Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft
File:                     eg_QMrwoEhCzyVIrRxWNVszepgo.mft (raw, json)
Hash identifier:          /sDtQ/KqASksXcFdybRCXlaTd24ztJixL1tJSYq/ns4=
Subject key identifier:   D6:AA:B1:33:E8:5B:79:D9:99:00:64:AA:3C:D3:24:B0:A7:83:E4:D1
Authority key identifier: 7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A
Certificate issuer:       /CN=A912582A/serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft
Manifest number:          01C6
Signing time:             Mon 27 Jul 2026 05:34:17 +0000
Manifest this update:     Mon 27 Jul 2026 05:34:17 +0000
Manifest next update:     Mon 03 Aug 2026 05:34:17 +0000
Files and hashes:         1: eg_QMrwoEhCzyVIrRxWNVszepgo.crl (hash: KL2Q1HTKro11ZbIZ5/eXgnNZ5VlcagxXuG5ceLqwiL4=)
                          2: 2BB37D0641FB11F0AF4AA817C4F9AE02.roa (hash: WEj/U7v83VyKKCx9Gnf7AJFwy6TYRGRdTmVzul4KGY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl
                          rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912582A, serialNumber=7A0FD032BC281210B3C9522B47158D56CCDEA60A
        Validity
            Not Before: Jul 27 05:34:17 2026 GMT
            Not After : Aug  3 05:34:17 2026 GMT
        Subject: CN=6a66edd9-9fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:da:41:12:43:1a:a0:68:d1:9c:d7:2d:11:
                    1d:f2:1f:54:d3:12:f8:5f:6c:5e:f6:51:5f:53:de:
                    80:e3:c2:d4:80:78:68:2e:93:b9:9f:f9:69:2c:77:
                    dc:93:18:28:a7:b5:42:73:3e:83:5c:3c:75:33:3d:
                    00:90:46:96:0a:d8:2c:9c:1c:d8:88:6a:60:4e:13:
                    71:39:91:60:d1:7a:c1:e4:34:47:70:98:5c:b1:c9:
                    c2:82:b3:7b:54:62:2c:ea:5f:c3:fe:80:8a:b0:8e:
                    aa:d9:b8:6e:5c:fd:5e:e5:f4:5e:85:5f:08:29:eb:
                    86:56:8d:6f:e0:b7:1c:35:65:bb:c4:93:a4:62:d1:
                    40:5a:54:92:b7:1a:3d:45:b0:77:1f:5f:42:5c:e3:
                    3e:77:86:dc:33:c0:da:80:56:e3:6c:88:ea:80:ba:
                    bd:18:57:74:c1:79:9f:51:18:8a:3b:98:c7:01:16:
                    9f:d0:c6:8d:35:47:b0:7f:2d:f2:66:07:ec:10:fc:
                    1b:66:ad:df:20:02:7b:13:ed:7f:9c:1d:e7:29:57:
                    c8:07:f2:b7:4a:e9:18:30:46:12:8c:51:7b:ce:56:
                    65:ba:1f:32:71:af:82:76:64:2d:93:de:9f:99:21:
                    91:a0:3b:06:ea:34:5f:e1:e2:8f:97:fa:dd:5e:dd:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AA:B1:33:E8:5B:79:D9:99:00:64:AA:3C:D3:24:B0:A7:83:E4:D1
            X509v3 Authority Key Identifier:
                keyid:7A:0F:D0:32:BC:28:12:10:B3:C9:52:2B:47:15:8D:56:CC:DE:A6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eg_QMrwoEhCzyVIrRxWNVszepgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912582A/78D7496EDDE811EEA3B0E713C4F9AE02/eg_QMrwoEhCzyVIrRxWNVszepgo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:49:a1:42:bc:1d:2e:80:5a:2f:3f:e3:cb:36:5f:a2:f3:1b:
         e8:3a:c0:0a:23:ee:70:94:44:ae:92:60:12:f5:2f:1f:78:c0:
         24:32:93:94:a3:45:2b:d8:32:80:e3:70:31:10:21:50:d4:93:
         07:83:a0:17:44:fc:c9:20:6e:0b:80:1f:eb:0a:6c:6e:d7:0a:
         a9:5d:20:9e:e1:a0:6e:b6:c5:10:14:a3:3f:d1:7c:f0:7b:6b:
         a1:64:eb:a5:d1:5f:11:56:6b:6c:3a:58:50:48:ad:a8:39:8a:
         e8:02:0e:ca:0f:97:06:79:d6:94:8a:60:86:41:51:5f:32:26:
         17:3a:7b:fe:25:65:80:f8:8f:86:b3:b4:c5:f6:c9:0a:4d:74:
         d8:be:ce:71:81:46:30:40:4c:41:3d:80:8e:4a:8e:aa:7f:af:
         1e:ad:b9:70:ea:d8:be:3e:91:64:26:c0:cd:f6:94:08:fe:03:
         d5:cf:52:84:1a:14:28:63:d0:1b:e4:c7:30:99:db:a3:16:38:
         08:36:6f:3d:50:d0:93:25:0f:ac:bc:56:0b:d8:0c:a4:c0:8c:
         c3:63:a1:99:49:7d:21:77:c2:70:48:bc:90:b1:a4:eb:9d:7d:
         a1:c7:fe:f3:c9:0b:f8:ac:4f:fe:a1:f2:1b:c0:dc:8b:96:2b:
         d1:2e:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:43 2026 by rpki-client