Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
File:                     eDj_-XHbpCvN2NjzdFXwsoSbedc.mft (raw, json)
Hash identifier:          jjY8+jZLbRNV7IbkEbbVxtavQ4R5xpLoJjS4zVPoqks=
Subject key identifier:   5E:9B:7A:1C:97:41:FA:15:29:94:4E:D7:08:36:B8:D0:AB:B8:43:39
Authority key identifier: 78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7
Certificate issuer:       /CN=A919A9C8/serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
Certificate serial:       01F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
Manifest number:          01ED
Signing time:             Mon 27 Jul 2026 05:01:13 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:12 +0000
Manifest next update:     Mon 03 Aug 2026 05:01:12 +0000
Files and hashes:         1: eDj_-XHbpCvN2NjzdFXwsoSbedc.crl (hash: R+6XR3KHN+560pTeo2AYfGOZRCPxXq5fDkq+GOP5KBE=)
                          2: 0D0118A89A4C11EEB7AE8812C4F9AE02.roa (hash: z7xT0Q19l8as89JVcBqiCD1+uHSolXQv/bw/RnKomw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl
                          rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A9C8, serialNumber=7838FFF971DBA42BCDD8D8F37455F0B2849B79D7
        Validity
            Not Before: Jul 27 05:01:12 2026 GMT
            Not After : Aug  3 05:01:12 2026 GMT
        Subject: CN=6a66e618-774e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:7e:d5:0a:85:71:58:d2:55:db:c8:b3:33:
                    9e:09:3d:5d:b6:fa:48:f6:4d:92:c3:34:bf:fc:20:
                    aa:94:93:08:09:e0:e4:67:9f:d0:ea:4f:a0:59:75:
                    ad:27:09:b7:71:46:1e:88:bf:9a:17:31:59:2f:74:
                    c8:7d:01:7a:00:f7:59:5a:18:67:b3:65:64:f4:5c:
                    62:70:23:25:57:ff:cb:32:7b:a4:34:e1:fb:af:bd:
                    0a:81:6c:30:25:72:ec:84:9e:03:d2:b9:49:d3:18:
                    98:a0:54:98:b5:64:ba:5e:6c:28:00:b1:0b:c2:ac:
                    03:44:80:0a:53:d5:63:d3:85:9d:56:64:21:d5:3d:
                    4a:f8:1d:21:3f:3e:7a:e1:80:90:5e:97:e5:6a:f6:
                    aa:76:b7:2f:79:87:c3:d1:5e:0e:8a:2b:d3:09:1d:
                    50:a9:ac:6a:d3:ed:14:5b:4c:e0:a4:c9:48:d5:f6:
                    d4:aa:c7:22:bf:26:4f:86:fb:08:fe:03:29:98:c1:
                    c9:2f:57:6f:6f:e9:cc:34:84:e2:6b:42:bf:60:90:
                    9f:81:47:73:06:84:d6:70:97:00:ca:7a:b5:98:9d:
                    d4:e5:92:1d:cd:92:0b:81:82:10:c6:bb:23:54:aa:
                    c9:c5:bf:95:a4:3e:50:2b:8b:09:88:7c:04:30:bd:
                    05:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:7A:1C:97:41:FA:15:29:94:4E:D7:08:36:B8:D0:AB:B8:43:39
            X509v3 Authority Key Identifier:
                keyid:78:38:FF:F9:71:DB:A4:2B:CD:D8:D8:F3:74:55:F0:B2:84:9B:79:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDj_-XHbpCvN2NjzdFXwsoSbedc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A9C8/DBBB09FE9A3A11EEA675897CC4F9AE02/eDj_-XHbpCvN2NjzdFXwsoSbedc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:df:85:03:44:98:e8:09:e8:cc:d7:55:85:8d:26:d8:8a:
         fa:a3:a6:f1:b9:0b:91:51:22:c6:06:81:92:a9:47:06:4c:3a:
         09:a4:46:81:d5:89:e2:79:56:92:29:5c:fb:96:ec:45:61:82:
         5f:08:9a:64:f7:3c:8c:f1:18:cf:28:45:22:fc:61:0c:68:c6:
         51:91:e4:04:2d:18:dc:62:03:66:ad:ce:76:c6:76:47:09:0a:
         b6:1b:a5:5d:f6:f5:90:70:97:27:f3:18:fc:23:a3:01:74:77:
         94:d5:d2:5f:06:fc:60:23:11:d6:bf:10:67:9b:37:12:f8:7e:
         7a:b1:0d:c7:0a:d4:f8:ca:cd:45:fc:38:cf:af:8f:64:76:7e:
         1c:a2:3d:f7:e2:16:63:a2:52:b8:fa:80:29:1b:ad:fa:46:c8:
         0a:eb:89:ff:bb:ed:36:41:dc:9b:77:0a:8a:0e:3c:b1:d4:f5:
         d7:3c:51:c1:a3:37:de:3e:e8:98:03:9e:18:58:ff:49:fe:71:
         bc:8f:f6:dc:bb:ac:f4:fc:c7:31:63:3a:bc:e5:53:66:68:9a:
         38:e5:35:64:3f:61:b6:8d:c5:c2:ca:29:0a:1d:b0:d2:dc:88:
         6a:5e:b3:8b:e7:7b:a5:74:10:70:3a:34:aa:9f:0b:c7:88:30:
         8a:0c:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:51 2026 by rpki-client