Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
File:                     EF4GES4JwRrGtuM_Do2j9uYn8zI.mft (raw, json)
Hash identifier:          wH3z7NulxbyQ7VsDS4Xtx5TySJVuv5b799mAZjSIyvs=
Subject key identifier:   97:99:2E:07:51:DE:E9:A5:94:C6:53:E3:86:F1:C6:DA:0A:D3:16:73
Authority key identifier: 10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32
Certificate issuer:       /CN=A91D0468/serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
Manifest number:          04
Signing time:             Mon 27 Jul 2026 11:38:42 +0000
Manifest this update:     Mon 27 Jul 2026 11:38:41 +0000
Manifest next update:     Mon 03 Aug 2026 11:38:41 +0000
Files and hashes:         1: EF4GES4JwRrGtuM_Do2j9uYn8zI.crl (hash: u4lb5VLtZO/03oQ56+QV7sJ2RUCJ0Ie+JwHyGU/W2A4=)
                          2: F7D72646866311F18181548196A30FBC.roa (hash: YWqTKDIpSAxFUM6HW5snbyR2J7jAqm3hUt37+u8FRTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl
                          rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0468, serialNumber=105E06112E09C11AC6B6E33F0E8DA3F6E627F332
        Validity
            Not Before: Jul 27 11:38:41 2026 GMT
            Not After : Aug  3 11:38:41 2026 GMT
        Subject: CN=6a674342-d238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:73:b1:bc:cb:16:9e:a9:d1:9a:93:d6:29:
                    3f:65:d8:92:f6:ba:1c:ef:c7:01:36:58:ab:e2:15:
                    e6:f3:03:61:c5:87:79:7d:3b:18:15:0f:e9:da:7e:
                    57:b0:41:ed:e1:6b:95:06:6d:7a:7d:72:54:3d:f5:
                    dd:71:3b:59:5d:90:f4:a1:87:4e:89:91:8d:fd:78:
                    ce:13:8f:01:60:73:8c:40:bf:b0:4a:38:5b:7a:d2:
                    a0:d3:26:09:a9:f2:9f:75:f1:9e:3d:d9:ff:12:19:
                    20:0e:20:03:74:77:7b:81:cf:8d:2e:ec:96:44:aa:
                    00:ca:f5:a1:0d:92:41:ee:52:94:e3:5f:46:88:59:
                    14:89:7d:15:25:9e:01:c9:df:0f:ed:f3:64:35:a6:
                    17:fd:31:bc:6d:9a:3e:21:35:89:48:84:e9:69:58:
                    b4:8a:cd:f2:6b:69:24:8b:89:82:96:ba:0e:d0:5a:
                    5d:82:bb:6a:e8:6a:09:8e:e5:d5:63:65:c2:fc:55:
                    39:b6:9b:fa:b5:c3:d3:20:71:94:ab:9b:18:de:e4:
                    5b:47:79:c7:9b:78:21:dd:79:6e:c1:0a:bb:5e:46:
                    48:56:37:25:cc:f7:72:54:14:af:fd:2a:b0:3f:a9:
                    69:67:74:fa:6d:58:db:d1:75:52:9e:91:12:fb:d9:
                    e8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:99:2E:07:51:DE:E9:A5:94:C6:53:E3:86:F1:C6:DA:0A:D3:16:73
            X509v3 Authority Key Identifier:
