Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
File:                     eKfTXvnEd150y6PRZrYbdZAkFSM.mft (raw, json)
Hash identifier:          Z7ePTfiXAWLRY2VXPioJSwFaFPllukQxzwBCppOg+Ns=
Subject key identifier:   7E:89:EC:DD:D0:D6:BE:CB:25:79:6A:2B:AB:54:81:CF:C0:73:D3:D5
Authority key identifier: 78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23
Certificate issuer:       /CN=A91D2C38/serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
Manifest number:          0124
Signing time:             Sat 13 Jun 2026 05:43:13 +0000
Manifest this update:     Sat 13 Jun 2026 05:43:13 +0000
Manifest next update:     Sat 20 Jun 2026 05:43:13 +0000
Files and hashes:         1: eKfTXvnEd150y6PRZrYbdZAkFSM.crl (hash: XmC8nZ2BHVZeoKTFKE7gRi3oq6H+nhCD/yCVVD3sQ44=)
                          2: 8DDD0D56A98C11EFAAC0F364C4F9AE02.roa (hash: pLovfOrhsSDToSpDuMZH/wCfyLBbh6arUaNSLjztFog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl
                          rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2C38, serialNumber=78A7D35EF9C4775E74CBA3D166B61B7590241523
        Validity
            Not Before: Jun 13 05:43:13 2026 GMT
            Not After : Jun 20 05:43:13 2026 GMT
        Subject: CN=6a2cedf1-282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:2c:45:41:9b:48:11:e4:e0:0f:20:00:8f:
                    91:15:c2:62:8a:11:46:38:8e:46:eb:74:99:3b:28:
                    ec:08:28:a1:33:b8:9e:8d:8c:df:01:2b:e0:d3:46:
                    ac:e3:bc:4a:aa:29:95:3f:7f:aa:ff:34:c4:89:ea:
                    5b:df:14:05:63:70:3f:0e:66:af:4d:50:f8:8c:f2:
                    1a:ee:94:5e:c3:7c:b1:83:46:e2:ab:14:91:17:c3:
                    a2:c2:5d:6d:ff:3b:15:b0:8a:9e:4e:e8:1b:03:62:
                    ac:fd:95:c0:40:e5:02:49:44:74:19:45:a1:09:3a:
                    a9:28:ac:cd:fa:b6:88:80:73:bc:ab:cb:39:3e:39:
                    95:4f:35:d1:4d:db:fa:2e:61:51:35:8a:5e:a0:7c:
                    3c:ec:52:c2:c1:3b:49:23:29:22:02:72:d9:75:60:
                    a1:1b:34:2c:64:18:d7:78:1f:30:c6:06:de:05:55:
                    39:65:50:aa:b7:38:bf:5f:3a:79:6b:81:ac:09:f0:
                    7c:fc:a6:62:95:84:f6:0d:ea:e8:da:27:16:49:05:
                    a5:1e:df:5a:ee:6b:26:d7:8a:d8:35:1a:ca:b8:29:
                    a7:79:a2:d1:87:cc:2e:bf:7c:99:60:f2:e2:35:c8:
                    82:ef:cf:72:8e:07:fd:8c:a8:0e:ae:03:ca:d5:4d:
                    d5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:89:EC:DD:D0:D6:BE:CB:25:79:6A:2B:AB:54:81:CF:C0:73:D3:D5
            X509v3 Authority Key Identifier:
                keyid:78:A7:D3:5E:F9:C4:77:5E:74:CB:A3:D1:66:B6:1B:75:90:24:15:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKfTXvnEd150y6PRZrYbdZAkFSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/0DE89340A98C11EF9350FB63C4F9AE02/eKfTXvnEd150y6PRZrYbdZAkFSM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:a3:46:68:87:8b:3e:2f:b7:d5:4d:29:74:c1:e6:d6:6a:d8:
         ac:b3:42:2f:2a:c3:13:b3:77:16:d2:0a:13:f0:08:07:55:a5:
         37:b0:c7:1b:94:6b:2a:89:3c:34:2a:d2:b4:0d:0e:06:a1:76:
         85:33:35:6c:e8:7e:7c:76:6e:c4:3b:f6:73:17:15:c9:3a:11:
         d8:14:8b:c0:63:64:c9:a7:f1:9e:da:25:c4:6b:b5:25:f1:65:
         8e:26:3a:20:8d:ad:94:ca:fe:c1:ad:87:f7:f4:85:34:fe:04:
         0e:ec:2f:e8:ab:18:d6:ff:22:77:7a:0c:75:29:e4:35:9e:0b:
         3a:5a:40:40:b2:0c:d5:01:d3:d1:54:51:c7:a5:d8:a7:0a:66:
         70:1d:ed:fb:5d:58:b6:2b:2e:7a:ab:a2:78:3c:96:41:4e:a6:
         b7:8b:df:6f:f1:3e:d4:e4:3c:99:bd:21:35:ec:90:51:2b:92:
         ea:03:e6:a4:58:09:4c:09:60:dc:03:c9:60:00:ed:74:e0:2f:
         0b:bb:6e:88:12:3a:71:71:4c:09:ea:95:d6:7f:69:8f:cd:f3:
         33:b8:51:a5:24:53:f6:31:1f:0f:e5:58:68:cf:9b:79:a9:da:
         1d:32:f3:0e:31:e6:db:5d:a3:ea:05:21:fc:7a:3a:02:58:10:
         74:94:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:06 2026 by rpki-client