Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
File:                     EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft (raw, json)
Hash identifier:          Z60xfR92Dqn5FX8Vfdt8lWHf+fHxFZ6QJtXMn87ZNT4=
Subject key identifier:   8B:1F:7A:5D:0B:0D:9A:0C:80:23:99:91:B9:42:10:0A:BF:4E:27:57
Authority key identifier: 12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75
Certificate issuer:       /CN=A91AB72F/serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
Certificate serial:       017F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
Manifest number:          017C
Signing time:             Thu 23 Jul 2026 06:08:04 +0000
Manifest this update:     Thu 23 Jul 2026 06:08:04 +0000
Manifest next update:     Thu 30 Jul 2026 06:08:04 +0000
Files and hashes:         1: EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl (hash: F3yVXOVIbfCGmPda3CDrh2hQirr6uU5AqMQ+kBlUu60=)
                          2: 79F48DAAED0711EFA7332931C4F9AE02.roa (hash: dlecxqbZAMbSA14zl4WPnusRoWo06VnO1BHgu9deOAE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl
                          rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB72F, serialNumber=1244785D40C5EC58DFC4A328540F1B393DEA2375
        Validity
            Not Before: Jul 23 06:08:04 2026 GMT
            Not After : Jul 30 06:08:04 2026 GMT
        Subject: CN=6a61afc4-3720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:18:44:93:c8:43:43:10:10:c8:cb:17:ec:
                    ba:5f:e1:e0:c8:fe:bf:a5:60:c2:0f:a6:c9:66:b0:
                    c5:62:25:25:a5:ec:dc:70:a2:25:54:ab:ae:35:72:
                    5c:9f:74:a4:74:2d:e2:e1:f1:20:07:12:35:89:7e:
                    d3:ea:d0:92:78:3f:ca:12:34:17:f7:b4:48:c6:cf:
                    96:e6:f4:5b:be:89:33:23:09:59:b5:7e:bc:c8:7f:
                    e1:7a:48:4c:b0:a2:42:0d:a9:b5:e1:5d:48:c5:57:
                    eb:40:31:bd:96:cf:f3:fc:d1:08:2e:eb:b2:d4:60:
                    65:0d:d5:b0:c2:fc:49:dd:0b:eb:97:62:73:14:50:
                    87:8d:0a:35:26:82:16:fe:c4:8d:67:39:e6:a0:77:
                    a5:78:7b:7a:1c:d8:b3:3c:a6:6f:a1:2d:22:2e:4b:
                    8e:59:15:82:4e:21:ba:95:88:26:55:b9:9a:9a:47:
                    b9:c5:0f:e3:ff:ab:06:64:b6:56:a2:4a:8c:25:79:
                    8b:58:d6:8b:d4:a0:d0:d4:26:ca:23:e2:9e:57:71:
                    8c:18:7d:c8:36:2e:d0:16:59:49:8e:58:66:26:05:
                    5a:e4:c3:ad:1a:42:a4:ec:49:8b:77:a5:d3:f3:14:
                    2c:69:33:6b:97:c9:c0:21:6c:88:3b:a3:dc:16:3f:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1F:7A:5D:0B:0D:9A:0C:80:23:99:91:B9:42:10:0A:BF:4E:27:57
            X509v3 Authority Key Identifier:
