Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          xgqODtOeBL7LJtL7SOCO0j6L8sVXWA+DB4J75khGzxs=
Subject key identifier:   E6:F1:F1:94:7C:22:A1:06:28:11:99:64:BC:BF:A4:65:CC:59:CD:1F
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0D40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0D22
Signing time:             Sun 01 Mar 2026 22:59:02 +0000
Manifest this update:     Sun 01 Mar 2026 22:59:01 +0000
Manifest next update:     Sun 08 Mar 2026 22:59:01 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: Tz//yQXFiMbww+zCT9u58Gt3BoabMFICs2vhvr1Jugw=)
                          2: F1862B06642911EAA019224CC4F9AE02.roa (hash: hDbqIpDhadNVfJA3BTlR/LAeNyzW7Yu5fEKJ3DRQByg=)
                          3: F058F664642911EAA019224CC4F9AE02.roa (hash: fswItdkW32lVXP3oyuar/xrvNWOlG7N9r4aiXCCow9Y=)
                          4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: SRfMw9xLPZ7elFROo10aiya6fCbNB9qdBZAT+zdBGkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3392 (0xd40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: Mar  1 22:59:01 2026 GMT
            Not After : Mar  8 22:59:01 2026 GMT
        Subject: CN=69a4c4b5-16c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b5:7b:3e:d4:6a:3e:05:94:07:71:31:9a:e9:
                    6d:be:1c:ba:e4:a1:35:4d:9a:a9:3b:b2:cb:35:b2:
                    34:8f:6d:b3:a3:6f:45:d8:6c:5b:4e:fe:3b:fa:5a:
                    6e:72:1c:d9:b9:84:a2:f8:5e:50:c1:c3:ed:11:1f:
                    b0:0a:8f:98:70:08:3e:ec:ca:90:89:59:6e:e8:d0:
                    f0:05:83:1d:e2:2c:98:9e:22:0f:f1:6d:6d:3c:ab:
                    0c:7b:82:69:6a:78:9f:f3:1d:8f:2d:e5:1e:54:42:
                    f0:79:1a:7b:7c:5f:42:1a:9f:4e:a6:79:f1:0b:42:
                    f3:b4:f9:cb:77:b8:77:5b:21:b6:84:36:5e:f6:64:
                    a4:54:39:3c:df:b7:78:1e:42:4c:9f:97:ed:5e:ff:
                    91:c5:9f:a3:a5:38:fb:65:76:e4:44:f4:22:44:bf:
                    59:3a:d5:30:39:9e:73:ab:9c:7b:4f:ea:85:8b:fb:
                    f7:23:c5:b7:0d:c5:9e:09:e8:bc:3c:58:e9:5d:21:
                    1d:76:f2:7d:13:ee:32:e3:ff:59:64:44:ee:02:05:
                    34:93:29:ad:77:bd:eb:88:14:f9:b2:2c:b8:03:2b:
                    a7:51:1f:96:52:c8:e9:47:8e:5e:71:87:ba:3e:b8:
                    e0:c5:33:a6:6b:b6:c6:d4:0e:4e:79:0c:15:20:80:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F1:F1:94:7C:22:A1:06:28:11:99:64:BC:BF:A4:65:CC:59:CD:1F
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:75:e2:b7:64:69:0e:b5:ef:43:ee:e2:79:8b:27:e8:3b:0c:
         d1:d5:7c:ad:8c:07:79:dc:cd:6f:40:59:94:de:18:71:35:b1:
         3a:f8:92:6d:e0:15:19:49:e5:91:e7:67:60:cb:39:2f:e2:60:
         03:e2:8e:a6:35:32:fe:ac:4e:e2:b8:65:57:38:64:f8:5f:5e:
         80:44:4d:5c:41:6e:0e:3b:68:e3:8c:ed:8b:e9:32:b6:26:39:
         ee:5b:48:8a:d8:f9:33:f9:c0:10:54:62:db:36:36:8d:08:70:
         5d:eb:ec:e0:37:b7:ca:b6:e0:f5:3e:20:75:a9:03:a1:ec:7c:
         01:f3:fc:f6:ff:e5:a6:0e:a1:0d:8a:70:b9:af:91:d3:8b:21:
         79:3e:e2:da:b4:a5:85:6a:8f:33:d1:72:29:9a:47:d1:1c:8c:
         39:b7:06:b3:a1:26:6a:a9:4d:18:1a:19:c9:3a:3f:23:2e:d7:
         2d:ec:30:c6:37:6c:e7:58:04:82:21:c9:ff:c6:f1:ce:8d:cf:
         8f:78:e7:31:ee:db:b7:96:04:64:d5:3a:32:90:cd:e2:a6:d3:
         1b:50:0f:86:1f:37:73:e4:e9:07:30:3f:2b:3f:9d:86:1a:a0:
         7a:d1:7a:25:8f:3d:b9:76:78:5d:77:97:ae:6f:f8:57:70:98:
         9b:94:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:52:24 2026 by rpki-client