Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
File:                     EK5_oM-c-qh-uthEzYxCasHDpec.mft (raw, json)
Hash identifier:          A40LAeiaBcj6PeYOK4vydqIs0QEmOjHCRgm4ufbOLmE=
Subject key identifier:   99:72:27:24:DF:E1:F9:82:C6:99:7C:97:33:FC:35:4F:C9:64:4E:43
Authority key identifier: 10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7
Certificate issuer:       /CN=A9123BFF/serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
Certificate serial:       2157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
Manifest number:          214B
Signing time:             Tue 28 Jul 2026 16:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:02 +0000
Manifest next update:     Tue 04 Aug 2026 16:01:02 +0000
Files and hashes:         1: EK5_oM-c-qh-uthEzYxCasHDpec.crl (hash: jXjCFKS+7A3Q/kJFfY6p8NM2Ve1O0Z/FTDH7pJpZgJM=)
                          2: 449C08948D1211EBB9548186C4F9AE02.roa (hash: CbaVakrw0TtkU+Q7XuwXMaUsEoO5bFQk16pQPN02uwc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl
                          rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8535 (0x2157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123BFF, serialNumber=10AE7FA0CF9CFAA87EBAD844CD8C426AC1C3A5E7
        Validity
            Not Before: Jul 28 16:01:02 2026 GMT
            Not After : Aug  4 16:01:02 2026 GMT
        Subject: CN=6a68d23e-8431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:c2:f0:38:df:0f:96:c9:46:dc:03:3e:b7:
                    b2:8a:26:ee:4f:78:d2:90:89:d3:23:6b:ab:52:ef:
                    f9:63:9d:5f:3e:75:af:18:d3:75:dd:5e:f3:b9:95:
                    85:c8:16:48:52:b1:64:fc:18:e5:7f:03:28:0a:83:
                    20:1d:1f:30:61:5b:a0:04:cb:61:fa:12:f9:f8:33:
                    e7:09:6e:7b:2f:94:08:91:68:b2:88:9a:6f:5c:56:
                    05:7c:61:ad:7a:52:b9:c6:70:fa:dc:bf:2a:4b:97:
                    c1:c9:24:97:e0:c0:d3:b0:ed:7c:f2:ec:88:92:b7:
                    e1:8b:59:be:49:7e:2d:1c:fc:ef:b7:27:7c:c5:be:
                    d9:50:1d:df:a4:09:ba:c4:51:d6:1b:f4:e4:c3:78:
                    36:4e:a4:51:e1:25:a9:67:e7:92:85:29:0c:48:85:
                    aa:49:bc:c4:b6:6a:91:22:97:7b:e3:e0:4b:0c:34:
                    0a:23:27:ba:a7:33:0f:16:62:92:44:c3:d3:ed:fe:
                    58:d8:33:b6:1f:57:7d:e7:61:31:2e:96:c0:b2:73:
                    b6:5e:e1:0d:31:92:91:e7:d1:ae:7e:41:35:d5:47:
                    e7:9a:02:5c:b7:b8:44:4e:9f:72:ea:e7:c0:c5:2b:
                    75:4a:27:47:f0:43:02:65:c9:5d:e1:0b:a9:3a:d6:
                    22:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:72:27:24:DF:E1:F9:82:C6:99:7C:97:33:FC:35:4F:C9:64:4E:43
            X509v3 Authority Key Identifier:
