Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
File:                     ewHKzBcP5qYbIDBBheholG33KFo.mft (raw, json)
Hash identifier:          xDzbLJpLTiyAIjvOZM3S7JzdocTWJHwroK3ZLHjk2Sc=
Subject key identifier:   BC:36:D5:86:36:6E:49:B6:34:76:23:7D:0F:40:3C:45:7D:02:B6:88
Authority key identifier: 7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A
Certificate issuer:       /CN=A91919EA/serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
Certificate serial:       108D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
Manifest number:          0D3D
Signing time:             Mon 02 Mar 2026 00:53:21 +0000
Manifest this update:     Mon 02 Mar 2026 00:53:20 +0000
Manifest next update:     Mon 09 Mar 2026 00:53:20 +0000
Files and hashes:         1: ewHKzBcP5qYbIDBBheholG33KFo.crl (hash: cXGspqrgbd4dErpZv7OEF5VnUpg1lJMxcl9U2V15Xo0=)
                          2: 58DE045009B111EAB045B31EC4F9AE02.roa (hash: Pl/46HIrrVwU+EOROkgoLyHRli+DwTDUr0Rg5qWM1ss=)
                          3: F10FEA5C099A11EAB5891D5BC4F9AE02.roa (hash: s0CQ/C9rxkqTPFvJ1gTMruBUdh0IdPadP/+5M5sDdGM=)
                          4: 795DEE70073111EA993EC663C4F9AE02.roa (hash: C3vRiJAoHVjzmc261815XhqOToZimQDuuldUnLWkizM=)
                          5: E009A066072B11EAB6E08A52C4F9AE02.roa (hash: cRfncS26heoxKs2O9UDC7eZX0A68DThqhxbubmPZb9Q=)
                          6: EFDC701A099A11EAB5891D5BC4F9AE02.roa (hash: dJN9pm+xebUzbPzTeMWesSzW4O4AJ9g9s9jmnjw0Us4=)
                          7: 54E1D22809B111EAB045B31EC4F9AE02.roa (hash: 7pM+5xIMQmH/3L2v9CCdYRJTVeR2gJte3FbaVjmMNIk=)
                          8: C75AFE482A1B11F083453D57C4F9AE02.roa (hash: Dg7OIK2O0B1/J4uNMEC+ilWoKschjazE/eLZknlppW0=)
                          9: 5731ACF609B111EAB045B31EC4F9AE02.roa (hash: 2tCO3IzmBykfeklT65CRRja70MdCE7T687QMnD+fRXs=)
                          10: D2CA53BCAF8E11EAA40B786BC4F9AE02.roa (hash: lpucxewNN7kIJdFPlk7uCH6V5M0/JRxXNdxARg+TQl4=)
                          11: 79E6617E073111EA993EC663C4F9AE02.roa (hash: 6Vw+2a2sANnbra8NTrgQsRyzVW1ZYyYhDJataWqKbb4=)
                          12: 4B5E14FC96AD11EBA4AC9F7FC4F9AE02.roa (hash: eF0JoYd4QG4K9nohGzvY2j58rhPoqXhqJ1BoOLPw/9o=)
                          13: 55F662DC09B111EAB045B31EC4F9AE02.roa (hash: /X5TChqDgnnwz76ThM1TmEeXUOxlgZkj9qaJLWnJUzo=)
                          14: 70CB2CA80B4D11EA9667AC1FC4F9AE02.roa (hash: +mf9FQt1sUujPj+X72wMh/E1fDW0fDZ+NCX/lr+9LUM=)
                          15: B3811802FED411EA83E4EC37C4F9AE02.roa (hash: uHI9zGOyPbHO2nzTM27Xm1djssKMTZcC2l9JljRs8m0=)
                          16: 585A89FE09B111EAB045B31EC4F9AE02.roa (hash: NK4nHkewJfxiOZkbZPksWLB6cqXrvuONsaMoYjO/m4Q=)
                          17: F1D9CD5E099A11EAB5891D5BC4F9AE02.roa (hash: aFRmztuj8cPb22eut8QJL2JFpj9jMiS0Ik0Vjx3aKmM=)
