Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          9BAJifETrLn2IlvEiXqZHBOYMbIymmCpc674qP3OzNU=
Subject key identifier:   43:67:B6:E6:29:A7:75:A1:F9:1C:EA:7C:D3:22:80:3F:AF:CE:5F:07
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0F16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0F01
Signing time:             Thu 02 Jul 2026 17:44:36 +0000
Manifest this update:     Thu 02 Jul 2026 17:44:36 +0000
Manifest next update:     Thu 09 Jul 2026 17:44:36 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: SAGxzpxzhJ9onN6jQ9hyzpvVK9LWHEVqhOATHPAfH8A=)
                          2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: xKR+1TqcXk1tuGXmRs5U35Hu6EeN0viZWiMmzSgp8ik=)
                          3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: 3FX6yd8ajXUCf1DvaodFv7wjS6jvEbFRhv/3yRD4WYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 Jul 2026 17:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3862 (0xf16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: Jul  2 17:44:36 2026 GMT
            Not After : Jul  9 17:44:36 2026 GMT
        Subject: CN=6a46a384-c582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:c2:fd:2d:0d:78:1e:0e:bc:72:52:64:64:
                    65:02:8d:1c:cc:b2:a2:21:b9:41:64:6b:eb:da:df:
                    3d:cd:18:5f:90:06:41:e7:83:98:45:ee:4c:8a:e4:
                    6f:87:bb:b1:40:b5:b5:ef:c8:8a:ae:55:f9:42:9d:
                    e4:07:09:ae:2a:7c:e1:32:ca:4d:93:b6:e7:98:9e:
                    a7:76:f1:40:28:80:83:19:2b:ce:9e:47:51:46:ec:
                    27:bc:1a:79:9a:7c:42:4a:81:55:d2:eb:1b:e0:98:
                    95:0f:92:6f:d2:fe:9f:35:84:21:0a:92:79:f3:2b:
                    a6:7c:1b:dc:ad:2b:3f:e0:08:09:f4:05:aa:2a:26:
                    23:9a:71:a7:09:a0:a9:85:62:cd:72:bb:c1:55:d4:
                    e2:36:d9:aa:c3:57:6c:59:eb:ce:d6:04:6e:c5:04:
                    46:78:0e:11:9c:b8:b8:b8:91:2d:6c:56:77:83:cc:
                    b0:41:16:48:b2:4b:7b:98:86:16:20:7b:1e:b5:9f:
                    22:e0:2e:3e:c7:fd:d3:f7:5a:b5:4d:e2:06:56:4b:
                    c6:64:69:c9:c1:48:4f:74:53:39:7d:aa:f2:84:3d:
                    c9:42:c2:92:a7:1a:08:7b:b5:24:db:b3:ba:fd:24:
                    d7:81:6d:a8:c9:94:9d:a5:af:eb:9a:9d:67:e3:e3:
                    98:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:B6:E6:29:A7:75:A1:F9:1C:EA:7C:D3:22:80:3F:AF:CE:5F:07
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:9d:ba:d3:7e:4f:ec:85:b4:22:4a:01:32:83:27:01:bf:
         79:41:5f:b4:af:3c:6d:f0:8e:d3:80:6f:df:e8:bd:ca:18:2e:
         73:1e:d2:47:96:3f:68:b7:52:56:8a:72:73:30:1b:b4:4f:be:
         06:c3:59:09:11:bf:4e:1a:d6:4a:f3:8f:ab:3b:dd:a4:c6:f8:
         55:75:0b:3a:3a:22:43:6c:28:3f:09:d1:c5:5d:68:7c:6c:87:
         4b:2c:ee:97:87:cd:ef:bf:e3:c7:07:4d:1f:7b:4a:13:bd:a6:
         9b:b6:0f:73:24:08:d8:cc:19:c0:f7:27:c1:b8:bc:58:ee:5d:
         d9:67:ef:92:b5:fc:fc:de:c4:12:37:1f:17:ff:5d:0c:9e:f8:
         fe:49:5b:1c:40:24:0f:b1:83:a2:c2:42:3a:49:44:57:94:cc:
         9b:d1:32:3f:2d:17:bf:20:90:d6:1e:e0:a6:af:9d:3f:b4:82:
         5d:73:4c:5d:a4:8b:e3:da:4d:1e:f8:91:59:f3:ec:0f:a6:3d:
         bf:5d:9a:0b:42:34:32:e8:ba:fe:a5:f6:17:23:5b:3f:0e:57:
         0b:5c:db:03:5a:c9:b8:50:d5:d1:92:96:51:7c:cb:97:24:c6:
         3b:d2:34:e3:f9:2e:ca:00:81:c2:29:86:4d:a3:0c:47:c1:60:
         6e:f6:bb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 01:27:00 2026 by rpki-client