                keyid:10:AE:7F:A0:CF:9C:FA:A8:7E:BA:D8:44:CD:8C:42:6A:C1:C3:A5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EK5_oM-c-qh-uthEzYxCasHDpec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/F290829A10DA11E685C4BB3DC4F9AE02/EK5_oM-c-qh-uthEzYxCasHDpec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:39:bb:dc:18:d6:47:9c:53:4b:29:2e:29:58:23:e1:ac:e7:
         a1:f5:d3:64:33:1f:f9:6b:f9:5f:85:b2:0b:23:76:71:80:1a:
         a0:18:bb:7b:e8:75:ec:72:f1:48:76:12:91:cf:15:2a:08:d8:
         58:3b:66:6e:b1:2e:29:26:7e:bf:1e:7e:42:22:59:00:55:a1:
         55:18:e9:91:89:37:21:d5:86:f7:8f:0e:95:08:a2:39:b0:b5:
         8f:42:6f:5f:a1:27:6a:d2:c2:4d:c1:27:eb:63:79:34:08:ef:
         7a:96:fe:30:6f:cf:57:0c:24:b1:c7:82:3b:d3:cf:17:f6:8f:
         54:f2:db:d8:a1:98:7e:85:62:bc:b5:8e:62:1f:f2:fa:a7:da:
         9d:77:a8:3d:17:fd:40:ff:83:54:a8:c4:c4:de:d3:78:f6:67:
         b0:72:c4:12:b1:d9:c1:84:53:a6:cd:67:cc:97:7d:67:d2:6a:
         04:47:1a:ea:25:11:93:1f:60:ac:25:88:98:b0:2e:3e:64:9b:
         b4:50:ab:0a:e4:c0:cf:2b:46:06:56:86:8a:b6:72:c6:c8:7d:
         42:29:df:53:08:02:f4:9f:d8:5f:f5:d1:b3:c4:de:a1:7e:0a:
         c9:bf:f8:47:84:fb:75:85:6b:78:8a:b8:5d:00:19:ac:9d:42:
         0a:93:e0:b0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjNCRkYxMTAvBgNVBAUTKDEwQUU3RkEwQ0Y5Q0ZBQTg3RUJBRDg0NENEOEM0MjZB
QzFDM0E1RTcwHhcNMjYwNzI4MTYwMTAyWhcNMjYwODA0MTYwMTAyWjAYMRYwFAYD
VQQDEw02YTY4ZDIzZS04NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo4nC8DjfD5bJRtwDPreyiibuT3jSkInTI2urUu/5Y51fPnWvGNN13V7zuZWF
yBZIUrFk/BjlfwMoCoMgHR8wYVugBMth+hL5+DPnCW57L5QIkWiyiJpvXFYFfGGt
elK5xnD63L8qS5fBySSX4MDTsO188uyIkrfhi1m+SX4tHPzvtyd8xb7ZUB3fpAm6
xFHWG/Tkw3g2TqRR4SWpZ+eShSkMSIWqSbzEtmqRIpd74+BLDDQKIye6pzMPFmKS
RMPT7f5Y2DO2H1d952ExLpbAsnO2XuENMZKR59GufkE11UfnmgJct7hETp9y6ufA
xSt1SidH8EMCZcld4QupOtYi1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJlyJyTf
4fmCxpl8lzP8NU/JZE5DMB8GA1UdIwQYMBaAFBCuf6DPnPqofrrYRM2MQmrBw6Xn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi9GMjkwODI5QTEw
REExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1xaC11dGhFell4Q2FzSERw
ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VLNV9vTS1jLXFoLXV0aEV6WXhDYXNIRHBlYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
M0JGRi9GMjkwODI5QTEwREExMUU2ODVDNEJCM0RDNEY5QUUwMi9FSzVfb00tYy1x
aC11dGhFell4Q2FzSERwZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA1jm73BjWR5xTSykuKVgj4aznofXTZDMf+Wv5X4WyCyN2cYAaoBi7e+h17HLx
SHYSkc8VKgjYWDtmbrEuKSZ+vx5+QiJZAFWhVRjpkYk3IdWG948OlQiiObC1j0Jv
X6EnatLCTcEn62N5NAjvepb+MG/PVwwksceCO9PPF/aPVPLb2KGYfoVivLWOYh/y
+qfanXeoPRf9QP+DVKjExN7TePZnsHLEErHZwYRTps1nzJd9Z9JqBEca6iURkx9g
rCWImLAuPmSbtFCrCuTAzytGBlaGirZyxsh9QinfUwgC9J/YX/XRs8TeoX4Kyb/4
R4T7dYVreIq4XQAZrJ1CCpPgsA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:25:37 2026 by rpki-client