Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
File:                     EKxjBm6avEIqxfRaInENUC6-Qsg.mft (raw, json)
Hash identifier:          +HQec0ayfHgS5RYbGD3w9qeA0mEfTusfXN5tslyfZfw=
Subject key identifier:   D0:3F:E1:CE:DF:F8:30:6F:9D:D8:F4:7D:73:FD:35:F9:A6:8F:B1:89
Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8
Certificate issuer:       /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
Manifest number:          AB
Signing time:             Sat 13 Jun 2026 07:20:27 +0000
Manifest this update:     Sat 13 Jun 2026 07:20:27 +0000
Manifest next update:     Sat 20 Jun 2026 07:20:27 +0000
Files and hashes:         1: EKxjBm6avEIqxfRaInENUC6-Qsg.crl (hash: s1PYcME2UnNko5KpBVnBJNBj8M2rsUR27Twk3DyBi+A=)
                          2: CA226038692E11F0B07B731AC4F9AE02.roa (hash: dFQlL2iPfjK9FA+gcyCkTdqn8PNU0IRLWWtAcc4wFxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl
                          rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8
        Validity
            Not Before: Jun 13 07:20:27 2026 GMT
            Not After : Jun 20 07:20:27 2026 GMT
        Subject: CN=6a2d04bb-7c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e9:ba:3f:e2:48:e5:8e:8a:4a:6a:45:14:10:
                    b6:8b:76:61:e7:bd:07:12:d3:f5:b5:70:33:bb:66:
                    30:b5:d4:29:b9:35:37:72:31:7c:50:d9:3f:b1:eb:
                    71:37:73:47:84:c2:c7:83:7c:72:cb:6c:45:aa:12:
                    c2:f1:44:37:31:ea:9d:46:e2:25:a6:2a:c1:b0:4c:
                    43:b6:54:01:0a:78:06:f8:57:c2:e0:8c:fc:b2:a2:
                    7c:78:40:01:e5:1b:74:20:22:5b:54:b3:e9:50:33:
                    a0:39:ae:d0:42:b1:0e:50:a2:55:6e:0e:d8:d9:d2:
                    9a:7b:13:3f:52:cb:95:da:60:9f:58:22:fc:e5:cf:
                    1e:a6:18:99:95:c8:a4:78:6c:ce:9c:e8:6e:5c:3d:
                    f2:e9:eb:72:24:4f:1a:a4:7c:2f:84:2c:93:05:de:
                    f9:04:5b:7d:d1:b7:81:9f:bc:a3:29:29:8d:be:6f:
                    27:c4:77:d9:51:34:d1:e3:1d:f1:ce:9f:6e:71:8b:
                    e8:98:87:cf:72:98:0d:cd:56:d9:27:6e:5d:24:cc:
                    53:5a:df:41:e1:f5:22:95:e5:27:59:62:4e:6a:98:
                    10:3f:f2:67:55:cb:49:df:8a:d5:4d:62:c9:51:6c:
                    ca:04:be:c4:91:12:6a:40:c9:c9:c2:c5:56:59:ed:
                    7e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3F:E1:CE:DF:F8:30:6F:9D:D8:F4:7D:73:FD:35:F9:A6:8F:B1:89
            X509v3 Authority Key Identifier:
                keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f7:9c:0c:26:ff:bd:db:d9:b2:e2:31:cf:2d:31:bf:19:77:
         a3:47:97:ca:a4:24:41:1f:ba:68:2d:ca:37:57:70:71:8b:71:
         53:4f:b6:4f:26:9e:ac:2e:b5:af:fc:54:8f:49:b2:b8:a6:7d:
         3f:09:da:9f:e3:e8:bf:ff:99:d6:7a:c8:e0:12:98:be:b6:57:
         24:d7:3d:ef:72:3c:ad:80:6c:cc:44:d5:8c:49:2a:ff:1a:68:
         91:24:4c:8d:76:a8:1d:56:5c:8b:5f:90:2d:d0:e4:a5:26:8b:
         78:19:bd:ce:34:d2:d5:8e:31:61:80:1a:8a:46:ef:08:ad:71:
         e8:46:f5:a9:b0:ac:8a:da:8f:71:ac:da:51:bb:78:a6:e7:cf:
         af:59:d3:a6:0f:62:26:f5:74:49:e8:e9:9e:31:c2:56:24:30:
         db:0e:77:97:eb:1e:f7:02:c3:9a:00:c9:f7:b3:53:f2:06:20:
         c6:58:c4:4f:ce:fb:d5:cd:d9:fe:14:b1:18:33:b0:7f:37:1d:
         43:bf:2e:96:53:22:9d:a2:85:2c:aa:cc:50:51:ef:d8:69:b8:
         e1:7a:59:f3:9c:8f:6d:8f:97:9b:ce:cd:2b:3f:95:e5:51:87:
         22:93:26:ce:42:2a:45:91:fd:38:d6:c7:f9:25:b7:23:f8:fe:
         bf:1d:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:07:39 2026 by rpki-client