Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
File:                     ESlA31ZTK12aWXhprKkx54PorL8.mft (raw, json)
Hash identifier:          JKcjz2LlT2lA0h5JjctV5q5krFDWEuT68xdxpch3vSE=
Subject key identifier:   25:77:4D:33:CD:13:62:57:34:0B:98:25:35:8C:A2:22:47:51:62:8A
Authority key identifier: 11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF
Certificate issuer:       /CN=A91D477A/serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
Certificate serial:       0AE2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
Manifest number:          0AD7
Signing time:             Fri 12 Jun 2026 19:27:57 +0000
Manifest this update:     Fri 12 Jun 2026 19:27:56 +0000
Manifest next update:     Fri 19 Jun 2026 19:27:56 +0000
Files and hashes:         1: ESlA31ZTK12aWXhprKkx54PorL8.crl (hash: JH17WkG3xMKvl87JhhuFbnbMOVDTEpj475uMuutcWng=)
                          2: 738240A246DC11EEAF1D2C1DC4F9AE02.roa (hash: mgVey14qS3blWfe2a8Jc4qKwijvYP/VH5umYVNkw2S4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl
                          rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2786 (0xae2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D477A, serialNumber=112940DF56532B5D9A597869ACA931E783E8ACBF
        Validity
            Not Before: Jun 12 19:27:56 2026 GMT
            Not After : Jun 19 19:27:56 2026 GMT
        Subject: CN=6a2c5dbd-ffb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:1d:1c:e7:6c:51:40:35:38:67:10:78:b3:
                    b5:ff:31:b1:a2:8d:92:42:43:38:08:9e:f9:6a:08:
                    43:03:ae:b7:87:23:61:de:72:c0:28:bb:78:41:6e:
                    d7:b4:d5:14:7d:66:2c:e5:22:83:cc:bf:e7:b7:f7:
                    d8:8a:d4:f2:fe:6b:e4:c9:6e:d4:8a:11:bf:5e:81:
                    b5:b5:ec:d2:8f:d8:6f:94:d6:c6:c0:82:74:8d:04:
                    50:de:4b:39:17:81:43:37:b2:ad:99:54:04:a3:7e:
                    ab:b8:5f:fa:15:4d:0c:ec:c8:5f:1b:fb:ca:a0:ac:
                    4f:c4:63:5d:fa:ef:4d:33:99:e3:3f:d9:24:ef:6f:
                    ce:63:8d:25:c2:e3:70:7e:1c:59:37:d9:a9:3a:3f:
                    d4:6c:5d:42:89:e1:f6:4b:d6:c6:a8:38:d8:b3:90:
                    50:fe:32:ef:f6:43:ab:60:fc:5e:37:8e:16:10:57:
                    57:34:ac:56:fc:74:3d:fc:16:19:5e:01:2d:8e:17:
                    15:f9:65:43:b8:6b:2a:bc:aa:88:07:ae:aa:68:ae:
                    94:70:a2:73:5a:be:4b:52:34:1e:89:85:6c:2b:d8:
                    7a:fa:5b:c0:eb:18:9f:75:3f:3d:34:c5:5e:67:87:
                    b6:2b:64:6a:78:6f:41:1e:af:0d:56:f2:a9:c8:a7:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:77:4D:33:CD:13:62:57:34:0B:98:25:35:8C:A2:22:47:51:62:8A
            X509v3 Authority Key Identifier:
                keyid:11:29:40:DF:56:53:2B:5D:9A:59:78:69:AC:A9:31:E7:83:E8:AC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ESlA31ZTK12aWXhprKkx54PorL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D477A/C828943273E811EA88F0227FC4F9AE02/ESlA31ZTK12aWXhprKkx54PorL8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:29:fc:50:2a:b9:37:fb:fd:c5:24:35:40:9e:97:a7:34:
         04:ae:ae:20:da:45:9f:20:e8:e0:d6:4a:5c:fd:fb:02:5e:22:
         aa:0d:3b:7d:46:94:32:d3:cb:f0:39:b2:c0:7f:ea:b7:f0:55:
         5b:e9:c8:01:d2:50:d4:06:08:68:08:29:2d:ec:b0:94:68:5c:
         a4:c8:f1:c5:47:de:c1:25:87:e9:61:b3:d9:18:aa:87:73:e3:
         58:56:7a:ba:62:43:6a:9f:5a:59:ff:44:d7:d6:e3:07:76:28:
         d9:ce:44:d5:1d:07:77:39:7b:c0:54:4a:94:11:ea:6e:94:96:
         90:83:78:c5:45:57:e1:61:44:56:9e:08:87:ba:39:d1:d4:6c:
         f3:09:58:5a:bb:8e:33:26:49:a3:5b:3c:b8:49:26:16:db:79:
         52:3f:62:e8:cf:e7:9d:a4:98:50:d8:f2:10:81:c7:d7:6d:d9:
         ff:05:ca:d8:d9:f1:9e:92:23:ff:14:00:36:bb:e4:e3:4c:44:
         f3:a8:d5:4d:a6:ab:d6:0e:0d:43:af:d1:18:fa:e7:6a:22:10:
         65:37:6f:a4:98:2b:ec:56:0e:ad:b1:f0:1f:c8:1c:39:4c:d3:
         b9:64:26:39:56:05:db:e4:92:c2:da:51:cf:2e:8e:60:06:16:
         51:7d:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:05 2026 by rpki-client