Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          JTe6BKMnhkC3lnlaP2HcWy0ySB0QqeUc28GRNyVqn0Y=
Subject key identifier:   9C:85:8B:D3:4E:EE:45:32:A5:2D:77:73:2C:90:86:6E:69:8E:65:95
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       0248
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          0243
Signing time:             Thu 23 Jul 2026 04:29:24 +0000
Manifest this update:     Thu 23 Jul 2026 04:29:23 +0000
Manifest next update:     Thu 30 Jul 2026 04:29:23 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: mJbXu18WXtovX1a6HOYK51VIzDJ48FMjcK2TTXtIfhY=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: ndu4mgSQM3DACuyqK9fSXueNEcWTd56NuNmOeSBu16I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 04:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 584 (0x248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Jul 23 04:29:23 2026 GMT
            Not After : Jul 30 04:29:23 2026 GMT
        Subject: CN=6a6198a3-22f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5d:bc:65:18:7e:e7:f8:ad:86:98:17:7d:6e:
                    6b:e6:cf:2d:c1:5b:ab:1b:22:e6:31:76:ad:b5:a2:
                    d9:89:66:fb:54:d7:51:e3:fe:eb:68:31:bd:6f:2a:
                    0f:80:59:c6:3f:e2:84:8b:c3:6b:bf:14:15:b2:80:
                    47:9e:e1:b2:e3:fa:a0:38:81:cd:ab:24:c6:92:79:
                    b4:16:30:11:a2:23:1f:e6:ac:f0:ce:5f:4a:85:ab:
                    b2:bd:cd:26:2c:2a:bc:3f:61:60:bf:f7:df:a6:89:
                    c7:f2:ad:65:5a:1b:c6:12:bf:b3:54:84:d9:0c:3b:
                    e0:cb:bb:a8:9d:04:00:dd:38:94:d9:44:ad:17:1f:
                    68:9d:0b:34:3d:d8:19:45:4b:4b:09:fb:37:2a:ff:
                    1a:02:51:41:8d:0e:76:e9:a1:95:3d:79:a6:76:4a:
                    93:55:a8:3c:9b:1c:29:c8:05:f7:81:54:05:3b:02:
                    01:33:d0:73:da:27:8f:d0:37:e4:21:5a:4e:7b:2b:
                    ae:72:d8:89:d0:88:8b:cf:56:6c:8b:6e:9e:a0:03:
                    3a:37:84:9f:bd:3f:d6:a6:49:5e:3c:b9:26:e4:a1:
                    d3:e3:a3:a7:4f:01:f8:10:f6:6b:e5:e3:8e:33:17:
                    b2:b9:cf:fb:09:4e:ce:07:ff:6c:72:07:bd:a4:60:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:85:8B:D3:4E:EE:45:32:A5:2D:77:73:2C:90:86:6E:69:8E:65:95
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0b:93:d8:9c:e1:27:1b:6a:2c:db:6d:fd:a0:ef:a7:b5:9c:
         89:83:44:a0:05:f6:81:05:72:0a:6f:ec:6a:30:52:3e:19:b6:
         40:0b:d6:8b:00:e4:b3:4d:d8:99:d1:23:4e:8d:dd:ec:5d:c0:
         4c:a7:f1:d8:f4:2e:b4:1d:34:e9:a7:f8:9e:5c:3b:ce:54:cd:
         2e:dd:15:1a:a9:ae:b2:ac:dc:ef:38:e9:0d:72:11:8f:cc:a4:
         4e:29:df:26:02:a3:55:e0:d1:cf:a3:a2:0d:f8:5e:a4:54:bf:
         bf:79:7d:78:ef:75:35:de:37:93:71:24:a7:2c:75:19:3b:f5:
         27:16:91:9e:3f:6d:e2:cb:b9:08:d6:99:0c:91:54:8b:65:3f:
         3c:0e:8b:6b:4f:07:05:b1:dd:a8:45:4d:c5:22:25:a7:78:df:
         56:9b:b8:0c:6c:29:93:74:d0:e5:b5:a6:9c:a4:cf:cb:f9:07:
         49:10:64:aa:5e:45:64:d7:84:b5:0a:31:2f:7a:38:2a:6b:c1:
         35:91:fc:3a:5e:2a:a3:a6:a2:bd:6d:a9:a6:72:e3:32:47:59:
         dc:89:0f:94:a7:fa:da:9e:a2:b6:ed:b6:24:94:e0:78:bd:84:
         61:ce:26:17:8f:f9:e1:56:96:bd:67:6f:11:b5:34:58:74:1e:
         bb:0f:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:17 2026 by rpki-client