Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
File:                     0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json)
Hash identifier:          AsXZ4gfMomwK+bVephKeeXKj5SzUR5WXWdE2XPFiAKs=
Subject key identifier:   79:8E:B0:49:43:75:9C:6D:3B:5E:79:14:20:79:D4:76:D3:FB:C2:A3
Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF
Certificate issuer:       /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
Certificate serial:       09A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
Manifest number:          0994
Signing time:             Tue 12 May 2026 20:04:20 +0000
Manifest this update:     Tue 12 May 2026 20:04:19 +0000
Manifest next update:     Tue 19 May 2026 20:04:19 +0000
Files and hashes:         1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: o2jJhZldyZ2bsbMo2Y3jcfpO1BFeOsFk6aoEITy7sqw=)
                          2: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 5TJ8fpI/hph92A8Cw9TwpRY9J8n0ZIFo0zChXcOf4qo=)
                          3: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: xhNjPqA73OpL8U8u4dVTjHBcy8FV6vJPVW6N4NhLK5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl
                          rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467 (0x9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF
        Validity
            Not Before: May 12 20:04:19 2026 GMT
            Not After : May 19 20:04:19 2026 GMT
        Subject: CN=6a0387c4-27c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:a1:95:0a:3e:a6:55:49:75:94:2e:ba:33:
                    0f:66:9a:f4:0d:85:3d:d6:72:ea:b6:95:9c:80:3e:
                    90:7a:f1:4e:d6:c5:12:83:e9:4f:52:fe:d4:52:5d:
                    cd:05:43:66:d1:e4:9c:83:4b:c5:6b:4e:2a:a7:3c:
                    23:25:ca:1c:a3:74:5e:4b:d6:eb:9e:09:53:15:02:
                    b5:9a:52:9b:1f:c3:2c:46:e1:f5:91:87:45:ec:a4:
                    d4:3c:2d:66:ad:9b:49:15:29:8e:52:c3:89:bd:04:
                    c6:c4:53:c0:95:a6:e4:64:03:14:b4:86:fc:3c:35:
                    25:47:16:af:1e:9c:f3:a6:02:33:fb:5f:e7:d6:73:
                    ea:00:25:05:ba:e6:ef:98:0b:de:61:37:7b:df:ff:
                    3c:28:59:f2:25:b8:dc:60:0d:fc:6b:14:9c:56:d2:
                    bf:64:61:ae:62:c0:f4:3b:57:7c:3d:f2:b8:09:ce:
                    e0:e7:fb:17:ca:19:4c:d3:e8:04:b5:30:3c:1d:b8:
                    86:44:d5:eb:8e:aa:c9:dc:31:50:67:a5:b1:53:05:
                    20:b0:d8:4a:a3:94:ae:af:d2:84:34:1c:ca:44:02:
                    7d:fa:8f:c5:0f:93:e2:80:2a:15:23:1a:c6:e3:74:
                    d2:9e:1f:73:d4:e0:97:dc:9c:80:14:df:f0:c3:a3:
                    69:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8E:B0:49:43:75:9C:6D:3B:5E:79:14:20:79:D4:76:D3:FB:C2:A3
            X509v3 Authority Key Identifier:
                keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:95:63:5f:2b:c7:64:ee:f7:88:e4:2e:66:5a:92:72:04:
         1c:39:e0:cd:2e:2e:77:07:ed:5d:96:60:0f:ec:ac:67:16:e0:
         29:aa:c3:50:e9:a0:68:92:69:c7:00:44:9e:ba:ed:a5:ed:80:
         3a:4d:f8:ba:8a:0e:93:6d:c4:65:b8:9b:b5:e6:5b:29:cf:84:
         cd:5c:e8:db:bc:8a:ba:ce:52:9c:21:72:11:5c:66:6f:ff:99:
         89:df:3a:f5:92:40:ec:18:52:5c:21:d9:a4:67:cb:70:75:f1:
         4a:3f:1b:61:86:39:0e:5b:0a:bc:33:ed:1c:68:66:36:7a:60:
         0e:d2:f5:4a:e1:16:54:8e:e6:36:8f:0c:f7:b3:b5:6d:e8:f5:
         ef:05:dd:10:a9:eb:ae:44:d2:be:80:e0:c1:1f:30:3f:99:85:
         22:72:b3:40:c2:9e:4a:6f:dd:2d:0a:73:07:2b:b7:91:d8:a6:
         42:72:18:d4:8c:03:0c:2d:93:97:7a:7c:84:47:58:4d:3c:1c:
         cd:d5:ed:66:f2:d2:8c:38:40:d0:7c:48:b4:6c:50:1e:d8:ef:
         0c:3f:cd:62:a3:d0:30:2c:35:28:41:96:6b:ea:b6:7b:c6:d1:
         49:27:c2:ad:b7:60:b7:16:f0:17:f7:be:1d:32:58:07:81:6a:
         bc:9b:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:34:14 2026 by rpki-client