                keyid:12:44:78:5D:40:C5:EC:58:DF:C4:A3:28:54:0F:1B:39:3D:EA:23:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EkR4XUDF7FjfxKMoVA8bOT3qI3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB72F/2FB49B3E43D111EF8BE8D87BC4F9AE02/EkR4XUDF7FjfxKMoVA8bOT3qI3U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d4:04:0c:ec:c3:08:76:d5:dc:d9:09:be:df:d1:ac:a0:24:
         99:c3:b1:26:5d:09:56:40:76:fd:a2:34:c3:78:bb:b6:f6:5c:
         e7:1f:31:7c:84:a3:c9:35:e2:6f:de:fb:83:b9:39:37:ca:26:
         c9:ad:b5:83:99:c0:ab:83:df:3b:a4:85:86:07:21:7c:62:66:
         e4:68:f2:40:d5:8c:c0:de:17:6d:eb:95:ee:d2:79:12:c7:97:
         67:56:be:cd:07:a1:93:f3:b6:35:20:27:2c:f6:36:71:5b:ef:
         f7:b3:1e:e0:ac:8f:bd:45:ea:4f:02:e0:03:c6:6d:ef:6a:10:
         9a:2b:53:dd:3f:e0:04:df:32:67:9b:6e:ac:83:c5:6f:aa:1d:
         a6:42:45:a8:2b:5c:5b:ac:2d:98:eb:20:f7:3b:45:c6:c4:ad:
         d5:b4:cd:b2:e6:45:5c:80:02:86:b5:12:48:c7:5f:10:e3:5a:
         b6:fe:3a:ce:c2:1a:26:0d:f1:bf:18:a9:aa:2c:fb:42:8d:41:
         37:9e:76:16:05:65:c1:ff:b1:71:2f:58:13:0c:29:a5:3b:ef:
         b3:0a:1f:ff:52:22:a7:c7:42:ee:6b:9e:ec:d3:02:0e:a9:00:
         bf:0d:c9:4b:31:85:7c:a2:e8:54:40:d6:99:29:29:02:55:80:
         ed:d1:18:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUI3MkYxMTAvBgNVBAUTKDEyNDQ3ODVENDBDNUVDNThERkM0QTMyODU0MEYxQjM5
M0RFQTIzNzUwHhcNMjYwNzIzMDYwODA0WhcNMjYwNzMwMDYwODA0WjAYMRYwFAYD
VQQDEw02YTYxYWZjNC0zNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0xcYRJPIQ0MQEMjLF+y6X+HgyP6/pWDCD6bJZrDFYiUlpezccKIlVKuuNXJc
n3SkdC3i4fEgBxI1iX7T6tCSeD/KEjQX97RIxs+W5vRbvokzIwlZtX68yH/hekhM
sKJCDam14V1IxVfrQDG9ls/z/NEILuuy1GBlDdWwwvxJ3Qvrl2JzFFCHjQo1JoIW
/sSNZznmoHeleHt6HNizPKZvoS0iLkuOWRWCTiG6lYgmVbmamke5xQ/j/6sGZLZW
okqMJXmLWNaL1KDQ1CbKI+KeV3GMGH3INi7QFllJjlhmJgVa5MOtGkKk7EmLd6XT
8xQsaTNrl8nAIWyIO6PcFj9FnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsfel0L
DZoMgCOZkblCEAq/TidXMB8GA1UdIwQYMBaAFBJEeF1AxexY38SjKFQPGzk96iN1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjcyRi8yRkI0OUIzRTQz
RDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdGamZ4S01vVkE4Yk9UM3FJ
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VrUjRYVURGN0ZqZnhLTW9WQThiT1QzcUkzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QjcyRi8yRkI0OUIzRTQzRDExMUVGOEJFOEQ4N0JDNEY5QUUwMi9Fa1I0WFVERjdG
amZ4S01vVkE4Yk9UM3FJM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9QEDOzDCHbV3NkJvt/RrKAkmcOxJl0JVkB2/aI0w3i7tvZc5x8xfISjyTXi
b977g7k5N8omya21g5nAq4PfO6SFhgchfGJm5GjyQNWMwN4XbeuV7tJ5EseXZ1a+
zQehk/O2NSAnLPY2cVvv97Me4KyPvUXqTwLgA8Zt72oQmitT3T/gBN8yZ5turIPF
b6odpkJFqCtcW6wtmOsg9ztFxsSt1bTNsuZFXIAChrUSSMdfEONatv46zsIaJg3x
vxipqiz7Qo1BN552FgVlwf+xcS9YEwwppTvvswof/1Iip8dC7mue7NMCDqkAvw3J
SzGFfKLoVEDWmSkpAlWA7dEYlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:23:54 2026 by rpki-client