Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
File:                     eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft (raw, json)
Hash identifier:          ua5TzNKAa5SW2hyJhEqSWi3LLt3Z/Tzt/9R2bVL/dY8=
Subject key identifier:   E8:9C:89:A6:3A:2E:F0:55:3A:75:73:9C:CB:13:B5:FC:66:53:C2:E9
Authority key identifier: 79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A
Certificate issuer:       /CN=A9175FF2/serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
Certificate serial:       024A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
Manifest number:          0245
Signing time:             Mon 27 Jul 2026 03:54:42 +0000
Manifest this update:     Mon 27 Jul 2026 03:54:42 +0000
Manifest next update:     Mon 03 Aug 2026 03:54:42 +0000
Files and hashes:         1: eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl (hash: Is6fM03iD99LQgk8qxFNscuakr/iFeN1XAUe76mz5EI=)
                          2: ACC372FE0F4211EE97A24686C4F9AE02.roa (hash: ndu4mgSQM3DACuyqK9fSXueNEcWTd56NuNmOeSBu16I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl
                          rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 03:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175FF2, serialNumber=7952825D2E18FF061B9B36BD6634212D2DF1BF3A
        Validity
            Not Before: Jul 27 03:54:42 2026 GMT
            Not After : Aug  3 03:54:42 2026 GMT
        Subject: CN=6a66d682-df95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:fb:0e:70:4d:05:03:30:e9:28:7f:cd:02:
                    66:bb:b3:c0:df:b9:95:50:99:0b:81:30:65:fa:79:
                    5c:8e:c5:ba:48:ac:60:d3:e3:17:89:f1:1d:c8:df:
                    86:db:79:df:11:0f:8c:1f:12:ba:ac:39:75:ac:ea:
                    17:f3:2e:05:d0:7a:07:c7:a0:ee:77:dc:97:50:d0:
                    62:ca:ca:43:e5:0f:a6:18:95:39:eb:66:2e:3a:00:
                    85:ae:28:e7:fd:2a:82:0a:65:4a:e8:a4:99:9c:ec:
                    b7:59:b7:ab:e6:77:36:86:4e:63:9e:c1:60:03:15:
                    86:30:7f:3a:cc:a3:eb:4c:ab:35:23:f7:26:8b:48:
                    79:8c:dd:dd:7c:74:59:4a:03:af:e8:25:94:67:56:
                    34:ac:91:0f:c7:08:5e:f4:98:8f:df:f3:8f:a6:a8:
                    01:07:7e:f3:fa:02:b9:27:4b:37:ab:9d:db:27:94:
                    3d:ab:ca:b2:97:99:df:c7:a2:44:18:cc:c3:23:a9:
                    bd:72:a0:d7:fc:0d:ed:6e:92:81:b1:f0:43:23:37:
                    ca:ce:3b:e7:70:3f:02:c5:12:4f:b7:92:52:35:2c:
                    b9:24:c7:53:38:f5:bc:f2:f9:a4:3e:51:c5:14:8a:
                    ff:33:98:c1:d7:34:ac:a2:b1:7b:b7:b7:20:8c:cc:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9C:89:A6:3A:2E:F0:55:3A:75:73:9C:CB:13:B5:FC:66:53:C2:E9
            X509v3 Authority Key Identifier:
                keyid:79:52:82:5D:2E:18:FF:06:1B:9B:36:BD:66:34:21:2D:2D:F1:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175FF2/9E4BA34E0F3911EEAECF5663C4F9AE02/eVKCXS4Y_wYbmza9ZjQhLS3xvzo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d7:d7:ea:ca:12:6f:ab:4f:5d:cb:89:99:46:cd:36:60:ed:
         42:f3:3f:14:89:6f:f5:5d:72:8e:e6:62:6a:6a:d8:54:97:ff:
         43:21:2f:aa:b1:d5:56:90:ca:a8:9d:00:e4:80:1b:5b:68:8d:
         1a:21:02:b5:b9:40:54:cc:9c:3d:54:22:4a:ed:07:a2:af:93:
         3e:6c:70:7a:c8:d2:78:93:4e:bf:89:c6:77:e6:91:33:b0:2f:
         f6:5e:c9:2f:36:65:79:c0:17:ef:d7:42:f2:9d:99:d6:1f:e0:
         cf:38:af:09:90:86:bd:43:7c:fa:30:91:9a:21:98:fe:79:52:
         65:4c:24:97:e7:1a:92:71:91:6a:d9:90:8d:70:2e:2d:49:c5:
         84:39:07:78:f9:e4:ea:76:e1:98:7d:5b:49:d0:80:61:51:42:
         7c:07:09:1f:ef:d0:2f:c9:63:49:e5:2d:36:43:72:b2:13:83:
         9b:ae:e4:31:ab:4a:f7:3d:05:90:8e:6f:68:5f:3b:6f:34:bd:
         c6:1f:5d:98:5a:57:4f:5a:1b:a9:51:18:2b:14:2f:bf:fd:f4:
         e2:8e:bd:3c:de:4b:42:ae:32:f9:1b:6e:32:fd:d4:6b:9c:77:
         d5:27:8d:9c:b5:68:5c:01:6c:9a:0d:ea:c7:4b:74:fa:43:6d:
         b1:cc:94:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:32:02 2026 by rpki-client