Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
File:                     EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft (raw, json)
Hash identifier:          hazUOd4CtpfSudiqVMvzkpd63cFKQJ39/UDcLOVtQzA=
Subject key identifier:   5B:0F:48:74:EA:25:5F:C6:C5:66:CC:73:F9:23:D3:AA:FD:41:5B:F5
Authority key identifier: 12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0
Certificate issuer:       /CN=A913C07A/serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
Certificate serial:       01DD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
Manifest number:          01D7
Signing time:             Mon 27 Jul 2026 05:18:59 +0000
Manifest this update:     Mon 27 Jul 2026 05:18:58 +0000
Manifest next update:     Mon 03 Aug 2026 05:18:58 +0000
Files and hashes:         1: EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl (hash: 1G49TcN+MmpW8/haAdD2ub/dpB0H7uCBmsg3tOowrAc=)
                          2: A1456A4CBE6811EEBFF35870C4F9AE02.roa (hash: sg5RK8LADXzmH369qo3Kwz612CokrUc7M6Afz3E8p9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl
                          rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C07A, serialNumber=1218DE75B2588B6633A6BF88CD388F31C43AC9C0
        Validity
            Not Before: Jul 27 05:18:58 2026 GMT
            Not After : Aug  3 05:18:58 2026 GMT
        Subject: CN=6a66ea43-48b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:65:cc:89:06:81:fe:91:f8:a4:3e:0d:e4:
                    53:30:44:82:9b:ba:5e:c8:c4:dd:bb:fa:24:4d:60:
                    a4:3d:33:bd:9f:95:56:8f:46:3e:94:ba:5c:93:eb:
                    b3:0c:a1:ba:45:e5:ab:72:79:c4:2e:ae:a7:9b:e4:
                    0c:16:6e:9a:5a:38:c7:3f:ac:a7:60:f2:ab:ab:09:
                    bf:47:db:bb:5c:04:2f:7c:a7:c7:58:c6:d6:00:22:
                    cb:b8:6e:25:e2:d1:20:d7:e8:19:97:1c:ac:7e:ad:
                    26:97:85:84:a4:2c:33:db:74:ff:9b:4d:28:81:fc:
                    c5:e9:21:b8:96:65:ee:ac:19:e5:1c:3f:9f:b1:3e:
                    20:1e:b5:b1:8d:97:66:de:4f:c7:b2:45:a8:94:92:
                    03:60:05:d6:86:55:34:79:52:cb:dd:a0:ac:41:4e:
                    da:40:0c:cc:cd:03:87:fb:8a:81:8e:7b:8f:bb:44:
                    cb:6d:4f:b9:cf:cb:67:0a:84:9d:bd:f4:2c:98:cc:
                    c3:a8:30:d2:02:1b:d0:97:5d:8f:15:10:28:1a:21:
                    a1:91:00:6c:8f:60:da:e7:1e:03:5c:fb:3a:0a:d9:
                    03:29:37:39:fd:66:2b:a6:60:54:5b:bc:c1:a3:4f:
                    a1:0a:de:31:b0:c5:13:a9:e4:8f:27:7b:39:9f:0d:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0F:48:74:EA:25:5F:C6:C5:66:CC:73:F9:23:D3:AA:FD:41:5B:F5
            X509v3 Authority Key Identifier:
                keyid:12:18:DE:75:B2:58:8B:66:33:A6:BF:88:CD:38:8F:31:C4:3A:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C07A/F142614ABE6711EEB33C6D6EC4F9AE02/EhjedbJYi2Yzpr-IzTiPMcQ6ycA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a9:f5:70:cb:17:41:43:a0:1e:62:49:6b:dd:50:ce:27:66:
         0e:88:96:ad:80:fa:19:d7:11:d5:4f:56:92:19:9c:1f:18:99:
         74:ea:3a:e8:39:d9:2a:05:ba:72:47:6a:51:00:1d:ff:2e:64:
         1e:28:ce:ef:74:25:d1:e6:32:8e:a8:12:5c:54:ee:52:75:ad:
         bc:75:32:16:39:a4:1a:13:1b:ec:11:bd:3b:16:a5:3e:fa:99:
         ad:b7:5e:3e:16:48:b9:97:b4:51:fe:48:e7:e4:09:0f:53:5c:
         4a:9e:c9:6b:96:d9:fe:a8:2b:b1:c2:81:af:5c:e5:60:8c:e1:
         1b:38:ff:47:cc:9f:e8:f1:e2:b7:5d:fa:59:95:ac:a5:4d:c6:
         ea:d2:e3:c9:c9:99:87:ba:41:4b:9a:04:4b:83:58:25:0a:5c:
         77:1f:c4:c3:92:07:e3:0c:2e:1f:f4:59:0d:2c:e2:7f:e8:54:
         fb:12:c7:bf:c2:ad:e6:24:7b:08:59:a5:a2:38:b5:a8:aa:ea:
         c4:89:c7:24:63:e5:53:09:31:b0:78:fe:d0:2b:43:64:9a:5c:
         41:a2:67:5b:9a:73:7e:f5:78:ed:da:48:63:5b:6d:71:4a:f3:
         db:cd:09:f6:10:f6:15:43:0d:ec:66:84:1c:48:45:f7:5f:7d:
         74:9f:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:28 2026 by rpki-client