
                    b4:c2:15:7f:1d:74:03:4d:92:6f:2c:3e:d4:b6:8b:
                    c7:01:19:ba:f5:4a:29:5f:3a:00:3e:28:2c:e6:89:
                    7d:71:b6:78:9b:2a:ba:11:0d:b3:65:10:9d:52:b1:
                    56:dd:26:a8:55:b1:f0:80:a1:cc:0f:14:51:1b:f9:
                    2b:be:f2:e0:ab:73:86:47:8c:ac:ea:bc:cb:15:8d:
                    25:20:de:df:b6:17:25:ea:36:f3:0a:91:e8:dc:a5:
                    79:00:d5:f1:65:ef:d5:43:22:88:0b:4a:28:bc:62:
                    c6:a4:a6:51:d1:f4:e1:7a:bd:74:9e:9f:a4:e6:67:
                    22:5d:18:2e:1f:56:5e:41:55:bf:7e:59:8d:58:21:
                    b2:92:a5:bc:6a:47:17:88:d3:e4:fd:9a:8f:67:28:
                    bb:f3:8e:b7:a4:1d:74:62:07:9a:b8:eb:46:de:2a:
                    2b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:99:2C:25:46:1E:30:31:FF:0F:0B:B6:81:B0:FF:B2:4F:82:2E:D6
            X509v3 Authority Key Identifier:
                keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a3:1d:0a:39:52:7b:38:47:57:c8:32:87:eb:24:fd:16:5e:
         fa:ad:9f:92:a9:3f:34:e7:a4:df:d1:ec:e0:b1:01:f8:87:af:
         3e:6f:8a:1a:16:f0:20:b2:39:1a:4e:f2:b9:c4:1a:f0:7a:bd:
         fc:06:3a:74:37:be:1c:33:da:b6:c9:23:8b:4f:dd:3d:29:4a:
         67:d7:95:c6:1b:96:c8:d8:02:0b:ad:83:e6:6e:20:9b:64:08:
         23:22:dc:f7:fd:f1:5f:f4:e8:61:3e:be:81:df:3b:6c:33:22:
         7e:14:75:a0:bd:1e:26:a2:99:53:97:a2:75:c8:53:fd:9e:68:
         a2:39:84:96:91:91:97:ca:c6:6c:40:6d:80:ab:80:aa:5f:ef:
         bf:75:15:06:d6:fc:1e:6e:6f:25:65:c9:a7:3e:a5:83:2c:a6:
         ca:ad:6b:dd:ea:cd:cc:97:fd:d5:e2:d2:1c:bb:9e:ff:dc:88:
         20:34:db:33:42:97:33:96:5d:22:9e:3f:2f:c8:e5:8e:ef:b6:
         ac:67:f3:69:26:17:8b:67:88:ad:90:24:5f:da:23:24:5d:4a:
         3f:02:ba:55:b0:54:d2:ed:50:6b:56:80:46:00:8f:0b:7f:25:
         a6:92:62:c0:f6:d0:d0:6e:90:1b:c5:75:56:70:1d:da:47:b6:
         22:5a:f4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:03 2026 by rpki-client