Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          8u7U6DRip9h6rU/ChWFnsfv/e9UhCP/xtWs9mkxeRsA=
Subject key identifier:   D8:60:8E:D2:5D:79:E4:16:27:52:36:E6:81:62:0A:D7:E2:E6:39:D9
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C3E
Signing time:             Thu 16 Apr 2026 18:40:17 +0000
Manifest this update:     Thu 16 Apr 2026 18:40:17 +0000
Manifest next update:     Thu 23 Apr 2026 18:40:17 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: 7jQvtZdklPiq/Igo3BSnK4g7b7rYfMBVnXCe802mW5c=)
                          2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
                          3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3157 (0xc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Apr 16 18:40:17 2026 GMT
            Not After : Apr 23 18:40:17 2026 GMT
        Subject: CN=69e12d11-3634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b8:c7:43:ba:15:8e:cb:46:4d:40:ee:2d:01:
                    3d:50:e0:3d:76:22:34:b9:fa:be:05:76:a9:20:39:
                    e3:58:80:82:96:2d:66:aa:37:ad:42:c8:8c:27:0a:
                    d8:5c:cf:c0:1a:c2:c6:b5:eb:d2:5b:d7:e7:49:b4:
                    8b:22:62:52:89:57:af:5e:18:08:2f:ed:40:d9:27:
                    89:3b:ab:31:a7:b4:77:0d:6b:9e:31:8f:96:a0:43:
                    51:7d:32:20:52:30:57:c2:fe:b2:a8:5d:c4:1f:f9:
                    4a:f9:2e:85:e7:1f:23:28:4d:32:1a:3d:1d:54:53:
                    f1:2c:26:74:84:d5:a0:de:da:81:b8:87:b8:76:67:
                    31:10:5d:9b:0f:06:db:6e:c1:f6:6b:6e:4b:22:c2:
                    65:61:77:d4:50:e4:bf:b3:67:f2:f5:ef:f3:68:84:
                    12:ad:94:0f:ac:4e:a1:70:24:c4:eb:f6:cc:ef:01:
                    bc:43:37:90:b6:fe:04:43:8e:42:2a:7f:b9:d7:07:
                    25:c5:a8:f6:a9:8f:ae:b4:0b:5c:d1:56:55:f0:23:
                    f2:b6:5b:4e:fd:b2:55:19:66:20:51:47:cb:49:ff:
                    ef:d6:db:37:24:bb:c2:bc:81:a2:93:8c:3e:22:d1:
                    a6:64:01:7c:11:f4:77:ef:e8:e2:a4:02:65:93:7f:
                    11:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:60:8E:D2:5D:79:E4:16:27:52:36:E6:81:62:0A:D7:E2:E6:39:D9
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ec:d6:16:13:ea:3c:26:4b:87:90:75:3c:9d:31:fb:2b:ad:
         b0:aa:fe:69:1c:52:e6:82:6b:c8:8f:15:f6:d8:34:36:fe:c6:
         a6:62:ca:f2:49:e1:10:18:0c:e6:58:dc:7b:d1:f9:e2:29:09:
         46:6e:a6:cb:5d:0b:3d:b2:f4:7b:b2:89:54:18:55:9e:89:c1:
         5b:c4:3e:7a:0b:c4:7f:88:5d:97:72:78:d2:f5:a5:b3:f2:73:
         45:c5:bf:13:03:e2:c2:d7:2a:cb:65:04:f0:33:36:2a:d6:e7:
         cf:39:9d:ce:f4:1c:80:9e:c7:c0:23:d2:5c:a8:0a:3c:79:e8:
         bc:6c:74:2f:e8:7b:64:9d:ec:f9:49:07:45:b9:e5:77:4b:66:
         94:e2:f1:eb:e6:71:7d:9a:60:90:2c:28:e7:e6:95:8a:be:8d:
         ed:32:d2:19:7d:d0:e2:74:7c:06:e9:df:00:3b:38:59:be:ad:
         26:81:f5:ae:82:57:77:79:3f:e4:68:fb:02:58:82:cb:06:7b:
         c2:92:97:be:8a:f7:77:4b:b4:c6:f0:90:a8:69:af:4e:22:df:
         65:72:90:a3:95:46:22:94:25:ba:2a:0c:e3:36:fa:74:49:00:
         6e:be:b2:f1:5e:e2:04:cc:e0:e7:f7:92:f8:28:8a:b3:a5:53:
         9d:54:66:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:06 2026 by rpki-client