Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          rbogCs2RvU3/1Segom+V3AFOkTgVYxl3ohdrKYnPPG0=
Subject key identifier:   11:6C:1C:70:A6:91:B6:43:50:32:CB:3D:5E:0C:E8:70:7F:76:6A:54
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0D77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0D4A
Signing time:             Tue 12 May 2026 18:05:18 +0000
Manifest this update:     Tue 12 May 2026 18:05:17 +0000
Manifest next update:     Tue 19 May 2026 18:05:17 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: 2lJanYaiV4mSw36lNzq9i4sQq4rhgYINo1IL8nI4R8M=)
                          2: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
                          3: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
                          4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3447 (0xd77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: May 12 18:05:17 2026 GMT
            Not After : May 19 18:05:17 2026 GMT
        Subject: CN=6a036bde-b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:9d:e4:e7:7e:8d:7e:95:da:f3:e3:a8:a8:
                    91:5b:12:fa:5c:a8:a9:ca:62:30:e5:2f:31:a8:f1:
                    38:07:40:88:03:3c:d6:9b:a0:93:73:08:5f:a7:fb:
                    ca:32:bc:f6:7a:f0:db:3b:a8:3f:c8:07:c2:66:f6:
                    b4:bc:ab:dc:45:8a:7a:47:e7:24:34:cb:61:df:b0:
                    e5:2f:ff:bc:82:fd:7c:10:5f:e5:ac:51:a0:0d:44:
                    21:60:a5:d9:eb:22:4d:bd:df:09:1a:86:26:df:4e:
                    44:45:4e:57:9e:60:11:6f:df:07:4f:1d:de:91:45:
                    1c:47:a2:8b:8c:cb:ac:7d:c1:72:c5:51:92:db:1f:
                    3c:e9:5a:3e:5d:64:4c:67:86:fd:14:d4:4f:57:d1:
                    03:c2:75:12:d0:5b:41:0a:83:f3:e6:86:16:ca:df:
                    97:40:53:9a:7d:51:32:42:2b:64:47:6e:14:34:88:
                    c6:51:85:92:96:07:b0:84:3e:01:2e:b3:28:5f:5e:
                    50:8a:91:8d:21:e2:d0:38:0b:43:c6:d2:72:d4:e7:
                    3b:30:bf:fb:ea:a2:99:cd:42:11:cf:43:0e:dc:53:
                    b0:0c:aa:2b:3b:d0:60:f7:13:0f:ea:e7:65:b8:b7:
                    54:e4:4f:be:48:6a:bd:37:c5:1f:72:46:2c:73:c5:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6C:1C:70:A6:91:B6:43:50:32:CB:3D:5E:0C:E8:70:7F:76:6A:54
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:55:6f:ba:9c:d9:2e:f0:d4:f2:9f:05:3f:9e:af:9a:64:90:
         ef:d6:a5:54:7e:43:37:3b:a5:a5:19:f1:db:38:ad:c2:1d:30:
         69:a5:7f:97:5f:29:e4:b3:12:bb:37:e0:6c:19:39:00:d9:d8:
         c4:59:14:1e:bf:e2:d4:c7:4d:fb:91:7c:66:1d:61:ba:81:d7:
         5d:71:ff:ca:f0:88:2c:88:73:9b:26:52:ab:8c:7d:12:7e:09:
         66:41:d1:b3:06:39:82:c9:a6:22:49:bf:83:dd:39:cc:f4:b5:
         b4:d4:00:b6:c8:f9:25:03:4e:49:98:db:e7:ff:56:a2:85:35:
         c4:0c:24:db:5a:1f:43:bb:4d:5b:69:c5:a7:e1:4f:13:c8:6a:
         e6:85:a2:27:46:29:d6:be:77:f7:c1:fa:cf:1b:18:e7:8b:82:
         7f:28:3e:d8:13:ee:d5:0c:00:ff:9a:d6:73:e7:db:ce:cf:58:
         f3:51:8b:46:0b:36:b5:ab:ba:6a:6e:68:e8:90:fb:e0:60:90:
         52:8f:67:0b:af:b5:09:a0:d0:a8:67:7b:4c:7a:dd:e4:e3:e7:
         b9:b8:c5:9f:30:a3:0b:69:f6:5f:e6:ea:97:45:89:07:51:eb:
         d0:c3:40:af:9f:52:1f:7c:68:1c:47:4b:a3:7e:96:77:49:b4:
         b6:1c:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:23:06 2026 by rpki-client