                          18: 537DDF3A09B111EAB045B31EC4F9AE02.roa (hash: uvtnzYWMOZmNgT9qWZTLmh1qcon+poPvQt4vFLki1wE=)
                          19: 42C9FE0C77ED11EBBFBAF568C4F9AE02.roa (hash: FuSNDD+xnlKKj3JZ4a4xS6pO5oxAeYpmSs5sAAlMl3E=)
                          20: F0735BD8099A11EAB5891D5BC4F9AE02.roa (hash: M7I5wkcI9LfVTSOcMYFzaXyDtw1SuGef81NONNoPC2Y=)
                          21: 7FC0AC6009AE11EAA7CED313C4F9AE02.roa (hash: DtUshq7iqHXjOiCuKFYQexoo2RSEWe4GvVRIHOI5HuE=)
                          22: 92C1DA72F96911EA96156C10C4F9AE02.roa (hash: XcEC4UamhbeEfBfXjP2DV9c14PXzHZR3UbVLMLv2Wa0=)
                          23: F2D46CA0099A11EAB5891D5BC4F9AE02.roa (hash: tM/8wKwCYKHzTQHhY5c4HLuk8Fofp8Cd0e5x0lp9bMQ=)
                          24: 0DD6A56C073011EAAD272760C4F9AE02.roa (hash: f+lLYGQEN8osY8ooPb5Bgmm8ejpWpX2XaZRdb6CLdP0=)
                          25: 57D0ACB609B111EAB045B31EC4F9AE02.roa (hash: Fp+j8pdE88i7ME3SdprWlQHZjyMsx3KaiJfa4xejq70=)
                          26: 48366FBA072D11EAAE8E1D56C4F9AE02.roa (hash: 9y1zYxxYoZLrK7sQW4B+AwqcLsRYjRByP5rStGwcIr4=)
                          27: D22EBE84AF8E11EAA40B786BC4F9AE02.roa (hash: jewPkLrfHWQk5dXXQQhbC+QVgMU/GNRiWbpcfjFbUBg=)
                          28: 7AA2CD46073111EA993EC663C4F9AE02.roa (hash: tCTs5ncqmUJ3VhPQ2BCL2n6jkjNzWwibi+jAtFI06RI=)
                          29: F49547A8099A11EAB5891D5BC4F9AE02.roa (hash: FwkCmp2beowPe6caHQOxk4i7wdy0xiqBzaLxV9ho/Es=)
                          30: 48DF5EAE072D11EAAE8E1D56C4F9AE02.roa (hash: uDqm3L7PWOoMT9DgXvFu/cONDlLls1Go8u33h3SJSJg=)
                          31: A874B08E072E11EA8A64DC59C4F9AE02.roa (hash: t8rYm6FWtongWV5WJcVbP9HX3QgrvXOGZehWo4GIqYc=)
                          32: 543B65D209B111EAB045B31EC4F9AE02.roa (hash: EBMevLZvPcET748auuC70/ue0IyL17mcY95ozRXZb+Q=)
                          33: 496AB3D2072D11EAAE8E1D56C4F9AE02.roa (hash: ZUWUzv3pNGqNZ2gvpekDdpG2hN3vAuAOislKaKMAEwo=)
                          34: F3DDF814099A11EAB5891D5BC4F9AE02.roa (hash: s6AhJxxW5LLE9RhBQX/8oAxdL1RLL4Y6gJy96ga5JKE=)
                          35: 55703D7E09B111EAB045B31EC4F9AE02.roa (hash: CQ9/lZAba2EyvJYfZZ78mtTjNRBKZPzIuPorFG6iHag=)
                          36: F254F0CE099A11EAB5891D5BC4F9AE02.roa (hash: 6ACsZdPKFUc487F0EzvxsAgZQ7NZE8zAut6tK0G1eoc=)
                          37: 52BF1CA809B111EAB045B31EC4F9AE02.roa (hash: sIFzi05CsaIpI6IXbPoMavOg8v+lG8SCiHW5mc9xYYo=)
                          38: F34CE5D6099A11EAB5891D5BC4F9AE02.roa (hash: ZfI5EOU5Zhf/woJDSxDFP8Ge3TtC+aJ9/83Dv40gmB4=)
                          39: 5690B49A09B111EAB045B31EC4F9AE02.roa (hash: QcvRnDCbbV++veiXQaKg6IVTJYncSOCCJhyCSUH9yo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl
                          rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4237 (0x108d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91919EA, serialNumber=7B01CACC170FE6A61B20304185E868946DF7285A
