Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File:                     Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier:          ljd5U74cRfx3kFzSKeZHeINWnulWldJlC3fKt+wZZig=
Subject key identifier:   4A:00:38:D3:4D:4E:62:56:71:9D:3A:3D:3F:EA:54:AC:DF:42:6B:4A
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer:       /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial:       020B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number:          0205
Signing time:             Thu 23 Jul 2026 04:24:21 +0000
Manifest this update:     Thu 23 Jul 2026 04:24:20 +0000
Manifest next update:     Thu 30 Jul 2026 04:24:20 +0000
Files and hashes:         1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: 5YjyEo8TQd6nCmk7EVQfb7TRqH2+xSXZmLOHntGtvI4=)
                          2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
                          rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
        Validity
            Not Before: Jul 23 04:24:20 2026 GMT
            Not After : Jul 30 04:24:20 2026 GMT
        Subject: CN=6a619774-ccdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:c2:79:80:da:c0:b2:1a:f7:b7:fb:e5:3a:
                    12:ff:97:2c:4f:b6:fd:9d:49:60:90:36:e8:82:01:
                    74:ac:d1:2a:d6:84:ce:28:ee:11:77:3e:ed:c3:cc:
                    6a:ba:64:2c:b3:01:0c:fc:4a:09:dd:72:83:a7:ad:
                    69:5a:2f:a0:83:c7:ff:9b:aa:7c:3b:22:86:9d:0f:
                    fe:73:7f:36:48:fd:a3:7b:8e:b9:7d:b4:6a:16:bd:
                    6a:2c:f0:9d:05:43:71:ba:08:73:ea:e2:51:7a:43:
                    63:97:f8:37:99:53:0f:49:88:34:d3:87:37:19:a6:
                    0b:8a:aa:7d:cc:8d:cb:24:0c:0b:8b:8f:62:7b:7e:
                    32:31:ee:41:ed:bb:81:0d:46:2b:78:cf:4f:8f:d6:
                    b8:3b:a9:00:b5:6a:e9:0a:4e:98:be:74:d6:4c:cf:
                    ba:9b:92:67:90:6c:89:ce:92:3a:21:72:da:6a:11:
                    36:df:1a:48:ce:e9:36:e2:88:64:60:28:d8:c6:d3:
                    1a:9a:4c:db:00:fc:8f:aa:e5:f5:4f:29:65:18:c5:
                    a1:83:9b:d1:fa:f6:1d:6d:5c:3e:62:94:a5:20:fd:
                    59:7c:3b:37:84:ac:a9:f6:61:03:1d:4e:08:fa:5d:
                    f4:ac:2a:c1:f8:30:9d:f2:99:2d:d8:98:ec:35:67:
                    37:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:38:D3:4D:4E:62:56:71:9D:3A:3D:3F:EA:54:AC:DF:42:6B:4A
            X509v3 Authority Key Identifier:
                keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:53:6a:94:2e:a3:51:7e:d5:de:88:6e:ff:2e:ff:fd:1b:
         cc:9f:2b:e5:0e:0e:b7:bb:32:45:72:25:26:79:48:71:7a:ed:
         24:fb:86:91:e5:b5:ee:e4:a7:41:cd:93:89:15:c2:8f:fb:6e:
         17:2a:93:12:61:74:53:9a:6b:54:1d:fb:f3:3b:06:91:a0:0e:
         30:b2:57:3e:77:31:56:a0:83:b6:83:e7:d7:0e:a5:e4:38:15:
         63:43:1d:03:63:cf:aa:b2:20:6f:2b:bf:0f:1c:c7:ba:00:6f:
         3e:fd:2c:bf:1d:0b:15:34:9d:0f:11:86:eb:df:11:69:3c:91:
         0a:b7:3a:47:31:7b:28:f2:08:65:f4:dc:89:7c:05:4f:f0:3a:
         95:72:96:f6:7e:af:62:51:d7:67:02:fc:f3:0e:20:20:37:63:
         16:9b:7a:24:3a:a5:20:38:ca:13:26:f7:19:1d:58:38:d6:89:
         0b:e3:96:a9:cf:09:67:19:6a:aa:27:61:f4:c5:f5:6f:ff:2b:
         1e:5c:96:cd:31:b7:8d:d5:32:07:d4:f3:39:b8:cd:ba:78:64:
         bc:2a:65:30:ea:3d:fa:ef:58:24:de:29:66:28:da:33:7d:fe:
         51:e1:cb:ba:1f:00:fe:0a:27:0d:96:be:da:79:c5:56:f9:09:
         81:df:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:08 2026 by rpki-client