Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
File:                     epYXaVSeCq0Km_mSVoO673M6Lxo.mft (raw, json)
Hash identifier:          pOGWgivMZ2wiWEKd5KRZQWWntIexDxHNCCXddogZ5Xc=
Subject key identifier:   EF:CE:3D:44:C6:98:99:B4:41:04:E1:48:AE:91:B1:9A:ED:4C:D5:9E
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       35F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
Manifest number:          359F
Signing time:             Tue 28 Jul 2026 15:10:55 +0000
Manifest this update:     Tue 28 Jul 2026 15:10:55 +0000
Manifest next update:     Tue 04 Aug 2026 15:10:55 +0000
Files and hashes:         1: epYXaVSeCq0Km_mSVoO673M6Lxo.crl (hash: EXJn7tRwkoWgD9ZM6/Uo0oRxZu0kHpCdm5ptntEgP4w=)
                          2: A50EE218C34D11EEBC95A913C4F9AE02.roa (hash: cYXAizbDFkYc4+qxaI9fGjQHetEUsCO8dm+QjI7b2mE=)
                          3: DC67BC1E8E1A11F08364EF73C4F9AE02.roa (hash: 7mgw4y6gg1SBlVNEQHsCERtFq1CWUXWcJo30iKspb4c=)
                          4: DA202262C34F11EE93BC8317C4F9AE02.roa (hash: vOyegaR5JJSUQOjhLZ6HxjzSX6xypEzpGZlpHWRdUcE=)
                          5: 61A65BF2C35011EE95366E18C4F9AE02.roa (hash: guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=)
                          6: 1EEE3E0AC35111EE9D744F36C4F9AE02.roa (hash: mRHLmD+WT0k5/h+bHDnrdCDBqIL+VXOXAAhCSmlrQck=)
                          7: 1A83389CC35211EE8CE04C38C4F9AE02.roa (hash: G3AZcfArLBgVhuokmF/dQxJk3out8og0ZVXYVtVJ8gU=)
                          8: A9B6556E064311F0BA61C549C4F9AE02.roa (hash: jTPpPZ5LH71JdUajcwKXpYreDPG+XIGjiYKM4RGwxFk=)
                          9: 1F5CD892C35111EE9D744F36C4F9AE02.roa (hash: K3NPwS93LI39vDCydod4QMQz06LNTlu8HQCmLQ09JU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13811 (0x35f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 28 15:10:55 2026 GMT
            Not After : Aug  4 15:10:55 2026 GMT
        Subject: CN=6a68c67f-8e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:9f:86:47:95:2f:5e:dd:9f:d9:3b:2a:65:
                    2d:10:85:d8:15:94:7f:9d:4a:ae:9c:21:f7:3b:9c:
                    3e:d7:be:37:e8:11:c7:4a:1b:d9:4a:47:e0:bc:d8:
                    2f:0d:88:61:0e:d7:d6:cf:ea:bc:9e:5d:94:8e:e8:
                    b0:69:45:42:6d:5a:d8:17:f6:a1:57:a4:21:81:81:
                    b8:8b:b6:a7:a4:c5:db:e8:5e:f9:7d:83:05:2f:0a:
                    de:d2:e7:5e:b0:76:03:44:d2:3b:4f:fd:77:5d:2e:
                    1f:69:26:48:3f:a4:6b:37:a5:15:c1:02:71:6c:3e:
                    35:76:96:cf:bc:4d:04:08:6b:62:f6:3a:b7:42:49:
                    4a:49:a3:88:23:51:58:76:06:2a:6f:23:db:2b:c7:
                    8d:21:53:7d:da:ab:d4:ed:14:05:8b:7c:17:34:5b:
                    28:99:7e:f0:29:a6:7d:a5:d7:90:de:eb:f2:59:a4:
