Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
File:                     EESZe8Y6gT2gTBuRiXN0tosEumE.mft (raw, json)
Hash identifier:          tqVWgGhrGWtGGg3qSSePySdiGXSjdRL60kbhg7KaL+w=
Subject key identifier:   BB:37:E4:BF:2C:82:90:87:66:61:13:CC:9A:8D:30:BA:00:E6:8D:E7
Authority key identifier: 10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61
Certificate issuer:       /CN=A91E87B4/serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
Certificate serial:       0F35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
Manifest number:          0F29
Signing time:             Wed 22 Jul 2026 17:44:29 +0000
Manifest this update:     Wed 22 Jul 2026 17:44:28 +0000
Manifest next update:     Wed 29 Jul 2026 17:44:28 +0000
Files and hashes:         1: EESZe8Y6gT2gTBuRiXN0tosEumE.crl (hash: pV4LLjFl/H19z+XzEeM5sL9XDlRwwH2UD+jDzepD5LI=)
                          2: 6D6DED2830BE11EC9401610CC4F9AE02.roa (hash: 4bbcXUAySLXOzdFL1tioIfucTJOOmIVK2SW9Cfab4LY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl
                          rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3893 (0xf35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E87B4, serialNumber=1044997BC63A813DA04C1B91897374B68B04BA61
        Validity
            Not Before: Jul 22 17:44:28 2026 GMT
            Not After : Jul 29 17:44:28 2026 GMT
        Subject: CN=6a61017d-5eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:93:be:59:fc:36:a9:15:ef:c1:b1:27:02:
                    50:36:ed:73:1c:3a:8e:2a:b1:61:19:02:46:06:f0:
                    cb:50:9d:0e:fa:c2:50:c1:76:9e:30:05:21:b8:5c:
                    da:bb:b6:66:d4:c0:ef:84:72:5b:98:55:dc:86:d8:
                    ee:4a:f5:3a:a7:68:9f:ec:e5:75:6a:34:e9:8f:c7:
                    5f:3c:5e:8f:25:40:df:09:40:a3:6b:ff:ff:a9:71:
                    ad:30:8e:43:8a:c1:e2:b0:5f:d0:f0:71:ed:6f:03:
                    11:d3:b7:33:c3:85:49:ae:96:10:26:1a:b6:0a:c2:
                    4c:b6:92:e9:a5:f1:e3:19:2a:8a:c0:2d:4f:78:de:
                    de:c5:45:66:12:95:de:4c:c4:ad:d7:96:8f:27:d6:
                    cd:47:8b:e2:65:5a:37:36:2b:68:c2:56:d3:fd:90:
                    7e:67:3e:f1:c6:67:0b:c7:45:55:47:13:88:ad:41:
                    61:5d:98:ef:17:71:db:58:89:24:4c:c5:6d:a7:cb:
                    ac:66:cc:b6:08:b4:58:5f:c9:8c:b1:67:06:1c:b9:
                    08:63:6f:f5:1a:87:25:a2:8a:eb:3a:58:78:3a:6f:
                    1d:bd:fe:57:a9:74:a2:11:87:fc:fc:8f:f3:b4:e3:
                    c8:87:d8:e4:e1:97:26:c1:91:d4:b5:91:72:d4:c8:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:37:E4:BF:2C:82:90:87:66:61:13:CC:9A:8D:30:BA:00:E6:8D:E7
            X509v3 Authority Key Identifier:
                keyid:10:44:99:7B:C6:3A:81:3D:A0:4C:1B:91:89:73:74:B6:8B:04:BA:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EESZe8Y6gT2gTBuRiXN0tosEumE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87B4/360892209D9A11E9AE9C885AC4F9AE02/EESZe8Y6gT2gTBuRiXN0tosEumE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:8d:ee:7b:1f:18:d0:0c:22:af:ab:f3:2b:a7:06:36:be:
         fa:8a:94:2d:84:b5:83:a3:17:c8:73:73:81:99:d2:ef:7e:5b:
         a0:ce:d6:72:2a:28:bf:15:02:31:d2:83:5c:91:cc:ac:ea:af:
         da:ea:95:c8:be:f3:97:45:96:0e:8c:ab:51:8c:0c:64:92:9b:
         37:6f:a0:fd:29:0d:e2:f8:20:03:ff:73:08:ce:09:9b:42:bc:
         f3:3d:ae:3f:45:f4:31:e4:90:86:3b:b3:45:95:bb:df:e8:10:
         1f:51:52:40:3f:54:fe:49:0b:56:b2:6c:dd:76:0d:ff:64:5d:
         55:e1:fd:4b:fa:29:70:59:da:a9:31:02:31:04:59:21:ef:2d:
         60:a4:1d:23:08:b2:57:2f:69:f1:51:08:00:1a:76:52:a9:ae:
         d0:21:8c:3b:ca:b2:f5:51:c2:90:90:9d:18:db:8f:fa:29:01:
         95:07:4d:51:a2:5e:d0:15:f9:26:c2:38:e4:33:fe:4f:91:c0:
         78:30:7c:6d:f7:d2:63:53:9a:5a:96:45:e0:76:74:0d:05:35:
         f1:40:1e:1f:18:2a:76:6f:7d:f4:9d:d4:81:78:86:9a:72:13:
         fa:98:94:22:b6:d3:cc:32:18:b1:39:ef:3b:c7:c0:08:28:82:
         84:2c:f7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:09:49 2026 by rpki-client