Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
File:                     cEb4mD38NwS25c1-oSgP0PUpeaA.mft (raw, json)
Hash identifier:          9dk1rO6VbjLd5igoqDnH6XAcK2wlzNNRCI3HLDFgCgk=
Subject key identifier:   BE:65:6A:3E:DA:BF:9F:86:4E:29:BB:51:D7:F7:E4:91:C5:9B:4C:AE
Authority key identifier: 70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0
Certificate issuer:       /CN=A916320B/serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
Certificate serial:       0C72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
Manifest number:          0C5B
Signing time:             Fri 12 Jun 2026 18:43:22 +0000
Manifest this update:     Fri 12 Jun 2026 18:43:21 +0000
Manifest next update:     Fri 19 Jun 2026 18:43:21 +0000
Files and hashes:         1: cEb4mD38NwS25c1-oSgP0PUpeaA.crl (hash: T8t4JD0VRNahkjyQIiTGV2aqKtUnHjoWQWSLOUBFeD0=)
                          2: B9003CC84EE811EA8C045D52C4F9AE02.roa (hash: OjXelywDvs3PcA0G5eAXOiCmYLOHa7gJb/8woUyNMgM=)
                          3: 1B8483D04EEA11EA828FA155C4F9AE02.roa (hash: 6MBuRcB02GtiYUBvJ02SIBDjH2QM+fC5ns7ciouEVr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl
                          rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 18:43:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3186 (0xc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916320B, serialNumber=7046F8983DFC3704B6E5CD7EA1280FD0F52979A0
        Validity
            Not Before: Jun 12 18:43:21 2026 GMT
            Not After : Jun 19 18:43:21 2026 GMT
        Subject: CN=6a2c5349-bf32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:90:6b:38:7b:a6:41:e6:a8:e5:df:5b:dd:9f:
                    c3:58:51:9e:18:b1:79:27:a5:33:cb:80:04:0f:d3:
                    03:4a:71:87:f9:83:95:e8:0b:a6:cf:43:08:90:06:
                    dd:3c:26:d5:1c:ac:d3:8b:7d:74:79:ff:af:10:7b:
                    b9:53:c3:73:f7:6d:f2:1b:6f:21:5a:18:42:0b:ea:
                    41:e7:0b:13:eb:ea:55:be:7f:a8:96:cc:47:32:d8:
                    9b:6e:cd:43:27:c4:f0:41:b5:20:21:54:0a:fb:36:
                    f7:bd:29:fe:ba:85:a5:89:01:85:ef:98:94:f7:6e:
                    71:5f:8a:51:c8:d7:45:c4:27:ff:e8:56:9c:15:f5:
                    b5:dd:61:28:12:a6:1d:70:9b:5b:9e:1f:9e:33:46:
                    b7:11:32:26:11:79:48:26:29:2b:f7:55:2f:8e:b3:
                    f5:c7:9e:67:56:cc:80:e2:b1:b1:a3:44:9c:42:f1:
                    87:42:15:38:b9:ab:82:cf:c0:7b:79:42:f4:1a:6e:
                    18:5a:46:9f:79:ca:7c:d9:57:2a:40:d9:12:a8:54:
                    82:96:58:7c:cb:58:a5:32:07:45:a9:6a:47:41:db:
                    47:08:72:e0:6e:f7:31:26:da:ef:f7:3c:49:a7:b7:
                    0d:6c:a2:de:d8:20:4b:97:1d:24:53:b8:23:e9:a9:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:6A:3E:DA:BF:9F:86:4E:29:BB:51:D7:F7:E4:91:C5:9B:4C:AE
            X509v3 Authority Key Identifier:
                keyid:70:46:F8:98:3D:FC:37:04:B6:E5:CD:7E:A1:28:0F:D0:F5:29:79:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cEb4mD38NwS25c1-oSgP0PUpeaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916320B/0FFF7AAA27AE11EA85956E78C4F9AE02/cEb4mD38NwS25c1-oSgP0PUpeaA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:7c:0e:db:c8:3d:13:d2:50:19:27:f7:f8:61:6a:e7:19:93:
         32:9e:5c:35:b2:ec:9b:c1:9d:d3:d5:66:c4:0a:b8:db:7d:22:
         3c:d6:b5:d3:fa:e2:1e:67:45:5c:83:90:d6:17:97:c5:1a:19:
         b2:ec:8c:b1:a1:5b:f1:9b:1a:e0:9d:8c:ff:4b:09:14:9e:17:
         b9:7e:3a:b5:d2:f2:1f:a8:31:92:9b:9a:d6:92:40:b3:df:6d:
         51:50:3e:1e:dc:5c:b1:a3:be:d9:c9:31:c2:a2:d2:e5:a4:c9:
         33:04:bc:cc:47:db:5a:b9:de:dd:5b:22:03:74:aa:2d:2f:4a:
         34:4d:43:e4:d9:4b:cc:76:14:85:a2:55:4c:77:11:75:22:dc:
         ac:65:b8:3d:2b:10:e0:39:f7:dc:45:b7:d9:ff:0e:5f:32:d0:
         47:be:33:46:b9:01:46:5f:12:ca:11:4f:1f:ea:ed:a3:eb:bc:
         32:60:5a:8f:75:13:aa:2b:9a:16:a7:c5:02:a2:bb:77:58:ae:
         15:b7:c9:30:76:ef:bc:91:e2:0a:92:95:6e:08:ff:a0:6d:2c:
         d4:50:1c:39:ce:ee:20:0b:eb:54:21:85:58:c3:de:73:f4:16:
         01:12:d5:8e:0b:56:47:b7:50:11:35:f6:79:26:b7:70:08:c3:
         96:67:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:19:07 2026 by rpki-client