Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          Ejy7qVvXp3VXtxQTN7fwH5tC7UYWeB1jpKjTm4/QUi4=
Subject key identifier:   77:7F:9F:6C:A3:D0:F3:C5:3E:73:DA:94:3F:F5:B1:7F:EB:FE:F7:65
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0DA9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0D7C
Signing time:             Tue 18 Aug 2026 18:14:23 +0000
Manifest this update:     Tue 18 Aug 2026 18:14:22 +0000
Manifest next update:     Tue 25 Aug 2026 18:14:22 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: 0vtdMXEbGg9uFzn4xwRJ1KUDBwZGJAkObWKGH6cs7XI=)
                          2: F1862B06642911EAA019224CC4F9AE02.roa (hash: +RFwF52pSjAP6X0JbZmmA2Om4iE/d6yTz0SFz6eLkRo=)
                          3: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: TfxnYvMqsGqSHtutk4H1PEC5zPxBvYNGo/9OPc5rkx8=)
                          4: F058F664642911EAA019224CC4F9AE02.roa (hash: ep+PFUWQF1RX41+hItOv/fNufapGxk0WdJRfAH7AmxU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:14:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: Aug 18 18:14:22 2026 GMT
            Not After : Aug 25 18:14:22 2026 GMT
        Subject: CN=6a84a0ff-4175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:58:cb:06:94:14:88:10:2b:d5:b9:61:8d:
                    b9:f2:e6:91:e2:e9:02:48:99:53:d7:7b:ef:ce:5e:
                    b1:51:7d:b0:14:ce:b8:29:a0:e9:d8:2f:b9:59:77:
                    00:3f:09:60:e6:27:85:9d:c1:06:f8:1f:30:05:8e:
                    bd:fa:10:1c:cf:ba:3b:06:f3:51:db:0f:2b:15:29:
                    87:53:02:06:27:fe:70:d7:20:54:e2:0f:4e:15:92:
                    b5:58:9a:18:8d:2d:dc:67:33:97:65:4c:4a:f8:24:
                    c4:c1:1a:89:e1:fd:1b:fc:e6:fd:e2:13:eb:7c:5b:
                    c5:f9:53:c1:3a:0d:70:75:09:3b:ac:9d:31:0a:dd:
                    76:e4:01:44:47:1d:3b:4a:6a:3d:39:02:4e:f3:ea:
                    36:45:a7:38:15:d5:d6:83:e9:2d:c5:60:6c:24:1b:
                    06:f7:35:f4:b5:dc:80:9d:cf:af:12:23:c9:32:5b:
                    a5:26:f1:43:e3:c4:e2:7f:f3:b5:a9:3e:c6:56:a4:
                    f7:6f:f5:a4:a9:d3:20:14:6f:e3:b6:53:fc:53:d1:
                    ff:38:63:f9:4e:22:bb:54:1d:12:d3:bd:bb:fa:95:
                    87:a5:c6:12:28:49:cc:ea:9f:c7:66:d5:57:5c:78:
                    e3:49:ef:e0:03:d0:54:d8:5c:b8:cc:fa:e1:9a:b3:
                    9f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:9F:6C:A3:D0:F3:C5:3E:73:DA:94:3F:F5:B1:7F:EB:FE:F7:65
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:05:be:57:cc:06:5f:35:2d:2e:63:9f:e8:0a:71:40:e0:
         e4:88:5b:cf:bc:53:2f:16:d7:62:ae:86:53:2a:bf:28:32:9f:
         af:2e:0f:4b:d9:6c:f1:d6:14:3c:33:3b:e6:fd:90:e4:f7:d4:
         75:82:c9:e5:aa:de:39:c1:b2:15:d2:b7:61:fd:09:04:88:db:
         bd:af:22:3a:b0:cf:e9:e7:f3:08:2b:26:cf:76:23:7d:ba:d8:
         e3:2d:08:d3:e3:22:24:92:5c:ef:8c:1c:96:aa:a4:eb:a6:05:
         34:74:a7:c5:3e:b6:d1:22:ac:7a:f5:bc:b1:c7:4e:4c:74:19:
         7a:7e:95:e8:75:88:e3:bb:71:0c:84:93:24:2a:07:ce:e3:de:
         89:d3:e2:f7:fe:94:c0:b4:20:58:bd:77:78:69:23:bd:70:d0:
         88:5f:65:cd:8b:e2:9d:5d:39:e6:d2:c7:eb:fe:bf:59:90:f7:
         d6:2d:38:b7:28:7a:d0:70:85:1b:f5:d3:4a:d5:5b:b4:6b:06:
         a0:3b:67:d4:3d:a4:87:0b:d3:79:99:df:98:cb:97:19:da:98:
         1e:96:e8:61:87:ae:9e:12:d0:67:d3:36:dc:bd:86:93:18:6e:
         30:a6:2c:16:dd:11:f6:54:9f:77:8c:4c:c1:ea:29:01:e4:91:
         07:48:ee:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:55:25 2026 by rpki-client