Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
File:                     EHo5wcwE8nzHJmPb97rm2SqVA4A.mft (raw, json)
Hash identifier:          lyUb6OnTmjovlSEkHXTuuyfnx0sDmV7Y9TIqKRJns7E=
Subject key identifier:   D2:4C:FF:E0:48:C3:47:5D:5C:31:FB:F9:A0:71:0D:CA:91:5E:3C:0B
Authority key identifier: 10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80
Certificate issuer:       /CN=A91AFBDA/serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
Certificate serial:       01C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
Manifest number:          01BC
Signing time:             Mon 27 Jul 2026 05:38:37 +0000
Manifest this update:     Mon 27 Jul 2026 05:38:37 +0000
Manifest next update:     Mon 03 Aug 2026 05:38:37 +0000
Files and hashes:         1: EHo5wcwE8nzHJmPb97rm2SqVA4A.crl (hash: eLqQYf+ZTkc3lz7hOphMEIivrarV+IUIHWfOr9RI3Jg=)
                          2: 62246EC4E67E11EEAD030482C4F9AE02.roa (hash: lBKEJN8TZCW84RdooxHHdwjNaEtHkFFjxRR59Fdc2o0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl
                          rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 05:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFBDA, serialNumber=107A39C1CC04F27CC72663DBF7BAE6D92A950380
        Validity
            Not Before: Jul 27 05:38:37 2026 GMT
            Not After : Aug  3 05:38:37 2026 GMT
        Subject: CN=6a66eedd-414a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8a:fb:43:d0:5a:c3:2f:e0:57:b0:c2:86:c0:
                    de:ba:11:6a:41:8b:90:48:ff:47:7c:94:52:2a:7a:
                    27:fb:c0:4d:7d:05:ef:28:0c:d0:d3:de:b5:91:23:
                    77:68:4b:e4:6a:9f:45:36:67:9e:d5:ff:97:9a:0b:
                    67:01:84:46:23:b3:23:1f:1a:46:a1:95:74:7c:7f:
                    ed:ff:b2:71:69:e8:5b:d0:db:82:89:31:78:d6:f2:
                    85:bb:89:66:b3:af:37:a5:5f:50:f3:ed:41:b9:02:
                    54:d0:72:ec:05:8c:a1:dc:f1:0b:58:8f:1e:7d:73:
                    a7:62:3d:2c:b9:96:cf:3c:a9:86:26:16:6d:d7:5c:
                    19:60:b5:5d:19:d2:19:5b:c6:96:bd:d0:de:9a:e7:
                    8a:59:90:c2:d4:28:e0:c4:a9:7d:27:43:bf:3c:c9:
                    8b:e6:34:49:d9:7f:f0:01:ed:e6:e5:b7:ec:29:c1:
                    3f:db:a4:cc:1a:45:63:33:d4:b4:9a:e1:5a:9c:c0:
                    7e:2a:24:cb:7f:ec:b4:72:86:f7:14:32:50:a4:04:
                    74:ed:1c:4c:70:3c:3a:fc:89:d0:23:af:a3:10:99:
                    e0:29:99:4b:5b:f1:44:93:94:aa:bc:05:df:47:fd:
                    d1:ad:15:4d:fc:2f:82:7b:f4:57:97:44:7f:54:b0:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:4C:FF:E0:48:C3:47:5D:5C:31:FB:F9:A0:71:0D:CA:91:5E:3C:0B
            X509v3 Authority Key Identifier:
                keyid:10:7A:39:C1:CC:04:F2:7C:C7:26:63:DB:F7:BA:E6:D9:2A:95:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EHo5wcwE8nzHJmPb97rm2SqVA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFBDA/6AD374AAE65D11EEB6123E41C4F9AE02/EHo5wcwE8nzHJmPb97rm2SqVA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:27:1f:58:54:83:15:9e:6c:c4:29:c3:73:a2:8c:1c:f7:01:
         c2:eb:ad:b6:4f:2b:87:f4:f7:be:8d:6e:da:c6:59:3e:a3:c7:
         63:6d:49:90:74:d2:d8:ea:23:79:78:f2:e9:ef:f3:b6:62:1b:
         a1:80:a4:95:8e:96:be:52:b6:e5:04:26:e0:e2:fe:2f:57:67:
         fa:07:3c:52:a9:88:93:2b:c8:39:98:87:13:77:3c:c4:44:56:
         63:51:4c:36:d0:a7:ad:e2:23:62:af:8a:2b:f0:88:24:d8:f3:
         9b:b8:73:a4:85:b9:08:24:dd:e2:01:a1:5b:44:11:74:04:a3:
         23:fb:3f:50:b6:92:6e:80:8f:e5:f9:5b:92:79:43:c3:fc:4b:
         48:bc:dd:20:a5:65:c7:80:28:df:f0:14:45:64:f6:75:9d:06:
         f2:21:c1:64:74:be:4c:29:58:b8:37:63:3f:dd:02:83:7e:4e:
         ee:b9:53:5c:75:00:1e:89:dc:6e:5d:b6:99:93:14:93:7c:bf:
         d7:70:8f:a1:70:45:58:d5:f1:a3:ad:23:bd:8a:9a:41:27:a1:
         9b:b4:00:32:c0:c9:6b:af:04:66:2b:69:af:51:5a:a2:f8:0e:
         1b:18:06:ee:6e:2a:cf:ce:c6:fe:9c:b8:b9:55:27:3d:25:c4:
         e1:2c:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:40 2026 by rpki-client