Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          PUAnXE6kzHPikMi1cVwJqUu2HMc6KUFt/aAvlg8aGlw=
Subject key identifier:   80:0F:3C:87:EF:2E:A0:93:05:49:3E:F8:72:8D:DD:73:36:0B:99:A1
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          9C
Signing time:             Wed 13 May 2026 07:34:18 +0000
Manifest this update:     Wed 13 May 2026 07:34:17 +0000
Manifest next update:     Wed 20 May 2026 07:34:17 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: h071AeNvotGJ8Qd4SfElgw6cGJuZB1UlgRh37CmPaXQ=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: May 13 07:34:17 2026 GMT
            Not After : May 20 07:34:17 2026 GMT
        Subject: CN=6a04297a-bc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:3c:9f:29:b7:c5:7e:ba:59:93:27:a4:06:
                    9e:cb:94:f7:d3:b1:39:1e:d8:4c:18:ea:af:27:ac:
                    07:d7:f1:9c:05:79:75:4c:7f:1a:0d:50:48:f2:ff:
                    4d:4d:90:b7:2d:de:8c:8f:3f:62:17:09:1f:a1:8c:
                    dc:bc:b9:1d:48:b5:a4:a2:e5:ab:6d:45:1a:be:e6:
                    7a:ce:77:de:52:fd:8c:a0:52:bf:59:94:0e:c9:7d:
                    1b:99:a6:30:2e:7b:86:4b:fa:0e:42:28:6f:04:49:
                    65:21:b2:d2:8e:e9:c2:15:c1:bb:06:5e:2e:b9:5c:
                    a6:c4:c8:55:3d:c6:5e:37:17:bf:ee:01:e1:20:27:
                    5d:d4:0d:0b:36:97:f1:db:55:73:b9:64:46:f4:fd:
                    83:6c:6f:87:9d:a8:eb:0e:8c:cd:7b:14:6b:3b:37:
                    45:fb:6b:44:68:b0:e5:af:a9:07:14:02:c2:46:8e:
                    0b:f5:b6:e8:61:de:9e:94:aa:6c:b9:94:f4:eb:c5:
                    74:73:ba:a4:7a:d9:93:50:e5:85:6e:a0:36:db:3c:
                    90:68:29:b0:f9:e5:48:01:4c:ea:a1:2b:34:50:a0:
                    58:9e:03:27:9e:20:c9:f4:bf:f1:46:cf:90:ad:cd:
                    fc:89:a4:cd:5e:fa:82:97:d2:76:fb:11:af:8f:4f:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0F:3C:87:EF:2E:A0:93:05:49:3E:F8:72:8D:DD:73:36:0B:99:A1
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:fa:eb:f1:d5:b9:60:d3:cb:fa:d6:36:6d:5b:d5:2e:30:
         50:94:00:33:cb:49:b9:57:6a:45:23:17:61:f3:ba:f5:2c:37:
         ca:5d:52:44:51:64:6f:33:b3:a8:42:ce:f4:5d:75:2a:b6:b8:
         32:4c:c1:e6:86:20:3b:a2:47:17:cd:8c:1f:bc:f5:c7:2d:42:
         92:7c:6d:78:0c:8d:25:f5:44:d5:29:36:e1:22:dc:78:3d:e3:
         fe:ca:30:ba:f8:9f:c8:23:48:f3:2b:ea:01:85:49:23:7b:e9:
         64:4e:9b:d4:61:50:44:dc:97:e2:db:fc:07:8a:16:67:72:6f:
         5b:ed:d8:c0:d1:67:4f:84:25:77:b6:95:58:d1:66:4f:ec:bc:
         21:91:d1:00:5b:78:a7:57:e2:2a:64:f4:ab:4e:40:1d:6e:64:
         d3:ba:54:4d:a5:f4:62:ad:ea:32:f2:e6:6e:25:3e:3a:aa:1d:
         a5:81:9e:a1:52:14:a6:07:e6:a7:5b:46:ad:03:6d:20:22:c2:
         33:9b:69:61:42:23:e4:96:ae:66:df:ed:5b:da:d9:e7:61:02:
         58:a3:d4:5c:c6:12:27:f4:da:a7:24:5c:06:1e:4e:26:ae:4c:
         db:cd:86:3d:be:f9:c9:9c:e5:42:5d:e4:b2:db:14:4c:f1:c6:
         59:45:c5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:59:53 2026 by rpki-client