Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
File:                     eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft (raw, json)
Hash identifier:          h5gZdwP85ESQH51vKjorAYuzGRyQ8oc0fUJqhDUJF0Y=
Subject key identifier:   96:05:D9:74:95:C2:48:33:C3:F5:92:1D:43:BC:D5:5F:DE:42:A6:85
Authority key identifier: 79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50
Certificate issuer:       /CN=A91FEB27/serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550
Certificate serial:       2DFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
Manifest number:          2DE0
Signing time:             Wed 22 Jul 2026 15:34:34 +0000
Manifest this update:     Wed 22 Jul 2026 15:34:33 +0000
Manifest next update:     Wed 29 Jul 2026 15:34:33 +0000
Files and hashes:         1: eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl (hash: hGT8UbMx86GIwh/CP/MUzqTxEoplE+LfW1RWdblaZSU=)
                          2: 6CB78E8E967811EA92E45A27C4F9AE02.roa (hash: j8SdiRCElSMFnJ22wBx2N8U0G8IWYs38Ik8ORdeha4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 15:34:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11774 (0x2dfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEB27, serialNumber=79E5632AF29BAE64E5F9F19C575BC5A995E20550
        Validity
            Not Before: Jul 22 15:34:33 2026 GMT
            Not After : Jul 29 15:34:33 2026 GMT
        Subject: CN=6a60e30a-60cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:94:e2:d3:ba:67:b3:01:57:3d:c3:cc:12:
                    e4:6e:46:01:84:71:5e:a7:64:bf:30:41:d1:a3:1a:
                    79:52:e8:62:46:46:8c:0b:90:ab:ef:3a:c0:2f:61:
                    e7:01:c7:ff:6f:34:00:c6:52:62:66:5f:e9:bb:dd:
                    41:c8:5e:f0:70:2c:88:f5:7d:63:8e:1c:0f:e5:de:
                    2e:7a:ff:0a:97:ba:44:e0:ad:01:0e:98:93:79:0e:
                    49:0f:c4:bf:4a:01:38:a0:c2:b4:ce:76:97:8c:0e:
                    44:1d:4a:24:05:22:73:7e:b6:82:aa:a7:ff:c2:cc:
                    3c:19:a6:34:ac:85:23:b0:79:5f:64:1c:96:fa:72:
                    76:39:db:73:75:f2:c6:6d:58:cf:6e:b9:78:10:bb:
                    89:1b:45:c3:cc:bf:87:15:b7:de:1c:7d:e1:2e:15:
                    b3:a8:08:3a:55:64:b7:cb:a9:f1:82:93:67:44:e4:
                    5a:41:f5:89:50:03:93:7e:ac:af:03:4d:4e:e9:98:
                    f3:01:9a:49:43:bf:fd:d2:b5:35:80:d0:d3:aa:68:
                    f1:76:76:d7:ec:5c:a5:54:19:10:88:d8:9f:4c:13:
                    74:2c:d8:b9:f6:df:59:4d:ef:e4:e2:bb:81:6f:79:
                    a7:92:db:b8:33:5b:41:c1:62:87:b5:ae:20:fd:ad:
                    20:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:05:D9:74:95:C2:48:33:C3:F5:92:1D:43:BC:D5:5F:DE:42:A6:85
            X509v3 Authority Key Identifier:
                keyid:79:E5:63:2A:F2:9B:AE:64:E5:F9:F1:9C:57:5B:C5:A9:95:E2:05:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eeVjKvKbrmTl-fGcV1vFqZXiBVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB27/167A97EC9AE311E3A5A257A75911EA32/eeVjKvKbrmTl-fGcV1vFqZXiBVA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:39:de:98:60:05:27:ef:2c:e4:6b:3f:0f:da:cf:cf:65:
         e7:34:41:6f:28:c3:f2:dc:9a:b9:27:0b:bc:0b:87:5b:71:73:
         9d:61:98:aa:3c:4c:80:84:9a:07:fb:a9:8c:a4:c0:a9:d0:68:
         41:76:2d:fa:20:8d:2f:92:e2:5e:3d:6f:8b:84:8d:d6:bc:a6:
         16:b7:56:bd:3d:89:8a:ce:a7:7f:fd:d2:6b:80:da:53:ec:89:
         ca:6e:87:c9:2b:30:7e:ab:8b:5a:4c:9a:2e:55:2a:ff:67:62:
         99:7b:4d:51:b9:b6:ae:23:50:c2:75:f9:53:a3:d5:f3:92:e6:
         a7:1b:30:07:2d:73:87:47:05:d2:2d:2f:c6:be:e0:09:f4:bf:
         db:ad:06:d9:c4:9c:59:9e:8f:25:00:5f:ec:28:19:c2:55:04:
         e8:cc:97:66:b0:4a:21:28:7d:1e:69:ce:ae:78:99:23:85:de:
         9b:85:3c:e3:6d:5a:56:48:5c:29:6d:50:f6:7b:c2:fc:5a:ca:
         3f:7c:97:72:45:3e:04:e8:4d:df:42:cd:aa:4f:c3:30:00:cd:
         95:6a:f6:c3:d6:05:4c:de:f7:bf:2b:b0:eb:2b:2a:c1:24:fe:
         28:9e:d4:0a:b9:f2:2b:a5:47:82:51:7b:e0:33:00:27:5b:4d:
         f0:ad:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:54 2026 by rpki-client