Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
File:                     EVpBYMhVVH2eMQxg09CIy7yamSo.mft (raw, json)
Hash identifier:          /kYGCbIWfxyUJ/cFM4Pc79yy7tVOPxXtD4VWQCRDzNQ=
Subject key identifier:   0D:47:7C:99:60:64:A1:FB:E7:5B:17:04:1F:9E:4D:68:08:89:0A:F8
Authority key identifier: 11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A
Certificate issuer:       /CN=A91A76AD/serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
Manifest number:          01D5
Signing time:             Thu 23 Jul 2026 05:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 05:01:26 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:26 +0000
Files and hashes:         1: EVpBYMhVVH2eMQxg09CIy7yamSo.crl (hash: V36Fg5P5V2Q7vz0HK2ps9X/fHF1jlMevFMIHPtc6Mho=)
                          2: 26E31278CA3811EEB0C6A436C4F9AE02.roa (hash: 0JDuK//wuAegrwuCc80bntCG84tWqAxx6pjRbEhGYec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl
                          rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76AD, serialNumber=115A4160C855547D9E310C60D3D088CBBC9A992A
        Validity
            Not Before: Jul 23 05:01:26 2026 GMT
            Not After : Jul 30 05:01:26 2026 GMT
        Subject: CN=6a61a027-3386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:38:33:36:28:26:f6:be:52:b1:fd:56:bc:
                    2f:49:ab:a0:dc:e5:7d:8c:2f:66:49:09:ff:31:2c:
                    7d:8e:a0:df:c4:7e:58:4c:92:4c:37:12:35:d0:7b:
                    f6:d8:e9:dd:24:e4:43:8b:55:60:3c:2d:c7:26:2f:
                    b5:39:04:98:56:da:78:15:94:4c:b5:0d:7d:2a:6d:
                    56:a8:6d:12:08:c6:04:3f:af:d0:14:ca:7f:e5:9d:
                    1e:1b:cf:64:42:54:1c:58:f4:ff:17:f6:ee:f5:b5:
                    62:4b:75:71:87:6e:68:5b:81:b9:b8:71:71:37:24:
                    92:1a:59:b7:ed:ca:a4:30:29:06:fe:fb:43:7c:85:
                    67:4f:a4:9b:86:e1:18:1a:d9:12:5f:e7:f0:a8:fb:
                    33:f9:0d:3b:53:e6:f4:a8:94:8b:3e:65:be:24:29:
                    05:49:9b:dd:5f:8f:b2:54:b5:ce:56:05:3e:a6:0c:
                    c6:50:4d:a4:45:bf:39:a8:1e:fa:25:78:f2:a3:c3:
                    50:5b:fa:d9:13:6e:87:09:48:12:41:79:4d:d3:65:
                    ec:1b:b7:2a:5e:1e:a1:d0:2e:ed:d2:b8:1c:04:da:
                    11:00:1f:31:ea:a1:d7:56:a5:34:6b:a5:47:57:21:
                    63:58:74:05:76:7f:a0:6e:f8:71:97:d3:5e:87:80:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:47:7C:99:60:64:A1:FB:E7:5B:17:04:1F:9E:4D:68:08:89:0A:F8
            X509v3 Authority Key Identifier:
                keyid:11:5A:41:60:C8:55:54:7D:9E:31:0C:60:D3:D0:88:CB:BC:9A:99:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVpBYMhVVH2eMQxg09CIy7yamSo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/FECA7506BE7F11EE96784D62C4F9AE02/EVpBYMhVVH2eMQxg09CIy7yamSo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:82:3f:3d:10:01:72:eb:11:33:fb:08:a4:44:8a:82:f3:72:
         84:e3:cc:be:3a:67:01:9b:86:34:07:f2:74:a6:f4:ce:2b:65:
         b3:4d:91:15:6c:99:73:d7:8c:6a:9e:d9:1a:b2:48:fc:9c:2d:
         b3:04:f2:53:b1:4d:0b:1d:f2:e8:93:d3:c0:52:8f:73:81:65:
         22:89:70:08:8f:ad:47:df:0c:09:fb:8d:09:c2:75:1c:2a:84:
         6e:47:d2:2b:3c:bd:a4:84:21:9a:01:c5:24:c4:61:c2:26:c0:
         21:94:b1:b0:ab:67:19:2c:ab:a1:a8:b6:87:07:ad:37:32:82:
         ff:86:a7:a4:df:54:90:82:85:7a:a7:15:a7:3e:1e:15:c5:9c:
         e6:05:90:f5:d7:77:40:3f:09:d9:d1:f8:16:46:31:e5:6e:56:
         85:c0:d7:94:fd:4d:24:ce:73:1e:e0:f3:02:fc:08:82:d6:c6:
         88:5b:ba:07:70:04:e0:fb:b0:45:8f:b7:a1:a5:84:08:60:b4:
         1f:9d:09:a9:5a:07:02:0b:45:9b:d0:9f:64:2f:6c:62:68:78:
         ba:a6:e8:f0:de:d5:ce:c2:58:98:8d:67:33:75:5c:00:dc:d5:
         33:9c:5c:89:a2:e1:e2:e9:69:da:6c:cf:eb:28:9d:8c:9f:7c:
         4a:21:4a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:34 2026 by rpki-client