                    30:9f:f0:58:96:d1:4f:8d:b3:55:7c:18:d6:43:c9:
                    cc:fc:e0:c1:10:4f:b3:78:1c:ce:6a:c6:eb:8e:45:
                    94:ee:7d:b0:7e:18:b0:27:66:6e:1e:a8:91:08:3c:
                    3f:06:c3:96:45:cf:1a:1c:33:58:28:b7:4a:65:da:
                    a8:fd:a1:34:ca:b9:a0:8b:f2:23:67:64:81:02:68:
                    93:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:3D:44:C6:98:99:B4:41:04:E1:48:AE:91:B1:9A:ED:4C:D5:9E
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:1e:7c:51:40:a5:d1:61:57:9d:de:cc:55:34:4d:dc:b5:
         77:f9:74:24:91:e9:3a:91:3d:a9:2b:5f:ba:6f:2b:7e:e5:b9:
         9b:1b:06:80:32:91:3f:59:48:2d:e1:ab:92:9c:d4:15:c2:54:
         5e:e7:41:7b:1f:a4:c0:57:21:9f:17:b2:e1:90:d2:04:35:f0:
         8e:8b:8b:44:b8:ac:9e:95:61:7d:f1:83:7f:1e:9a:3c:30:e4:
         71:04:0d:06:30:4d:a9:d4:9d:ae:f9:34:92:68:d6:0c:70:da:
         ec:4f:23:88:1d:7d:53:ec:c5:94:b0:0a:3b:6a:bb:9b:85:3e:
         bc:91:f2:e3:0a:70:30:cb:fb:50:5f:dd:29:b5:c4:95:8b:42:
         d7:45:16:94:08:d6:30:96:c7:e4:12:2a:b1:6f:f6:d1:11:34:
         18:82:be:a8:9c:69:bc:86:67:24:cc:05:c0:5f:44:56:92:ce:
         41:52:62:71:86:3e:e5:6c:dc:2b:1a:8d:0a:b2:49:20:33:ec:
         4f:06:68:0a:48:c0:b2:72:57:af:3b:3f:5a:88:ab:08:d2:cd:
         3e:1a:59:47:5d:2b:ef:16:e8:c4:0c:93:71:73:52:ab:aa:4f:
         d1:ae:a2:4a:98:97:47:f2:f3:f4:2c:95:cc:3c:b9:c6:ab:f7:
         5e:4b:04:2d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjYwNzI4MTUxMDU1WhcNMjYwODA0MTUxMDU1WjAYMRYwFAYD
VQQDEw02YTY4YzY3Zi04ZTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsr2fhkeVL17dn9k7KmUtEIXYFZR/nUqunCH3O5w+17436BHHShvZSkfgvNgv
DYhhDtfWz+q8nl2UjuiwaUVCbVrYF/ahV6QhgYG4i7anpMXb6F75fYMFLwre0ude
sHYDRNI7T/13XS4faSZIP6RrN6UVwQJxbD41dpbPvE0ECGti9jq3QklKSaOII1FY
dgYqbyPbK8eNIVN92qvU7RQFi3wXNFsomX7wKaZ9pdeQ3uvyWaQwn/BYltFPjbNV
fBjWQ8nM/ODBEE+zeBzOasbrjkWU7n2wfhiwJ2ZuHqiRCDw/BsOWRc8aHDNYKLdK
Zdqo/aE0yrmgi/IjZ2SBAmiTywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/OPUTG
mJm0QQThSK6RsZrtTNWeMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzVCMC80MEM4RDVBNjFEODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNx
MEttX21TVm9PNjczTTZMeG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjsgefFFApdFhV53ezFU0Tdy1d/l0JJHpOpE9qStfum8rfuW5mxsGgDKRP1lI
LeGrkpzUFcJUXudBex+kwFchnxey4ZDSBDXwjouLRLisnpVhffGDfx6aPDDkcQQN
BjBNqdSdrvk0kmjWDHDa7E8jiB19U+zFlLAKO2q7m4U+vJHy4wpwMMv7UF/dKbXE
lYtC10UWlAjWMJbH5BIqsW/20RE0GIK+qJxpvIZnJMwFwF9EVpLOQVJicYY+5Wzc
KxqNCrJJIDPsTwZoCkjAsnJXrzs/WoirCNLNPhpZR10r7xboxAyTcXNSq6pP0a6i
SpiXR/Lz9CyVzDy5xqv3XksELQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:49:12 2026 by rpki-client