Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File:                     iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier:          TuXth122ItpjEw9VKAM0++OmGF+rCpSl4MUIPciku94=
Subject key identifier:   CE:B7:6E:68:DA:10:63:60:8C:BC:6D:ED:15:C6:44:37:79:1F:07:8F
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer:       /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number:          01F1
Signing time:             Fri 17 Apr 2026 03:03:40 +0000
Manifest this update:     Fri 17 Apr 2026 03:03:40 +0000
Manifest next update:     Fri 24 Apr 2026 03:03:40 +0000
Files and hashes:         1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: KSKbbP3lpGLSYS42lwzvIwalpF6/KxQYotekOlHRio8=)
                          2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: hqi4EfEByf7DRDdVKKEhuybFmu2vxbKyTHgj9BM/DRw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
                          rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:03:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
        Validity
            Not Before: Apr 17 03:03:40 2026 GMT
            Not After : Apr 24 03:03:40 2026 GMT
        Subject: CN=69e1a30c-1721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2a:54:3d:c9:ae:2e:7e:2d:3f:a8:b6:18:af:
                    b8:5c:d7:77:ba:76:c6:80:9d:be:9c:41:c2:22:8a:
                    75:ad:37:a1:60:35:e2:45:a6:bf:f6:84:26:3f:c4:
                    0d:6f:b2:9e:4b:c2:85:3a:cf:89:45:fc:55:9b:c5:
                    bd:df:05:ad:26:7c:a8:6d:18:f2:61:ba:37:1b:9f:
                    a2:b7:d4:f6:58:04:05:d2:ef:66:b1:30:0e:65:c8:
                    c7:4a:de:4f:20:e0:23:e2:a4:7c:77:6c:4f:e6:a8:
                    e3:eb:45:82:c5:20:99:40:30:f1:27:fc:42:9f:8a:
                    22:1c:17:a2:ef:a3:cb:c5:74:21:40:e8:c0:1a:fc:
                    44:37:16:4d:85:0f:9a:e8:07:43:87:cf:00:4d:1a:
                    75:8d:a2:05:38:d2:11:9e:35:1d:b3:f7:b9:b9:77:
                    99:a9:da:14:98:53:9f:ff:f6:51:a1:3a:8f:4d:e9:
                    ba:37:c1:2a:8f:22:9b:cf:fa:25:96:21:c7:00:db:
                    a5:93:0c:3c:6d:79:a4:f7:0c:ad:ef:60:c8:e4:f9:
                    2c:53:e2:66:b5:49:f6:0e:14:07:54:bf:b0:91:d8:
                    27:46:1b:50:06:93:68:ab:5a:4b:ea:1a:76:a2:ba:
                    f4:db:98:d8:b5:cb:13:99:4b:42:93:e1:1b:37:e9:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:6E:68:DA:10:63:60:8C:BC:6D:ED:15:C6:44:37:79:1F:07:8F
            X509v3 Authority Key Identifier:
                keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:42:74:b4:57:9f:73:18:e6:24:66:d7:5b:22:5c:9f:00:77:
         aa:6a:df:db:e8:b2:d9:e4:1a:cc:a3:cc:87:fd:51:e9:89:04:
         6c:3e:bb:44:14:54:b2:31:2a:74:34:1d:de:93:a4:d5:05:b9:
         ad:3b:9d:e1:35:6e:c8:a0:76:82:a5:11:6c:10:f9:7a:0a:f8:
         0f:f5:fc:e1:66:e4:26:9c:92:b7:e8:1c:d5:52:14:3e:36:eb:
         8f:2a:db:f3:25:f6:b1:4a:fe:34:bd:f2:f5:b8:26:c3:de:c5:
         8a:6b:76:a2:bd:ec:51:58:dc:f4:1c:2d:f2:19:31:39:96:34:
         d4:03:5f:2b:fe:bd:b8:72:9b:83:12:fc:bb:75:f6:69:f2:63:
         31:3c:f7:93:ec:3b:b0:3a:97:37:9a:b1:7b:20:c1:50:9f:f9:
         97:d4:49:c9:de:f5:2a:8c:ea:07:a3:fe:69:5f:f0:76:cf:c0:
         fa:21:42:d9:d1:16:cf:9b:70:3f:ba:56:fb:20:67:2f:c9:82:
         b2:ac:de:e9:5e:05:37:0a:53:df:47:5f:5c:2a:00:1b:ad:4c:
         56:c0:71:38:56:6f:4e:d6:7b:6e:6c:4a:c8:97:7c:ff:53:ee:
         0f:3b:33:5d:5e:9c:18:7e:a9:51:48:6c:0c:5b:c5:52:c3:03:
         2c:fb:e1:3d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY2RTQxMTAvBgNVBAUTKDg4NEI2MTI5QThEQTk4Mjk2NzE0QzUzQTVBMTI4MEZE
MTAxOUY4QTMwHhcNMjYwNDE3MDMwMzQwWhcNMjYwNDI0MDMwMzQwWjAYMRYwFAYD
VQQDEw02OWUxYTMwYy0xNzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ipUPcmuLn4tP6i2GK+4XNd3unbGgJ2+nEHCIop1rTehYDXiRaa/9oQmP8QN
b7KeS8KFOs+JRfxVm8W93wWtJnyobRjyYbo3G5+it9T2WAQF0u9msTAOZcjHSt5P
IOAj4qR8d2xP5qjj60WCxSCZQDDxJ/xCn4oiHBei76PLxXQhQOjAGvxENxZNhQ+a
6AdDh88ATRp1jaIFONIRnjUds/e5uXeZqdoUmFOf//ZRoTqPTem6N8EqjyKbz/ol
liHHANulkww8bXmk9wyt72DI5PksU+JmtUn2DhQHVL+wkdgnRhtQBpNoq1pL6hp2
orr025jYtcsTmUtCk+EbN+kAxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM63bmja
EGNgjLxt7RXGRDd5HwePMB8GA1UdIwQYMBaAFIhLYSmo2pgpZxTFOloSgP0QGfij
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjZFNC9DQTgxRDlGRTRF
MTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1DbG5GTVU2V2hLQV9SQVot
S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lFdGhLYWphbUNsbkZNVTZXaEtBX1JBWi1LTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RjZFNC9DQTgxRDlGRTRFMTAxMUVFOUZFMEJEMjZDNEY5QUUwMi9pRXRoS2FqYW1D
bG5GTVU2V2hLQV9SQVotS00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ0J0tFefcxjmJGbXWyJcnwB3qmrf2+iy2eQazKPMh/1R6YkEbD67RBRUsjEq
dDQd3pOk1QW5rTud4TVuyKB2gqURbBD5egr4D/X84WbkJpySt+gc1VIUPjbrjyrb
8yX2sUr+NL3y9bgmw97Fimt2or3sUVjc9Bwt8hkxOZY01ANfK/69uHKbgxL8u3X2
afJjMTz3k+w7sDqXN5qxeyDBUJ/5l9RJyd71KozqB6P+aV/wds/A+iFC2dEWz5tw
P7pW+yBnL8mCsqze6V4FNwpT30dfXCoAG61MVsBxOFZvTtZ7bmxKyJd8/1PuDzsz
XV6cGH6pUUhsDFvFUsMDLPvhPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:07 2026 by rpki-client