                keyid:10:5E:06:11:2E:09:C1:1A:C6:B6:E3:3F:0E:8D:A3:F6:E6:27:F3:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EF4GES4JwRrGtuM_Do2j9uYn8zI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0468/8EE5FA68866311F18896D37E96A30FBC/EF4GES4JwRrGtuM_Do2j9uYn8zI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f2:4b:42:6a:6a:b8:8c:83:f8:a6:20:75:28:31:f7:70:a6:
         f9:6a:bb:97:fb:a9:f9:7a:c9:16:ea:bb:a0:38:ad:8d:e9:f3:
         1f:37:8e:43:f8:6d:d0:39:14:ad:8c:99:ad:02:6a:d3:70:ba:
         91:d3:d8:ad:6c:3a:36:4c:78:61:9f:88:27:b5:09:63:ad:11:
         7e:42:44:a0:8d:42:80:77:0c:65:3c:91:e4:6d:0b:b7:36:1e:
         63:5c:31:16:da:6b:a3:60:44:ab:33:68:e6:f2:20:d7:b3:b0:
         19:ab:a4:ef:d9:c3:9d:91:ea:7f:bb:99:34:6e:8b:cc:f7:15:
         f5:a0:44:88:14:40:24:96:45:67:e1:5b:1e:d6:a5:54:a6:13:
         c2:1f:54:f8:6a:df:68:88:52:33:2f:52:81:44:f6:20:8c:35:
         8f:ff:55:bd:84:1e:62:58:7f:51:c5:51:71:69:09:da:b0:c7:
         a8:cd:5a:98:49:bf:fb:2e:50:b8:5f:2e:c9:71:e5:a0:1d:88:
         68:a2:20:38:3e:fe:c5:d8:e4:2d:39:bb:59:5d:74:f3:88:e8:
         ae:73:9f:5d:62:e2:ce:3d:a4:13:66:87:b8:74:5f:fb:2d:ca:
         dd:b8:1d:8d:2c:f0:18:b5:4c:7d:ac:81:67:d9:c2:43:e1:9e:
         bf:92:15:4c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MDQ2ODExMC8GA1UEBRMoMTA1RTA2MTEyRTA5QzExQUM2QjZFMzNGMEU4REEzRjZF
NjI3RjMzMjAeFw0yNjA3MjcxMTM4NDFaFw0yNjA4MDMxMTM4NDFaMBgxFjAUBgNV
BAMTDTZhNjc0MzQyLWQyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCu93OxvMsWnqnRmpPWKT9l2JL2uhzvxwE2WKviFebzA2HFh3l9OxgVD+naflew
Qe3ha5UGbXp9clQ99d1xO1ldkPShh06JkY39eM4TjwFgc4xAv7BKOFt60qDTJgmp
8p918Z492f8SGSAOIAN0d3uBz40u7JZEqgDK9aENkkHuUpTjX0aIWRSJfRUlngHJ
3w/t82Q1phf9Mbxtmj4hNYlIhOlpWLSKzfJraSSLiYKWug7QWl2Cu2roagmO5dVj
ZcL8VTm2m/q1w9MgcZSrmxje5FtHecebeCHdeW7BCrteRkhWNyXM93JUFK/9KrA/
qWlndPptWNvRdVKekRL72ehVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUl5kuB1He
6aWUxlPjhvHG2grTFnMwHwYDVR0jBBgwFoAUEF4GES4JwRrGtuM/Do2j9uYn8zIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwNDY4LzhFRTVGQTY4ODY2
MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1JyR3R1TV9EbzJqOXVZbjh6
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRUY0R0VTNEp3UnJHdHVNX0RvMmo5dVluOHpJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw
NDY4LzhFRTVGQTY4ODY2MzExRjE4ODk2RDM3RTk2QTMwRkJDL0VGNEdFUzRKd1Jy
R3R1TV9EbzJqOXVZbjh6SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCr8ktCamq4jIP4piB1KDH3cKb5aruX+6n5eskW6rugOK2N6fMfN45D+G3QORSt
jJmtAmrTcLqR09itbDo2THhhn4gntQljrRF+QkSgjUKAdwxlPJHkbQu3Nh5jXDEW
2mujYESrM2jm8iDXs7AZq6Tv2cOdkep/u5k0bovM9xX1oESIFEAklkVn4Vse1qVU
phPCH1T4at9oiFIzL1KBRPYgjDWP/1W9hB5iWH9RxVFxaQnasMeozVqYSb/7LlC4
Xy7JceWgHYhooiA4Pv7F2OQtObtZXXTziOiuc59dYuLOPaQTZoe4dF/7LcrduB2N
LPAYtUx9rIFn2cJD4Z6/khVM
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:28:57 2026 by rpki-client