Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
File:                     EJhSul3Eo2jPdhIFFeysYu_aPkA.mft (raw, json)
Hash identifier:          UlFSvhimT1KE73ubXeWo6yFKO06r368RY1SUCaJvfNY=
Subject key identifier:   DD:FA:20:EF:64:FF:23:FF:2E:DC:EF:A8:B1:6E:3A:0F:67:1E:E3:F7
Authority key identifier: 10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40
Certificate issuer:       /CN=A91FE637/serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
Certificate serial:       0F37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
Manifest number:          0F2F
Signing time:             Fri 12 Jun 2026 17:31:54 +0000
Manifest this update:     Fri 12 Jun 2026 17:31:54 +0000
Manifest next update:     Fri 19 Jun 2026 17:31:54 +0000
Files and hashes:         1: EJhSul3Eo2jPdhIFFeysYu_aPkA.crl (hash: jBv1qo8CDFKCKtQsj7i0u+OVV8icUBhaYyEh1HhXJ/0=)
                          2: 3D88426C974511E982D6FD1BC4F9AE02.roa (hash: VIZdhiYSpiKQJVRkddgrRD+Jy12svVReopMn7lF4O6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl
                          rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3895 (0xf37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE637, serialNumber=109852BA5DC4A368CF76120515ECAC62EFDA3E40
        Validity
            Not Before: Jun 12 17:31:54 2026 GMT
            Not After : Jun 19 17:31:54 2026 GMT
        Subject: CN=6a2c428a-0586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:fd:2b:f0:ad:70:c5:0b:1e:0c:9c:24:08:
                    77:05:75:43:6a:ce:9d:69:a5:c8:b1:ee:0e:87:02:
                    67:30:e4:01:d9:d6:e7:3b:37:69:8d:49:ef:a7:ce:
                    13:ab:f1:fd:2d:b7:9f:61:51:23:47:00:a9:7d:aa:
                    6a:7e:b3:fe:4f:a2:8a:3a:d4:6e:50:64:58:2d:e0:
                    0c:a3:58:c1:87:3b:44:48:dc:ac:7e:b1:34:fa:9b:
                    e5:c3:72:0d:ff:20:a6:f0:a2:e2:89:d4:d8:5a:e6:
                    04:f8:49:7c:2b:97:9b:f1:98:8d:5a:4e:03:92:32:
                    7b:02:c1:60:68:05:38:1e:02:45:fa:1b:78:25:5a:
                    f8:5f:a6:f4:2d:cc:6a:0a:79:7b:9d:53:e6:d5:f2:
                    d7:77:02:f5:f2:5b:7a:6b:ba:4c:31:e3:2d:21:8b:
                    b3:15:5d:c3:04:40:fd:55:e5:94:61:40:00:2e:49:
                    cf:fb:ab:dc:6e:af:47:d8:71:a6:04:94:1e:90:a4:
                    8d:27:d4:d3:30:6a:62:83:cd:81:2e:ff:dc:ce:be:
                    56:60:85:3c:20:11:ae:ab:71:d0:5d:7f:59:1f:69:
                    14:2b:89:dc:f1:f4:fd:27:4b:21:f8:62:79:22:06:
                    d2:56:3e:f3:5c:fc:b2:68:01:97:cd:cd:0a:62:89:
                    70:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FA:20:EF:64:FF:23:FF:2E:DC:EF:A8:B1:6E:3A:0F:67:1E:E3:F7
            X509v3 Authority Key Identifier:
                keyid:10:98:52:BA:5D:C4:A3:68:CF:76:12:05:15:EC:AC:62:EF:DA:3E:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EJhSul3Eo2jPdhIFFeysYu_aPkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE637/9BAEA13A974311E9BFD8E519C4F9AE02/EJhSul3Eo2jPdhIFFeysYu_aPkA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8c:c4:49:c1:6e:93:1a:38:22:16:e2:32:c7:4d:e1:5b:98:
         13:9f:aa:c5:23:28:87:f4:c0:be:21:e9:c9:ef:ad:90:8c:40:
         95:ab:36:c1:69:64:b9:d2:e3:fc:ff:cc:1c:49:96:c1:2b:bc:
         44:09:65:ad:a5:f2:5d:6f:7a:6b:eb:c5:83:7e:e1:b3:3b:7d:
         ed:76:60:02:d7:9e:9c:a9:92:e4:9e:1c:a5:d4:76:97:0e:4e:
         12:f2:a5:32:29:31:24:ab:77:ab:7e:89:8e:6c:f8:03:79:65:
         8d:a0:ac:0d:26:7e:24:60:99:b3:da:f6:b8:2c:1e:8e:2e:8f:
         c5:b3:91:49:19:f7:3f:31:b4:2e:64:47:53:de:1d:7e:1f:ff:
         82:12:ce:f0:8b:28:c3:01:ef:9c:d2:8f:db:de:79:3d:40:a0:
         0b:fb:32:07:4b:94:2c:4c:d0:88:97:f9:68:88:76:49:05:07:
         12:55:a9:7a:a7:e6:f6:21:23:7e:55:31:20:10:b0:3d:44:95:
         25:05:96:00:d4:51:6e:64:29:57:39:1e:3c:c8:de:53:a2:e3:
         a7:f9:97:56:72:1f:e1:5b:da:f3:ae:6c:24:a4:0c:e0:2e:55:
         0e:e7:d3:93:2f:a3:49:ea:32:54:c2:26:a3:89:f9:b6:47:5c:
         f6:fe:0e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:38:09 2026 by rpki-client