Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          mU2cSDjp7hO/g2MonSOaLcHR5acOim4abpQk6ZWjUyg=
Subject key identifier:   32:A3:E7:EF:7D:EB:16:24:EC:D5:2F:D6:BA:91:1B:B6:B1:8C:74:8E
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C6F
Signing time:             Wed 22 Jul 2026 18:58:39 +0000
Manifest this update:     Wed 22 Jul 2026 18:58:38 +0000
Manifest next update:     Wed 29 Jul 2026 18:58:38 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: eOs2cYH+kTTYg+wOUc3UACaRZQUsXQQKOtsMkeceQUI=)
                          2: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
                          3: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3206 (0xc86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Jul 22 18:58:38 2026 GMT
            Not After : Jul 29 18:58:38 2026 GMT
        Subject: CN=6a6112df-fb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8f:13:dc:5a:be:7d:3b:34:bc:2c:6d:e7:07:
                    ee:1a:bf:57:fd:af:3f:31:83:66:c4:39:2c:85:71:
                    08:86:f1:4a:37:9a:bd:7f:4a:32:ed:91:c9:49:b7:
                    c9:92:c9:73:fd:0f:27:7d:c5:6a:bd:71:b5:69:6a:
                    d3:a6:1a:2e:00:24:4f:3b:9c:8d:d6:41:53:52:03:
                    eb:3a:c8:ec:69:f2:07:a0:6c:47:01:73:46:df:67:
                    74:d5:38:62:4a:7a:53:46:b3:d5:02:1f:70:ca:e4:
                    13:5e:bd:24:37:9e:47:69:f9:be:4d:f1:57:6e:35:
                    07:dc:f1:a0:16:d9:5a:d8:5d:10:2f:51:70:7f:e1:
                    bf:d1:3e:7a:58:65:b4:f8:c2:db:a4:db:66:dd:fd:
                    b2:be:75:ae:d7:f2:e6:59:72:31:28:15:dc:10:c0:
                    e5:9b:b8:1d:31:6c:51:36:a0:9b:aa:3c:b1:23:43:
                    00:d8:29:05:be:6f:b1:9d:1b:f1:f8:2c:e2:09:8c:
                    b1:8b:ac:ed:8a:03:5a:99:89:0c:76:a1:1e:dd:eb:
                    24:28:2b:61:db:60:fd:93:83:8e:c9:d8:34:5a:71:
                    ee:bb:91:81:c6:2d:85:7b:60:d6:eb:e2:be:60:3f:
                    a5:8f:1b:22:b1:0a:94:72:83:36:96:f7:01:4d:fc:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:E7:EF:7D:EB:16:24:EC:D5:2F:D6:BA:91:1B:B6:B1:8C:74:8E
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:40:3e:bb:16:64:93:9d:16:f3:43:eb:15:a8:3d:50:58:
         61:e1:9a:b4:06:8a:f5:96:05:a8:91:09:98:51:2d:79:63:18:
         bc:5a:82:d9:45:0e:94:e6:18:85:ad:fc:e1:ea:29:85:24:f9:
         3e:de:a5:4f:44:ed:53:7d:c2:22:71:5d:46:6a:34:0a:25:11:
         95:80:63:9b:e6:cc:3b:09:ca:dd:3a:06:e9:cf:1a:53:67:4c:
         a7:bb:e3:e4:ff:64:d1:50:f8:87:a6:f2:af:bc:e3:9f:f3:9f:
         91:25:c0:b4:1e:2c:9e:8c:a1:21:9f:e4:ec:42:00:7b:45:23:
         96:4d:41:30:5f:c0:98:1f:0f:fe:d9:ce:da:d7:0b:46:cc:f6:
         97:c6:fc:be:df:a7:b9:86:6e:ff:3a:9f:eb:85:73:b9:b1:0d:
         4e:26:59:78:03:1d:f5:1f:cc:51:69:55:57:a8:58:9e:17:a0:
         86:a7:e8:80:b9:4f:8d:27:d6:e4:00:de:36:4d:66:fa:57:aa:
         0f:f6:c5:a7:38:e8:97:69:3c:99:5d:72:26:b7:72:9f:c2:9a:
         cf:13:bc:47:26:7c:82:7f:d3:91:43:10:af:65:5d:63:c0:d2:
         37:54:dd:ac:81:87:c6:8d:4c:35:89:fe:9b:66:19:20:e9:91:
         52:08:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:12:02 2026 by rpki-client