Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
File:                     xNT7D_AneW6dqhe3VVH9C3fxmC8.mft (raw, json)
Hash identifier:          odXkC1TsVUSBGMJb1qdiv7C9ht5ZGJXh6gJerP2Ngn4=
Subject key identifier:   16:1D:21:95:F6:F5:DA:1E:5C:E5:EA:49:20:EB:E2:C4:31:67:C0:FE
Authority key identifier: C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F
Certificate issuer:       /CN=A916EB94/serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
Certificate serial:       04DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
Manifest number:          04AE
Signing time:             Thu 21 May 2026 00:03:32 +0000
Manifest this update:     Thu 21 May 2026 00:03:31 +0000
Manifest next update:     Thu 28 May 2026 00:03:31 +0000
Files and hashes:         1: xNT7D_AneW6dqhe3VVH9C3fxmC8.crl (hash: yO4gygvfFn0InbKr6FnTOFb+BMAqeLE6j9C5p4P8lEo=)
                          2: 66EDABB6815411EF98D05E1EC4F9AE02.roa (hash: 3u67oMwzGOz5a39ev00s5EB6ZROVZTn6ToX//42/CIo=)
                          3: D694BD82DBBA11EEB4125A3EC4F9AE02.roa (hash: TYYIQ0iKctVFngYjoXqXM7SKx8woLPPUnuROtzeNaq4=)
                          4: 51FE6D48D27011ECB30F1F0DC4F9AE02.roa (hash: ZfXqil/HZcQKRq3QzpskMCnsaTW6MQfjBYeGj9Tkbjo=)
                          5: 38D5F796961B11EC9851F811C4F9AE02.roa (hash: fdGiVPweujLtnlzQBkxSdHNbQU/GitI5AIHJtY/ChyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl
                          rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1245 (0x4dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EB94, serialNumber=C4D4FB0FF027796E9DAA17B75551FD0B77F1982F
        Validity
            Not Before: May 21 00:03:31 2026 GMT
            Not After : May 28 00:03:31 2026 GMT
        Subject: CN=6a0e4bd4-8251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:10:17:90:67:b7:b0:ff:67:af:95:74:52:
                    d4:87:80:96:01:aa:15:a0:78:f7:89:53:ea:69:09:
                    92:b2:fb:b4:a7:19:d9:f7:4b:46:68:9d:b5:71:78:
                    d2:ae:f6:86:bd:2b:31:a5:e7:9c:65:85:ec:72:32:
                    62:54:fd:95:c6:4f:69:cf:f8:ba:f5:92:3f:9d:41:
                    48:85:f3:76:8b:4d:ca:5f:34:a1:9d:8a:b3:50:e7:
                    a6:4d:cb:42:2c:07:f4:ee:0d:11:4b:cb:5e:6e:6d:
                    9e:68:75:0f:5e:56:e6:91:bd:2c:97:48:99:7a:78:
                    29:cd:f4:9a:d2:66:9f:16:b4:de:07:ef:7d:14:05:
                    ec:33:84:b1:7c:6c:72:12:eb:8d:68:5b:dc:54:18:
                    f4:9b:92:b7:eb:13:f1:56:ae:fb:16:cd:b9:29:03:
                    d3:f0:99:bc:76:9a:51:7a:a4:d4:38:0d:08:26:59:
                    0c:22:62:55:5e:e8:08:04:d5:42:0a:b1:f2:08:4a:
                    02:02:2d:17:ef:43:d8:d3:83:62:10:b0:db:32:10:
                    d3:3a:ae:d5:54:b5:fa:29:7f:15:ac:87:ba:f5:1f:
                    ac:28:60:2a:2c:5b:56:b2:b2:ac:46:c6:b9:f7:5b:
                    6d:8c:8a:20:3c:54:d3:0a:a4:ab:e4:e4:d3:58:02:
                    82:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1D:21:95:F6:F5:DA:1E:5C:E5:EA:49:20:EB:E2:C4:31:67:C0:FE
            X509v3 Authority Key Identifier:
                keyid:C4:D4:FB:0F:F0:27:79:6E:9D:AA:17:B7:55:51:FD:0B:77:F1:98:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xNT7D_AneW6dqhe3VVH9C3fxmC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EB94/E3CC25D8811E11EC92025551C4F9AE02/xNT7D_AneW6dqhe3VVH9C3fxmC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:4d:43:a5:0e:99:5b:ce:fb:c5:ac:14:7c:4f:3a:60:fa:
         0e:d5:57:58:c2:b8:80:ff:1d:7e:9f:97:51:39:24:4d:28:0d:
         15:6a:c1:fa:e5:e0:90:80:2a:59:bd:4f:ab:bd:e7:2d:a5:9f:
         cc:fd:84:f1:c7:38:e1:4e:76:da:53:1d:50:f7:8c:7d:14:27:
         79:b2:af:86:7d:94:1b:fa:80:e3:df:32:79:72:f4:a1:7a:70:
         d6:87:05:e9:37:6d:66:81:b6:37:34:c6:79:3a:42:c4:49:61:
         60:73:5b:1f:0c:4f:e6:6a:ae:6d:7b:b9:3c:a0:6f:3c:ba:ff:
         45:8d:f2:6c:8e:75:79:d6:df:b2:9a:ca:f2:3d:73:25:03:44:
         d8:a9:da:20:a7:50:81:75:31:d0:a7:06:8b:9b:56:12:16:49:
         91:7b:e7:9d:8f:04:df:9b:69:b2:3a:2e:50:c6:cd:05:76:8a:
         d1:d8:3c:5b:11:14:09:b2:98:16:71:45:55:62:81:09:dd:05:
         98:e8:08:01:41:f2:13:f8:fb:d5:2d:fe:99:81:c8:ee:95:5d:
         ac:24:91:e2:ac:6e:b3:d5:b5:74:0f:3a:b9:21:6d:9d:59:a3:
         e6:8a:58:16:1f:47:51:a2:4d:d5:d1:d2:d6:0d:97:be:a4:b9:
         48:ec:96:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:55 2026 by rpki-client