Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          kWyJ3a9rkFFa2RylRlWTP6Dy4MAMSDLILH69kxzEDXk=
Subject key identifier:   D7:60:6A:DF:27:A4:87:47:64:3F:69:09:86:EC:69:78:F6:BD:03:AB
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       35CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3594
Signing time:             Wed 22 Jul 2026 14:32:57 +0000
Manifest this update:     Wed 22 Jul 2026 14:32:57 +0000
Manifest next update:     Wed 29 Jul 2026 14:32:57 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: +hIWg4YqfLRJBi14pD257rtfaC5IQUKmmpoBVNO/IxY=)
                          2: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: 1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=)
                          3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: pEr2wO5ZAQqRLVAqVCe90KJfFg9AIXlsq7twE8fo5s4=)
                          4: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 14:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13774 (0x35ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jul 22 14:32:57 2026 GMT
            Not After : Jul 29 14:32:57 2026 GMT
        Subject: CN=6a60d499-4ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:ad:c7:33:aa:79:d1:71:ad:10:50:32:ce:
                    90:b0:99:58:23:39:1c:75:18:42:7e:27:14:65:33:
                    19:36:26:9e:2a:cf:4c:bc:73:8e:5f:47:66:78:42:
                    24:85:7c:5f:33:fb:4b:90:31:6a:a3:8d:c8:d9:7f:
                    5a:d3:2d:1a:c7:8b:4f:22:57:86:84:94:4d:68:81:
                    76:fd:62:6e:cc:c1:90:0c:7f:ad:26:0e:ca:99:ab:
                    21:de:6e:e3:5a:75:ad:a1:0a:ae:eb:6e:71:a1:f1:
                    ab:e7:97:6a:6b:a8:ba:6e:96:51:f1:28:dd:60:c8:
                    10:8a:67:7a:a1:57:4b:ce:fd:b2:68:18:bf:42:84:
                    59:7f:63:c5:67:17:2e:04:0a:0a:50:ec:4c:a9:96:
                    f5:9f:b9:98:e5:7b:10:bb:1a:79:e5:24:71:55:39:
                    aa:4f:f5:ec:6b:3d:1b:7a:aa:16:a6:5d:c1:5d:ba:
                    45:6d:9b:8b:da:2e:41:d1:4c:e7:d1:89:09:f4:68:
                    7c:20:08:48:94:dc:6f:03:40:59:24:f8:b7:6b:05:
                    83:12:c7:bd:35:c3:39:f0:d7:c9:a3:e9:62:7e:70:
                    56:71:a1:eb:ff:6f:9b:d4:64:6f:3a:c8:ca:f6:4a:
                    5e:af:66:ff:aa:14:65:df:f7:47:06:6f:a4:22:3b:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:6A:DF:27:A4:87:47:64:3F:69:09:86:EC:69:78:F6:BD:03:AB
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:75:18:11:26:e7:e9:4d:de:f8:65:ab:48:57:bf:1e:37:
         74:c0:2d:30:13:3e:de:a4:be:9f:d4:12:d0:c0:2d:03:2e:63:
         25:3d:1c:aa:07:cf:e0:3b:6b:2e:2c:a0:a7:b1:f1:8e:75:36:
         0b:35:79:ee:5c:cb:20:29:69:23:4d:5c:1d:cc:98:d2:1e:96:
         3e:88:f6:81:c6:78:16:1c:c2:10:d4:5c:5f:11:c6:fc:4f:54:
         47:41:b5:08:97:5d:17:6b:df:48:6b:81:0f:ac:58:5c:86:e9:
         c4:5c:31:20:20:c6:36:41:58:42:32:99:37:2c:2e:1b:4b:20:
         6b:d3:ac:5e:ba:6f:75:ae:6c:e4:36:b5:b8:7d:90:dc:3a:af:
         46:fb:4c:a5:d1:bc:79:bf:f4:df:20:2b:18:3d:ef:0c:99:70:
         1f:45:62:b3:e3:14:ff:0b:77:ad:96:93:f8:d1:bb:ea:3a:1e:
         6f:0d:ab:d5:0d:8d:2e:0f:90:2d:9c:26:b8:69:a8:65:3f:22:
         51:4a:52:ee:1e:97:ff:29:c3:7b:d2:e5:69:42:03:41:79:fb:
         7b:b3:ff:86:2c:a3:be:38:75:9e:9b:74:c3:33:c9:51:ff:67:
         55:77:85:8d:ae:42:07:33:64:0c:aa:b5:3d:78:dd:db:a3:8a:
         9d:ed:2c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:09 2026 by rpki-client