Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File:                     ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier:          Yf7ETGwKtp0uLAJC3Eij0V+5u4YVCa2d/kFW1whA0hk=
Subject key identifier:   17:E2:0E:45:02:B6:A2:00:7E:DF:19:2C:8A:20:40:3A:49:81:65:F6
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer:       /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial:       0AF6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number:          0AEB
Signing time:             Wed 22 Jul 2026 19:46:40 +0000
Manifest this update:     Wed 22 Jul 2026 19:46:39 +0000
Manifest next update:     Wed 29 Jul 2026 19:46:39 +0000
Files and hashes:         1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: nGRN1GFr4ubEBWC6Ck7UYZIzRPHDaw0GlA1RAUnwaRk=)
                          2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
                          rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 19:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
        Validity
            Not Before: Jul 22 19:46:39 2026 GMT
            Not After : Jul 29 19:46:39 2026 GMT
        Subject: CN=6a611e1f-bf36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:63:55:62:b4:a2:a7:02:c4:3d:97:cc:fc:
                    2b:e6:47:05:df:84:7f:a1:6b:4e:39:b4:ae:99:07:
                    e3:2f:63:b1:b4:d8:4a:53:3e:de:74:39:09:b1:35:
                    05:32:57:65:b2:ea:3a:8f:12:8e:d0:30:43:d0:24:
                    62:39:dd:cf:78:38:02:e3:37:08:40:55:be:6a:0d:
                    e5:06:bf:62:db:5c:b7:54:0e:56:16:68:c4:e6:eb:
                    1f:aa:e8:4a:09:f6:a8:d7:d8:82:6d:01:92:21:d5:
                    25:de:4d:ba:21:02:c8:41:4c:e6:a0:65:be:8e:4b:
                    19:7c:d9:02:2a:9b:e0:0d:75:4f:1d:c2:83:51:01:
                    1a:76:c0:8c:68:1d:24:ed:61:9d:84:21:b4:df:12:
                    cd:5d:b7:67:ba:a3:5f:d1:c9:a5:4d:a0:f0:0b:a5:
                    53:10:57:33:04:92:94:24:97:07:0d:44:ce:ba:66:
                    8e:c5:2b:ae:41:d8:14:79:e1:da:67:da:c8:48:43:
                    06:02:d7:14:b1:70:63:2b:ff:e2:49:b3:d1:88:24:
                    a7:4d:d8:e7:a9:1f:32:28:5d:6b:40:5a:c8:6c:67:
                    71:fd:b0:f4:f0:43:d6:3a:3f:cc:ad:d1:21:5a:80:
                    38:16:2f:1d:a6:45:10:17:96:b2:55:aa:53:3a:c2:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E2:0E:45:02:B6:A2:00:7E:DF:19:2C:8A:20:40:3A:49:81:65:F6
            X509v3 Authority Key Identifier:
                keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:ec:71:12:1e:2f:ab:2e:20:b0:6d:a6:b4:4c:45:42:ce:
         83:0a:d7:db:28:27:a1:31:dc:d2:67:b5:36:57:1b:49:10:57:
         d4:35:9f:f6:c4:53:d9:27:95:b0:ba:c3:77:f5:e8:6e:4c:ee:
         53:59:cc:99:f1:a7:0b:18:fa:3c:6b:02:1d:e5:49:48:65:b1:
         f4:9a:98:3a:99:b7:e7:13:ac:29:86:72:41:7d:64:dd:ec:af:
         21:3d:82:a9:20:ee:3a:06:a4:c5:dc:74:09:cb:1e:1f:94:7e:
         2a:84:4c:b3:e7:41:f5:4e:8d:25:5d:cb:0c:24:a1:0f:2b:38:
         d8:10:c1:6e:39:8d:77:8f:e8:01:97:74:88:70:99:1e:93:4b:
         36:1d:49:46:76:22:08:4b:66:5a:6a:a9:d0:02:83:0f:f0:49:
         0f:db:3b:ac:0f:33:f4:ae:48:63:67:4a:04:5e:af:4b:f2:ce:
         d0:6d:d8:de:01:af:1c:fd:7f:53:d8:69:58:0b:6d:a1:55:2b:
         d7:33:2b:52:34:dc:e3:84:33:87:1c:6a:7d:ca:11:05:4a:0a:
         47:fc:ad:2f:32:46:0f:c8:d5:8d:a4:68:7e:8d:93:2d:48:c8:
         c2:fe:2a:b7:6b:79:e8:9d:bb:ca:f5:bd:45:d9:00:d5:f6:2f:
         28:2e:6a:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ3N0ExMTAvBgNVBAUTKDExMjk0MERGNTY1MzJCNUQ5QTU5Nzg2OUFDQTkzMUU3
ODNFOEFDQkYwHhcNMjYwNzIyMTk0NjM5WhcNMjYwNzI5MTk0NjM5WjAYMRYwFAYD
VQQDEw02YTYxMWUxZi1iZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL1jVWK0oqcCxD2XzPwr5kcF34R/oWtOObSumQfjL2OxtNhKUz7edDkJsTUF
Mldlsuo6jxKO0DBD0CRiOd3PeDgC4zcIQFW+ag3lBr9i21y3VA5WFmjE5usfquhK
Cfao19iCbQGSIdUl3k26IQLIQUzmoGW+jksZfNkCKpvgDXVPHcKDUQEadsCMaB0k
7WGdhCG03xLNXbdnuqNf0cmlTaDwC6VTEFczBJKUJJcHDUTOumaOxSuuQdgUeeHa
Z9rISEMGAtcUsXBjK//iSbPRiCSnTdjnqR8yKF1rQFrIbGdx/bD08EPWOj/MrdEh
WoA4Fi8dpkUQF5ayVapTOsLBjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBfiDkUC
tqIAft8ZLIogQDpJgWX2MB8GA1UdIwQYMBaAFBEpQN9WUytdmll4aaypMeeD6Ky/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDc3QS9DODI4OTQzMjcz
RTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsxMmFXWGhwcktreDU0UG9y
TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VTbEEzMVpUSzEyYVdYaHByS2t4NTRQb3JMOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDc3QS9DODI4OTQzMjczRTgxMUVBODhGMDIyN0ZDNEY5QUUwMi9FU2xBMzFaVEsx
MmFXWGhwcktreDU0UG9yTDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAajscRIeL6suILBtprRMRULOgwrX2ygnoTHc0me1NlcbSRBX1DWf9sRT2SeV
sLrDd/XobkzuU1nMmfGnCxj6PGsCHeVJSGWx9JqYOpm35xOsKYZyQX1k3eyvIT2C
qSDuOgakxdx0CcseH5R+KoRMs+dB9U6NJV3LDCShDys42BDBbjmNd4/oAZd0iHCZ
HpNLNh1JRnYiCEtmWmqp0AKDD/BJD9s7rA8z9K5IY2dKBF6vS/LO0G3Y3gGvHP1/
U9hpWAttoVUr1zMrUjTc44QzhxxqfcoRBUoKR/ytLzJGD8jVjaRofo2TLUjIwv4q
t2t56J27yvW9RdkA1fYvKC5qqA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:54 2026 by rpki-client