Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
File:                     Epbn674wET_h0_KXMDOkyzEUSB0.mft (raw, json)
Hash identifier:          hRGEDMhmwKWKIW2fz/maLzkMzTIpH10yAi9OHqC4les=
Subject key identifier:   F1:70:79:BB:7D:3E:93:2D:9B:A8:23:BF:79:93:F7:DF:1A:81:3D:D2
Authority key identifier: 12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D
Certificate issuer:       /CN=A9160DEB/serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
Certificate serial:       020D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
Manifest number:          0207
Signing time:             Mon 27 Jul 2026 04:40:46 +0000
Manifest this update:     Mon 27 Jul 2026 04:40:45 +0000
Manifest next update:     Mon 03 Aug 2026 04:40:45 +0000
Files and hashes:         1: Epbn674wET_h0_KXMDOkyzEUSB0.crl (hash: cdIDD8AK3M9d8OFthesiL6zdSnB6xh3htvafVI7Zezs=)
                          2: F0E06498748B11EE92D55F6AC4F9AE02.roa (hash: DXyPsBb+TauSinAKSbTPrnscbrr/NLc4whMOIpsP9Xk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl
                          rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 04:40:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 525 (0x20d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160DEB, serialNumber=1296E7EBBE30113FE1D3F2973033A4CB3114481D
        Validity
            Not Before: Jul 27 04:40:45 2026 GMT
            Not After : Aug  3 04:40:45 2026 GMT
        Subject: CN=6a66e14e-bf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:43:d6:13:70:cb:54:4c:fc:cd:59:e0:4b:95:
                    17:e2:5a:1d:cf:19:c9:99:8a:7e:5f:e4:7e:c7:73:
                    9d:cd:4f:a8:49:e9:79:a0:4b:af:59:b7:fb:5d:c7:
                    71:f9:f2:06:dc:28:bb:96:6b:b4:10:0f:6e:ae:5e:
                    45:61:f1:8d:41:0d:3f:07:94:ea:63:47:91:70:d1:
                    0d:40:26:89:d7:61:b7:29:f1:6d:fd:56:c1:10:c0:
                    d6:fc:03:e2:cf:0b:8b:17:4a:25:e7:37:51:09:64:
                    bf:1d:24:49:40:18:ad:b7:0b:d1:98:24:96:2d:df:
                    14:a9:c4:0c:01:de:c8:6c:46:90:73:7f:cd:0d:b0:
                    ca:35:23:8c:64:35:2d:97:98:1b:b3:ff:7b:73:61:
                    6c:57:fc:7b:27:0f:cc:94:7d:7e:ef:62:23:62:7f:
                    fa:d7:4a:4b:01:7f:bf:b2:ae:3a:38:f0:11:f0:f3:
                    18:f6:59:44:b7:a8:e0:fd:64:b2:b0:53:bd:66:9e:
                    2e:a6:79:13:02:92:05:bf:dc:0f:93:08:1b:00:f0:
                    23:37:74:2d:7e:9c:21:e1:df:a0:ab:48:c7:36:ff:
                    54:4a:f4:4a:fb:1a:5c:fb:f1:4d:9a:ca:46:0d:4a:
                    87:8f:84:a3:31:46:14:44:2f:23:83:1b:98:92:c7:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:70:79:BB:7D:3E:93:2D:9B:A8:23:BF:79:93:F7:DF:1A:81:3D:D2
            X509v3 Authority Key Identifier:
                keyid:12:96:E7:EB:BE:30:11:3F:E1:D3:F2:97:30:33:A4:CB:31:14:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Epbn674wET_h0_KXMDOkyzEUSB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DEB/A331F474726911EEA3F8E757C4F9AE02/Epbn674wET_h0_KXMDOkyzEUSB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:26:cd:cb:1e:61:6f:3f:3d:66:3d:51:7d:da:78:53:5b:60:
         ee:11:6c:d8:fe:2a:00:f4:61:14:10:a4:c0:76:aa:c9:6b:86:
         af:b1:58:70:d9:20:3b:dd:05:e8:34:3e:3e:95:1c:69:e0:25:
         f9:db:ff:ac:ca:ec:d8:c4:dd:7f:2c:7b:18:cb:bc:36:ba:61:
         2f:0b:55:32:fe:db:58:59:86:2d:72:5e:74:94:43:a1:1f:62:
         dd:11:a5:bf:0b:c0:c5:83:67:78:d8:26:84:27:7c:e0:30:bc:
         be:26:86:2b:98:cc:ab:a7:4b:fb:1a:45:9b:ac:01:5b:29:87:
         18:1c:f0:35:c2:e9:b2:c5:5f:a2:f4:1a:bd:66:b0:dc:35:ad:
         1b:17:29:ee:31:78:e4:de:ba:ee:38:18:ff:c2:9b:ad:15:68:
         d3:5d:dd:a3:62:3c:ee:d8:7a:4a:7a:8c:9f:86:74:57:f2:84:
         cb:77:7a:f6:39:2f:4d:71:6c:bd:a8:f2:34:1b:fd:8b:15:2c:
         d5:c6:b0:97:3e:63:2a:f5:80:98:a0:d4:67:54:ab:71:e2:30:
         9f:4c:9a:ef:29:8c:6f:e8:e3:5e:87:75:57:88:f8:a2:aa:79:
         43:71:b3:29:1e:c4:7a:16:76:b3:3c:96:dd:96:dc:ef:58:3e:
         6a:cb:61:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:12:13 2026 by rpki-client