        Validity
            Not Before: Mar  2 00:53:20 2026 GMT
            Not After : Mar  9 00:53:20 2026 GMT
        Subject: CN=69a4df81-b0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:ee:06:01:c0:be:ec:8d:45:16:f1:8b:d9:
                    bb:3b:ad:07:d2:f0:39:4c:93:f2:b3:17:78:ba:82:
                    f1:f4:a8:7d:e2:3e:9a:25:9d:c6:37:c1:d8:9d:ab:
                    01:6d:62:da:7f:e1:f7:1e:0d:68:27:97:9b:f5:59:
                    e4:36:f2:71:a3:b3:a2:a6:4e:6b:19:06:f9:70:ca:
                    91:70:1a:b7:fc:d2:55:a7:e6:3a:d0:95:f5:0e:56:
                    1b:42:e6:67:e1:98:56:92:ac:78:5f:d3:21:c7:8a:
                    43:12:f7:35:4a:f7:54:98:ff:7d:42:8f:d7:4c:72:
                    1b:e5:86:b9:c2:3c:e5:fd:da:e5:0e:e9:46:86:20:
                    14:18:78:65:34:c4:cf:b7:48:ee:9e:b8:20:55:a1:
                    c8:72:a5:03:38:40:90:8c:5d:8c:2e:46:32:38:57:
                    f0:36:a1:03:5a:40:97:01:2d:e0:b3:8f:a2:d0:ba:
                    e7:a9:8f:bb:86:89:80:54:49:26:53:3c:50:cc:ba:
                    2e:c0:dc:69:90:10:83:59:b3:7b:bb:0b:ae:3d:57:
                    d5:0c:85:e1:d8:8d:bd:96:bb:7c:f9:ea:6e:d1:8b:
                    88:f1:42:e9:a6:06:bb:bb:a9:3a:09:72:45:c2:3f:
                    30:45:1d:74:cf:94:c7:22:c2:58:dc:87:90:41:d9:
                    50:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:36:D5:86:36:6E:49:B6:34:76:23:7D:0F:40:3C:45:7D:02:B6:88
            X509v3 Authority Key Identifier:
                keyid:7B:01:CA:CC:17:0F:E6:A6:1B:20:30:41:85:E8:68:94:6D:F7:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewHKzBcP5qYbIDBBheholG33KFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91919EA/6D463CFE04FD11EA82CCCA18C4F9AE02/ewHKzBcP5qYbIDBBheholG33KFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:a4:81:05:6e:e3:55:5a:44:aa:c7:98:19:76:1d:b8:56:
         2a:ca:93:38:90:5d:fe:25:d3:6e:8a:be:bc:9c:4d:ed:0e:37:
         cc:35:13:c8:4f:ac:85:d6:c8:32:62:4a:c0:ea:f9:f6:a1:73:
         69:f4:26:06:c9:29:e9:8d:57:cc:15:62:5d:f1:95:44:3c:cd:
         7f:16:4d:92:7b:12:67:1d:77:f9:98:ca:b1:aa:aa:7a:9c:c5:
         bd:11:43:13:37:4a:e0:3f:cf:7f:3b:3e:0e:c1:b1:e5:4f:e7:
         dc:b5:30:49:66:7f:b7:f3:9f:e3:ad:42:0a:17:95:bc:1c:57:
         f3:65:a6:63:04:5b:82:44:88:d1:1e:af:87:de:8d:18:2f:76:
         04:bf:f9:18:4c:84:7b:af:bd:03:d9:42:90:e5:44:31:50:df:
         74:56:a4:e7:69:bb:39:0c:e9:9f:6a:37:52:d3:60:ce:e7:64:
         00:c1:cd:a8:4f:f3:b3:3d:b5:78:44:b2:fa:6a:4b:69:c6:b8:
         7a:a1:95:a7:e3:be:b7:da:15:a6:07:89:fc:c0:9c:d9:1f:c7:
         50:3e:ad:26:f2:c3:64:6b:e1:89:8a:90:a1:f0:6e:ed:a8:af:
         e7:7d:54:21:79:b2:bb:67:6c:63:16:11:d6:43:4e:47:ab:23:
         69:bc:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:43 2026 by rpki-client