Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
File:                     eHDyQLxFFuOanCWVjPl7GUvnZWc.mft (raw, json)
Hash identifier:          43vLlIv0uHA07pNB/6TGcYJF0pFO+5jRvaEgvjfNcys=
Subject key identifier:   70:24:0B:96:26:9B:40:1D:3F:3F:1A:E9:B4:3E:E2:B6:48:88:1A:3E
Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
Certificate issuer:       /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Certificate serial:       0C84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
Manifest number:          0C61
Signing time:             Wed 22 Jul 2026 19:01:29 +0000
Manifest this update:     Wed 22 Jul 2026 19:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:29 +0000
Files and hashes:         1: eHDyQLxFFuOanCWVjPl7GUvnZWc.crl (hash: P+uU3H4Suglx1VZlhQhKGz4w9MM4A/nmHF2/Tv0xNtg=)
                          2: EC4AB04AAA5511EABCEBDE19C4F9AE02.roa (hash: PVNVIsAGF4iLu1l85ogTKaGXUTCHGrR1d4s3DuDaU/s=)
                          3: CEFDECF850B011F0B9262D4FC4F9AE02.roa (hash: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
                          rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3204 (0xc84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
        Validity
            Not Before: Jul 22 19:01:29 2026 GMT
            Not After : Jul 29 19:01:29 2026 GMT
        Subject: CN=6a611389-7da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:58:88:ff:69:40:be:a1:d5:5b:dd:b4:b9:
                    1a:39:ff:0e:1e:84:80:6e:a6:f5:08:ca:4c:08:6c:
                    d9:80:af:97:10:d1:e6:91:7d:bb:93:d5:b2:b3:3a:
                    52:06:73:ee:62:32:d4:9a:52:21:42:66:f5:2f:a9:
                    b4:99:ae:bd:14:aa:23:83:96:66:98:75:44:b5:89:
                    15:1f:de:57:b9:46:0e:8b:4b:90:21:42:67:1c:06:
                    01:7a:65:b9:22:5a:14:0c:5a:19:8a:72:a3:2c:3f:
                    7b:aa:25:27:8b:b2:a8:25:1b:ab:72:76:2a:ae:df:
                    e8:17:95:51:2b:b8:a2:62:4f:ce:47:07:98:58:3a:
                    62:b2:e6:8f:82:49:18:0f:bc:bb:0c:16:57:08:db:
                    1e:bd:40:ab:62:63:10:0e:68:e6:6c:33:fc:46:8a:
                    d4:c9:b0:9b:fd:f8:71:dd:7e:fc:9d:e2:0c:c7:6c:
                    0f:49:ae:df:92:08:2d:c9:6e:22:3e:4b:f6:e3:2d:
                    c7:e5:74:72:d5:a4:ae:34:05:ba:e4:ea:14:8c:f0:
                    5d:4f:ca:77:a3:82:ed:ea:c5:07:12:6f:40:42:30:
                    4b:b3:3f:d5:50:8c:69:aa:09:84:bb:5e:0a:57:5b:
                    44:de:05:fb:6d:e3:31:fc:d9:16:87:9f:e9:46:8a:
                    de:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:24:0B:96:26:9B:40:1D:3F:3F:1A:E9:B4:3E:E2:B6:48:88:1A:3E
            X509v3 Authority Key Identifier:
                keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:ac:19:ef:a7:cc:18:8b:c9:21:ee:9a:5e:41:c0:37:5e:
         5e:5e:c4:c2:c1:c0:17:37:27:9e:11:a3:95:0c:64:f6:3c:b9:
         fa:17:b3:0b:4f:c8:0b:4b:0b:15:a2:fe:6e:4a:79:05:dd:18:
         7f:3b:af:62:e6:20:2d:de:e5:44:3a:24:a8:1b:ce:5e:74:50:
         32:68:fb:b5:02:4d:f9:8f:4f:7b:e7:b1:52:74:9d:07:f2:bb:
         3c:dd:33:6b:cb:4f:3f:55:16:0d:06:08:eb:99:1e:3a:67:ea:
         47:3e:44:2e:54:5b:3e:e4:63:66:bd:3d:4b:bd:d7:8f:8b:24:
         a0:72:c8:2d:ea:92:c5:92:29:68:1e:8e:13:74:eb:29:8f:a4:
         30:13:36:c0:2f:4c:a1:c7:d3:da:34:c3:7d:ee:71:79:c1:80:
         7f:b3:67:72:bf:be:03:29:10:d4:ef:b0:1c:17:ff:6e:4b:a3:
         6d:b7:fb:d9:d2:23:ac:8b:fb:28:f1:46:6b:8e:9e:bf:62:a0:
         57:0f:90:9a:bc:96:44:90:b1:99:1b:29:79:60:d7:51:02:d4:
         97:83:f4:bb:6e:e6:f9:cd:85:41:a6:8b:26:14:46:33:db:b1:
         ec:d2:08:97:48:23:7d:a3:95:b7:c3:2f:c5:54:54:d3:dc:c1:
         2a:1d:56:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:33 2026 by rpki-client