Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          4buuP0hM6SfCp1Nar6y/eszlgRW/ClHClI3ffqKMScg=
Subject key identifier:   3B:C7:4F:19:FF:67:BC:0B:4D:7B:96:42:71:FD:36:4E:E3:C5:4A:1C
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0EFC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0EE7
Signing time:             Tue 12 May 2026 17:40:44 +0000
Manifest this update:     Tue 12 May 2026 17:40:43 +0000
Manifest next update:     Tue 19 May 2026 17:40:43 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: 0/Xi+5FU5wy0+YBSrFeAHCjjJH3UdiwOvLv1Y38YViM=)
                          2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
                          3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:40:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3836 (0xefc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: May 12 17:40:43 2026 GMT
            Not After : May 19 17:40:43 2026 GMT
        Subject: CN=6a03661b-0b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:b0:e9:29:d5:b4:07:51:f1:9a:f4:e7:bd:
                    a6:f1:5e:47:6c:f4:6d:dd:04:f0:f2:a9:e3:b4:f6:
                    d2:1e:cc:27:59:bf:e8:fd:38:b3:73:57:7c:96:57:
                    cf:0c:b9:f4:dc:4b:9a:c1:7c:e1:d7:41:1f:c9:fa:
                    cf:a9:de:0e:9d:9e:27:05:9c:38:77:42:9b:6b:32:
                    11:2c:ad:ae:8c:de:dd:6d:9c:2b:02:06:db:83:fb:
                    c9:21:d4:8c:37:97:70:43:f6:32:01:9a:0b:43:27:
                    84:bc:68:86:ab:3a:42:83:46:df:8f:f5:ba:3b:0e:
                    74:31:1f:f9:ed:c5:5a:12:4d:c5:40:2d:cc:42:41:
                    5a:18:d2:06:ca:a4:04:1c:f2:d6:c4:2b:b6:a6:29:
                    1e:ea:03:f2:86:40:25:dd:15:4e:8c:49:30:b9:b3:
                    a8:c7:7e:c1:f6:ae:66:50:c1:7b:21:d1:1c:59:e4:
                    2e:35:34:43:07:8b:f1:ba:02:e0:3d:f2:6d:bb:9b:
                    1d:06:53:6a:97:4c:be:ba:d6:52:de:ce:de:b6:8a:
                    d1:2d:80:99:b6:ba:59:c1:39:cf:03:11:4d:3f:7f:
                    0b:11:d7:b9:35:59:89:15:1f:54:71:d2:eb:50:d5:
                    8c:07:af:a3:e9:27:e2:d7:66:b9:8e:0f:32:be:95:
                    8a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C7:4F:19:FF:67:BC:0B:4D:7B:96:42:71:FD:36:4E:E3:C5:4A:1C
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:2d:82:96:7f:85:48:84:82:77:17:e5:8a:2c:1b:dc:e5:3b:
         e8:26:ed:c5:18:f5:a8:78:40:4d:de:3c:08:63:80:61:d8:66:
         16:c2:7b:5b:7e:7b:02:61:7c:8e:ed:4f:ca:4d:9e:64:cc:91:
         cb:c6:3f:95:4f:93:3b:11:53:1e:6e:8c:a2:1d:8d:11:98:c4:
         46:60:93:fb:64:96:64:8e:a3:92:dc:f6:24:22:bb:55:1f:7d:
         b1:bb:26:88:12:6b:d5:5e:c5:a2:90:93:1b:e6:90:53:74:ab:
         5f:6d:06:ba:9d:78:de:e8:10:80:da:82:ed:78:6a:dc:30:da:
         7f:10:e5:3e:8a:ee:b0:2b:98:18:7a:d7:20:c3:e1:28:c7:92:
         5d:6f:fb:45:89:14:1d:86:5d:d9:4c:93:37:11:27:ed:a3:71:
         fb:af:39:bc:ee:53:a3:39:91:9a:b3:1c:ce:45:58:9c:f6:51:
         fc:bd:25:a7:31:9f:dc:45:01:d3:2f:64:58:34:26:1f:2f:35:
         2b:86:c8:b7:8b:b0:ee:bc:ce:38:21:59:c4:49:bb:5b:c7:a1:
         3c:5e:13:c6:47:e0:95:4c:6a:e7:37:20:05:d6:d1:5c:35:42:
         ba:f7:e7:ee:9d:f1:37:ff:18:4b:ea:3c:49:f7:5f:5e:8d:ce:
         2f:cb:8e:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVCQUQxMTAvBgNVBAUTKDMyNjJGNzgxMkQ3QzdEQUFFODc1QkMxRUU4RDcxRjkw
NzJDRUVEQkMwHhcNMjYwNTEyMTc0MDQzWhcNMjYwNTE5MTc0MDQzWjAYMRYwFAYD
VQQDEw02YTAzNjYxYi0wYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiqw6SnVtAdR8Zr0572m8V5HbPRt3QTw8qnjtPbSHswnWb/o/Tizc1d8llfP
DLn03EuawXzh10EfyfrPqd4OnZ4nBZw4d0KbazIRLK2ujN7dbZwrAgbbg/vJIdSM
N5dwQ/YyAZoLQyeEvGiGqzpCg0bfj/W6Ow50MR/57cVaEk3FQC3MQkFaGNIGyqQE
HPLWxCu2pike6gPyhkAl3RVOjEkwubOox37B9q5mUMF7IdEcWeQuNTRDB4vxugLg
PfJtu5sdBlNql0y+utZS3s7etorRLYCZtrpZwTnPAxFNP38LEde5NVmJFR9UcdLr
UNWMB6+j6Sfi12a5jg8yvpWKXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvHTxn/
Z7wLTXuWQnH9Nk7jxUocMB8GA1UdIwQYMBaAFDJi94EtfH2q6HW8HujXH5Byzu28
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJBRC84OUMwQkZDMEE0
MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZhcm9kYndlNk5jZmtITE83
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tTDNnUzE4ZmFyb2Rid2U2TmNma0hMTzdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUJBRC84OUMwQkZDMEE0MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZh
cm9kYndlNk5jZmtITE83YncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAVS2Cln+FSISCdxfliiwb3OU76CbtxRj1qHhATd48CGOAYdhmFsJ7W357AmF8
ju1Pyk2eZMyRy8Y/lU+TOxFTHm6Moh2NEZjERmCT+2SWZI6jktz2JCK7VR99sbsm
iBJr1V7FopCTG+aQU3SrX20Gup143ugQgNqC7Xhq3DDafxDlPorusCuYGHrXIMPh
KMeSXW/7RYkUHYZd2UyTNxEn7aNx+685vO5TozmRmrMczkVYnPZR/L0lpzGf3EUB
0y9kWDQmHy81K4bIt4uw7rzOOCFZxEm7W8ehPF4TxkfglUxq5zcgBdbRXDVCuvfn
7p3xN/8YS+o8SfdfXo3OL8uOGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 02:23:20 2026 by rpki-client