Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
File:                     iEthKajamClnFMU6WhKA_RAZ-KM.mft (raw, json)
Hash identifier:          ib2z4LHq/JV5Q1ELEW9SdNv4jwVPRh7GM9leGAJ6NhU=
Subject key identifier:   33:33:53:3F:57:AA:BF:DF:C4:78:EA:B4:A3:49:19:FF:2D:33:E9:A2
Authority key identifier: 88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3
Certificate issuer:       /CN=A915F6E4/serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
Manifest number:          01D7
Signing time:             Sun 01 Mar 2026 04:21:03 +0000
Manifest this update:     Sun 01 Mar 2026 04:21:03 +0000
Manifest next update:     Sun 08 Mar 2026 04:21:03 +0000
Files and hashes:         1: iEthKajamClnFMU6WhKA_RAZ-KM.crl (hash: HUNvwtHlGt8CVwuHbkIbUBi45MbKElOi6pkYwb9gaQc=)
                          2: E1B42772611A11EE9022C77EC4F9AE02.roa (hash: XSFRkZJmP/HXNKWByOtON4ixbfaAh9u2jDNWWqtCP4c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl
                          rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 04:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F6E4, serialNumber=884B6129A8DA98296714C53A5A1280FD1019F8A3
        Validity
            Not Before: Mar  1 04:21:03 2026 GMT
            Not After : Mar  8 04:21:03 2026 GMT
        Subject: CN=69a3beaf-e2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7f:93:e2:70:3c:5d:60:44:9d:6b:71:73:05:
                    46:96:6f:86:bf:5e:8e:16:18:0e:ca:ff:16:31:62:
                    d2:7d:6e:c9:5a:30:47:4e:d8:2d:4b:f3:8f:48:4a:
                    92:1c:9b:2d:7e:65:bb:70:b3:3b:90:ad:7f:72:1f:
                    47:cc:ce:a7:2a:c7:2b:90:1a:54:36:37:a4:1f:c8:
                    6a:94:38:cc:73:d8:43:08:4f:46:8c:42:e5:dd:4a:
                    32:1c:82:88:23:27:ab:e8:d0:a9:b5:b8:07:1d:86:
                    43:ae:1d:c5:d0:33:4a:0a:71:e8:ac:e0:a1:47:f8:
                    cc:4b:79:ce:ab:ce:02:b9:e1:d4:f6:3b:69:1a:19:
                    4d:2d:40:57:eb:b2:23:a5:89:b9:f1:c2:8b:bb:57:
                    6e:09:d1:05:d0:dd:14:99:0f:a5:8e:37:38:cb:84:
                    d9:82:2f:56:fa:45:6d:cc:12:85:54:e0:e1:bc:d4:
                    60:a9:a6:b0:37:61:46:95:e0:b2:f3:f3:30:69:a9:
                    d2:5f:b1:13:fc:b8:67:0d:d3:7a:05:b1:6c:1a:18:
                    41:9b:01:76:c4:ef:8a:bf:17:f5:5c:09:a1:92:b1:
                    cb:8b:bd:92:30:9f:4b:e2:08:18:66:83:6a:70:d8:
                    7e:e4:7f:a8:a1:d5:4a:26:8e:fb:56:5a:7e:43:c0:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:33:53:3F:57:AA:BF:DF:C4:78:EA:B4:A3:49:19:FF:2D:33:E9:A2
            X509v3 Authority Key Identifier:
                keyid:88:4B:61:29:A8:DA:98:29:67:14:C5:3A:5A:12:80:FD:10:19:F8:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEthKajamClnFMU6WhKA_RAZ-KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F6E4/CA81D9FE4E1011EE9FE0BD26C4F9AE02/iEthKajamClnFMU6WhKA_RAZ-KM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:7f:58:1f:44:f5:87:87:42:da:49:1b:25:18:47:fa:01:
         a8:7f:8f:ab:6d:ea:79:b6:1c:97:64:d3:ab:df:c9:6b:b2:ba:
         b1:4a:44:8f:6b:0c:42:71:ed:c9:66:a9:8b:4e:8c:ee:d0:da:
         4d:54:3e:fd:3f:45:2d:d6:72:ed:97:6f:29:31:6e:1c:10:62:
         da:71:0f:10:53:17:25:63:97:f9:cd:f1:67:73:97:72:5c:c3:
         20:1a:ab:10:ba:48:fa:85:53:c6:b1:7e:c1:2e:4e:32:33:5a:
         c8:33:e9:5c:df:2a:59:8b:18:48:dd:e3:33:93:8d:9b:92:83:
         f9:d7:11:f3:ea:b7:68:09:3d:1a:ca:93:f0:8f:14:75:48:9d:
         fe:ca:99:2f:c9:9d:44:57:04:24:77:b9:4e:64:36:1d:f5:43:
         8e:35:4e:94:63:54:04:95:43:4d:c7:54:f9:29:11:da:c8:64:
         a9:04:6c:ae:ac:ea:1a:56:29:06:b5:6b:00:62:c0:a4:08:20:
         45:bf:a7:68:f4:e6:87:99:86:4a:89:cd:dd:2a:03:53:70:33:
         32:c2:41:25:08:1c:ea:90:3c:a0:c2:05:62:1c:97:90:61:9f:
         8b:1b:08:c8:66:bd:b2:f8:82:2b:71:5c:29:fe:41:d8:6f:ad:
         a9:02:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:29 2026 by rpki-client