Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
File:                     Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft (raw, json)
Hash identifier:          aME/kS+is3BlvI2+oCJlJ/B5lq0JUECagk3O3MjWuLg=
Subject key identifier:   DF:D0:D5:D3:E0:F3:C1:DA:D4:1E:61:C5:0A:35:D0:65:27:95:12:65
Authority key identifier: 11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86
Certificate issuer:       /CN=A917E0BB/serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
Certificate serial:       01AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
Manifest number:          01A5
Signing time:             Sat 13 Jun 2026 04:12:49 +0000
Manifest this update:     Sat 13 Jun 2026 04:12:48 +0000
Manifest next update:     Sat 20 Jun 2026 04:12:48 +0000
Files and hashes:         1: Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl (hash: rLVRvca3CJqrkRak4H6bbHeEDLdir0UIlQI3F42igDw=)
                          2: 2D08F32A110011EFBF50D06AC4F9AE02.roa (hash: FviZT7eVrmG8IcXMEXk6+QOfDQBSb0rs+buFlpqAkiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl
                          rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:12:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E0BB, serialNumber=11AB37DC654150C493C8AFC7E86D669C20AE5386
        Validity
            Not Before: Jun 13 04:12:48 2026 GMT
            Not After : Jun 20 04:12:48 2026 GMT
        Subject: CN=6a2cd8c0-08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:28:60:70:84:3b:a2:e9:90:0c:ad:3f:7b:09:
                    07:4d:34:38:0b:aa:80:1e:9b:3b:8b:77:47:e1:a9:
                    8f:d8:f2:92:c5:81:ff:78:8c:d5:39:c0:d5:63:47:
                    03:cd:10:f6:e7:1a:d8:06:31:b7:92:47:9a:2a:1c:
                    6d:58:ae:65:0e:a3:87:f2:95:20:8e:16:5a:74:29:
                    46:96:74:ce:26:83:41:27:5e:4c:78:fd:da:12:1e:
                    47:55:13:15:da:cc:63:e4:ff:6d:83:86:c8:18:86:
                    16:b7:ae:84:f3:ac:4f:26:e6:16:68:4c:02:a6:49:
                    47:69:f6:75:5b:51:e7:2d:b2:48:03:7e:ca:3e:29:
                    35:54:bd:99:7b:7c:58:80:97:f0:15:8f:b8:1f:c4:
                    14:df:f6:c2:da:88:70:58:8e:0c:b9:d0:46:f5:2c:
                    da:3d:90:95:e1:ca:c6:51:05:5c:ec:a2:9e:36:81:
                    77:a0:8d:db:d6:2e:b7:2e:60:63:62:05:52:3e:8e:
                    fd:a4:45:6d:c8:8e:a7:fc:20:3d:ce:b3:a5:4d:31:
                    58:9c:c4:6e:67:91:ac:e8:e3:c1:97:cf:6f:f6:0d:
                    af:f0:c3:5a:fc:bb:94:8d:32:fc:29:5b:23:40:5c:
                    76:3e:99:41:ea:25:d9:62:94:c3:94:0e:34:8c:e1:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:D5:D3:E0:F3:C1:DA:D4:1E:61:C5:0A:35:D0:65:27:95:12:65
            X509v3 Authority Key Identifier:
                keyid:11:AB:37:DC:65:41:50:C4:93:C8:AF:C7:E8:6D:66:9C:20:AE:53:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eas33GVBUMSTyK_H6G1mnCCuU4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0BB/68431FA2E8E611EE9CABE06AC4F9AE02/Eas33GVBUMSTyK_H6G1mnCCuU4Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:e3:32:3b:fc:a9:9e:ad:6f:cf:ef:f0:e5:80:34:a3:5b:
         39:4e:be:2d:4e:2b:be:e7:63:b4:5d:69:36:57:95:2d:c6:46:
         d6:d1:1b:33:d3:62:08:91:e4:9b:a1:28:a7:39:8b:e9:f0:a1:
         77:f3:cd:44:15:be:1c:29:56:22:7e:74:b6:04:e8:a7:75:9f:
         fe:6c:62:cd:c5:3f:2c:7c:65:21:94:06:2d:0b:1c:1b:24:12:
         c6:61:e4:56:3e:a0:df:2f:ed:9e:62:3f:02:4d:81:17:be:f8:
         c0:c0:e0:54:66:af:e5:69:99:4c:d0:d3:c6:2c:28:17:dc:79:
         9e:88:49:59:17:ad:d7:37:6a:38:82:95:3b:39:52:4c:22:ac:
         64:e2:d1:c5:a9:9d:a2:c0:7c:81:b2:ce:56:1c:72:8a:43:a6:
         93:97:ab:a4:fb:ee:45:f7:22:49:d2:c7:c7:9a:af:37:9a:eb:
         60:86:4a:60:54:c8:48:4f:e1:36:39:f1:66:0c:35:37:aa:4c:
         6b:bb:27:43:55:c4:46:ef:00:cb:19:81:7b:df:99:6f:78:b3:
         8a:45:b9:8f:7b:b4:db:6d:0d:76:5d:ba:62:c3:bd:4d:d8:f5:
         30:36:49:1a:ed:98:38:e2:d2:99:0e:c9:71:84:4b:20:07:c2:
         ba:c7:66:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0UwQkIxMTAvBgNVBAUTKDExQUIzN0RDNjU0MTUwQzQ5M0M4QUZDN0U4NkQ2NjlD
MjBBRTUzODYwHhcNMjYwNjEzMDQxMjQ4WhcNMjYwNjIwMDQxMjQ4WjAYMRYwFAYD
VQQDEw02YTJjZDhjMC0wOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuihgcIQ7oumQDK0/ewkHTTQ4C6qAHps7i3dH4amP2PKSxYH/eIzVOcDVY0cD
zRD25xrYBjG3kkeaKhxtWK5lDqOH8pUgjhZadClGlnTOJoNBJ15MeP3aEh5HVRMV
2sxj5P9tg4bIGIYWt66E86xPJuYWaEwCpklHafZ1W1HnLbJIA37KPik1VL2Ze3xY
gJfwFY+4H8QU3/bC2ohwWI4MudBG9SzaPZCV4crGUQVc7KKeNoF3oI3b1i63LmBj
YgVSPo79pEVtyI6n/CA9zrOlTTFYnMRuZ5Gs6OPBl89v9g2v8MNa/LuUjTL8KVsj
QFx2PplB6iXZYpTDlA40jOFXqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/Q1dPg
88Ha1B5hxQo10GUnlRJlMB8GA1UdIwQYMBaAFBGrN9xlQVDEk8ivx+htZpwgrlOG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBCQi82ODQzMUZBMkU4
RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVNU1R5S19INkcxbW5DQ3VV
NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VhczMzR1ZCVU1TVHlLX0g2RzFtbkNDdVU0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTBCQi82ODQzMUZBMkU4RTYxMUVFOUNBQkUwNkFDNEY5QUUwMi9FYXMzM0dWQlVN
U1R5S19INkcxbW5DQ3VVNFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAtnrjMjv8qZ6tb8/v8OWANKNbOU6+LU4rvudjtF1pNleVLcZG1tEbM9NiCJHk
m6EopzmL6fChd/PNRBW+HClWIn50tgTop3Wf/mxizcU/LHxlIZQGLQscGyQSxmHk
Vj6g3y/tnmI/Ak2BF774wMDgVGav5WmZTNDTxiwoF9x5nohJWRet1zdqOIKVOzlS
TCKsZOLRxamdosB8gbLOVhxyikOmk5erpPvuRfciSdLHx5qvN5rrYIZKYFTISE/h
NjnxZgw1N6pMa7snQ1XERu8AyxmBe9+Zb3izikW5j3u0220Ndl26YsO9Tdj1MDZJ
Gu2YOOLSmQ7JcYRLIAfCusdmMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:43:42 2026 by rpki-client