Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
File:                     eqxn28Hrko4pUTYuC8asdnfi3Hs.mft (raw, json)
Hash identifier:          7f9tG1405VU57g6MECrKE3DnW2vq9utUGhgVWYN8h94=
Subject key identifier:   D7:9C:B0:3C:08:20:E1:4A:4A:1A:3A:B4:8A:F6:4B:BF:FB:1D:8A:97
Authority key identifier: 7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B
Certificate issuer:       /CN=A919E9A5/serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
Certificate serial:       35D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
Manifest number:          3597
Signing time:             Tue 28 Jul 2026 14:32:37 +0000
Manifest this update:     Tue 28 Jul 2026 14:32:36 +0000
Manifest next update:     Tue 04 Aug 2026 14:32:36 +0000
Files and hashes:         1: eqxn28Hrko4pUTYuC8asdnfi3Hs.crl (hash: AaUimXqsRt8RUw6pQE7ijeC9qML0lKcAXJ2NLudaT78=)
                          2: 7D62DD7E840D11EFB275D662C4F9AE02.roa (hash: f/l+0wIw7kv3dSSRVcqGdg+Drb1QQ3/kIL6awWVju0M=)
                          3: 3BC5B9F8B53311EE9D8D774EC4F9AE02.roa (hash: pEr2wO5ZAQqRLVAqVCe90KJfFg9AIXlsq7twE8fo5s4=)
                          4: 9E129FFC5F2611EF8DAAA57FC4F9AE02.roa (hash: 1zoP69z7AM4GmJ1JESdD7kT2K9RUzllL5ylzBKqZ7sw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 14:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13777 (0x35d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A5, serialNumber=7AAC67DBC1EB928E2951362E0BC6AC7677E2DC7B
        Validity
            Not Before: Jul 28 14:32:36 2026 GMT
            Not After : Aug  4 14:32:36 2026 GMT
        Subject: CN=6a68bd85-6b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:c3:03:8d:8d:34:1c:8c:0d:2e:2c:f2:cb:
                    e0:b8:ca:1a:b2:25:e0:3e:94:5f:9e:b4:92:d4:0d:
                    ba:ff:e8:5b:ad:39:84:c8:16:ff:55:bc:e1:d8:ad:
                    c7:33:a7:c6:21:28:af:8b:bc:bd:cf:fc:84:a9:a4:
                    66:b1:51:c7:d8:c9:36:88:3e:b5:c6:27:69:a7:e3:
                    4a:88:03:83:74:bb:31:04:bb:e0:f5:d8:aa:d1:da:
                    4f:50:a1:d1:22:d2:4e:df:c8:3c:30:87:63:ad:1b:
                    7d:10:d6:2c:4c:1a:8a:4d:61:f4:58:bf:35:a9:20:
                    12:32:a9:39:d5:77:b0:df:9a:bf:54:6d:7b:57:47:
                    8d:b4:86:76:2e:71:a1:13:73:8e:4d:50:fc:d5:d2:
                    df:20:5b:ca:a5:2e:dc:6b:11:a5:9e:4b:52:43:25:
                    b2:b1:e6:a3:6f:cd:2f:42:48:3d:38:a2:bc:4b:61:
                    2e:86:8e:e7:d8:3f:de:de:af:dd:30:26:bc:db:bf:
                    03:37:6e:63:ff:c5:69:25:cf:53:60:63:c0:15:74:
                    fb:a0:eb:24:63:c0:8c:c1:ad:f4:f8:85:9b:78:3b:
                    65:1c:c1:1a:fa:18:58:22:47:12:ba:19:cd:6e:68:
                    e2:73:0b:bb:1a:0e:31:eb:e9:75:eb:cb:a0:a1:82:
                    36:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:9C:B0:3C:08:20:E1:4A:4A:1A:3A:B4:8A:F6:4B:BF:FB:1D:8A:97
            X509v3 Authority Key Identifier:
                keyid:7A:AC:67:DB:C1:EB:92:8E:29:51:36:2E:0B:C6:AC:76:77:E2:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eqxn28Hrko4pUTYuC8asdnfi3Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A5/A32EFEB81D8911E292E4FDE208B02CD2/eqxn28Hrko4pUTYuC8asdnfi3Hs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:da:9b:0e:69:e9:8a:69:a5:d9:c5:d3:c8:0d:82:7e:27:
         3e:56:fa:60:f6:8f:22:49:fc:bb:9b:56:f3:e8:61:85:a4:83:
         26:ff:9d:90:6d:64:c7:a9:68:d9:6f:b3:bb:3a:77:55:f8:33:
         49:d2:9a:ef:5a:8d:ae:f3:fe:9f:a1:c0:2d:22:d1:d8:c1:39:
         d4:96:00:e9:d9:cd:88:da:de:c9:2f:b0:74:c7:75:dc:7b:15:
         dc:55:75:65:5f:fb:20:3c:29:1e:80:82:7b:94:aa:6a:88:df:
         3e:40:3b:60:1a:ca:7d:03:c0:11:57:f1:72:61:2a:22:90:42:
         96:bf:e3:2e:b2:ea:89:51:f3:a5:74:c4:a7:78:c6:7a:73:da:
         ad:14:4a:33:0b:e5:31:2b:82:1d:35:b0:b4:b7:30:e6:5f:6a:
         7f:55:49:e0:7d:1b:00:f7:6e:ed:76:79:07:b6:90:1d:ad:5c:
         04:a7:d0:74:ec:b4:88:33:08:30:fe:38:60:b9:19:76:6b:d2:
         a8:bc:2a:60:a9:f7:94:38:e8:01:fb:02:b5:ed:7f:3b:40:3b:
         54:aa:6f:c3:b5:2d:f6:53:18:fe:93:7a:8a:ca:d0:be:ae:dd:
         ca:a8:56:b7:c3:c6:6c:74:df:18:9c:35:d0:94:6f:fb:af:63:
         e2:5d:09:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:15 2026 by rpki-client