Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File:                     EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier:          sojZvBijxN1+Qr+lko7agAAcD0qYB/03v40A446hJfg=
Subject key identifier:   12:B8:F8:75:2A:3F:DE:8B:77:DC:CE:45:F6:5A:70:E4:7A:E1:FF:BE
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       0472
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number:          0468
Signing time:             Mon 27 Jul 2026 01:10:42 +0000
Manifest this update:     Mon 27 Jul 2026 01:10:42 +0000
Manifest next update:     Mon 03 Aug 2026 01:10:42 +0000
Files and hashes:         1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: 6Y/AywwHalVLIs5XXPB9SAqMIXnbOOJ1loIwZhes0rA=)
                          2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: qO1yzJmdBg/AExj7kOXHcZ1N7wKMwd9ke95bDjbUzzE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 01:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: Jul 27 01:10:42 2026 GMT
            Not After : Aug  3 01:10:42 2026 GMT
        Subject: CN=6a66b012-ac80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:75:23:01:43:86:61:b7:55:ab:1c:ee:3d:
                    db:12:43:df:50:63:9f:94:3e:a5:ff:8f:10:19:e9:
                    2c:ed:8b:0a:0a:2e:0c:62:ee:a1:a8:4b:6d:d0:c0:
                    0f:fe:a1:b1:84:aa:8e:ac:cc:bf:a9:b3:67:75:61:
                    b3:05:3b:79:69:85:fc:cf:1e:67:f4:89:c8:d8:01:
                    c8:9d:f8:c4:9b:b9:2b:43:97:fa:93:93:57:f0:52:
                    45:42:62:e8:80:c6:c2:78:d8:3d:7c:45:27:41:26:
                    e4:dc:e4:6b:a2:2a:a0:0a:86:b8:23:12:5e:7c:3b:
                    42:6b:09:48:68:3b:72:76:32:fb:68:18:ac:c9:2c:
                    52:de:d0:f3:0d:21:7d:ae:d9:e8:d9:38:b3:8f:df:
                    49:c7:c3:5d:02:02:62:62:c6:e9:12:21:88:c3:02:
                    de:9c:7d:ea:63:fb:b5:3c:5f:e2:a8:5f:1b:67:bd:
                    de:2d:e4:52:b4:62:47:17:f7:6e:ed:b6:f9:c5:6a:
                    91:28:3c:eb:fc:37:96:4a:a1:ed:9c:f6:6c:19:81:
                    8e:fc:5d:f8:bb:16:c7:96:be:e2:a8:f2:24:07:87:
                    71:9c:2d:54:90:24:ab:b9:fb:80:a4:85:97:46:3a:
                    59:1f:bb:73:a6:bf:5a:fd:1f:17:50:5b:21:a0:5a:
                    96:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:F8:75:2A:3F:DE:8B:77:DC:CE:45:F6:5A:70:E4:7A:E1:FF:BE
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:39:12:84:f1:e6:d1:5a:55:fb:c2:c5:45:7a:6e:77:2f:
         bd:dc:0d:8f:ed:9e:4d:a3:14:b7:33:85:b7:07:46:8d:f6:9a:
         75:6d:2f:4c:39:82:c7:7d:7f:b4:7c:48:9e:e9:dc:50:93:0d:
         6b:fc:b7:df:80:8a:d6:b5:8b:f4:a5:a4:1f:21:77:a0:ab:49:
         78:59:de:49:e3:49:40:3b:68:81:58:a8:e0:e0:8d:b1:a0:52:
         70:c8:6a:3f:d4:90:28:88:4b:fc:da:56:db:f7:88:77:8c:bc:
         c6:79:9e:eb:c9:4b:3e:ef:16:fa:4a:3b:7d:b3:f8:e3:a1:b7:
         8f:5e:3e:36:73:12:6b:7d:c1:81:37:20:9a:e1:51:61:c5:4b:
         db:53:50:ed:66:5c:81:02:57:c4:81:5b:6e:e8:57:fe:05:c3:
         88:ca:45:b0:a9:24:ed:9a:de:5f:30:82:f4:ff:1b:76:ad:4c:
         03:36:f8:41:4e:16:df:6a:79:b2:56:75:d4:8e:e6:4a:df:ab:
         f2:78:0a:10:db:59:6c:2c:75:9c:a0:e0:1e:69:df:0e:85:ee:
         4c:10:03:43:ee:ba:45:c6:c4:c3:8b:55:c6:a1:58:46:cc:4a:
         e8:bd:c2:fa:3b:fc:0d:6b:10:73:34:e0:92:1c:de:12:57:3d:
         96:1e:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:41 2026 by rpki-client