Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
File:                     P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json)
Hash identifier:          vWOYkvAZlHsfp/VIlzYl+MEYOhJF+nXOzTRFptLQ7BU=
Subject key identifier:   DD:55:A8:30:0C:0C:11:7A:92:A8:FB:2B:2C:3A:36:11:22:8F:31:4D
Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC
Certificate issuer:       /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
Certificate serial:       0CCB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
Manifest number:          0CB6
Signing time:             Fri 08 Aug 2025 18:24:39 +0000
Manifest this update:     Fri 08 Aug 2025 18:24:39 +0000
Manifest next update:     Fri 15 Aug 2025 18:24:39 +0000
Files and hashes:         1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: 7D6ogP0IBolCGVyrtTQ7xsSMlgUVbf2NpPkhzoElFqI=)
                          2: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: Ff3/FqCNA4mkoqAaYSIejnjODMfSiqhpG3rVl/PX+Bw=)
                          3: F1862B06642911EAA019224CC4F9AE02.roa (hash: NE07gybEMHoZccQKI9zxg9qWBAyxcpdRr8nAQDm4wfQ=)
                          4: F058F664642911EAA019224CC4F9AE02.roa (hash: QGCSSYG7s0JgJiTbtP2n7qUQajs/nLPSMS9t/fCsv+g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl
                          rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3275 (0xccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC
        Validity
            Not Before: Aug  8 18:24:39 2025 GMT
            Not After : Aug 15 18:24:39 2025 GMT
        Subject: CN=689640e7-33df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:34:6f:e8:bc:cb:27:5a:ca:d2:03:7a:d8:
                    4b:f8:ab:e4:5b:d1:c0:46:7b:98:a9:c1:6a:c3:77:
                    6c:92:6f:97:da:e4:4b:75:b3:55:81:c4:15:1c:c7:
                    64:c4:53:d6:fa:58:37:95:10:c0:9c:55:d9:11:cd:
                    8a:f1:df:bc:52:f5:2e:7d:fa:c8:2f:ac:63:5a:db:
                    3e:a4:a3:1f:d2:fb:25:f3:c6:e7:e2:ef:fc:9f:f3:
                    ae:65:12:7c:eb:c9:dd:94:b3:9e:c9:da:62:46:d8:
                    d2:b0:1a:8c:a3:c0:21:2e:14:e3:b3:72:e1:e8:59:
                    74:ff:50:0f:a6:2b:7d:2c:3b:a8:49:44:1b:0f:b9:
                    e9:ee:4f:ff:a1:fa:2b:da:85:d0:c7:5c:59:ec:ef:
                    fa:23:c0:57:f8:84:3b:c6:47:84:b7:c3:fc:7a:a7:
                    76:a7:f2:c0:78:a6:1f:17:81:d3:66:60:d0:03:da:
                    90:b5:98:51:9c:e1:c5:2b:2f:85:4d:db:36:13:83:
                    94:ab:d7:0c:cf:be:32:bb:04:30:a3:d0:d2:d9:70:
                    40:7f:12:10:e3:70:ee:2b:67:55:c9:a4:2b:74:dd:
                    0d:3d:c9:66:d7:2b:91:2a:c6:d9:59:f1:e6:a7:ea:
                    30:91:06:f5:6c:11:4a:19:45:16:3f:5d:1d:9d:5a:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:55:A8:30:0C:0C:11:7A:92:A8:FB:2B:2C:3A:36:11:22:8F:31:4D
            X509v3 Authority Key Identifier:
                keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:13:cf:dc:5a:cb:83:b8:63:83:cc:ef:93:04:50:42:0c:be:
         ca:af:c3:ff:68:e0:23:e3:d1:c7:ed:14:34:ed:15:10:b9:dd:
         fa:0f:1a:a2:04:a7:b7:92:b5:5e:b0:80:a0:2f:3f:af:e0:c5:
         67:15:a8:5b:d5:a2:b1:bf:a0:9d:c8:11:f5:58:55:03:2a:90:
         3d:71:49:d6:e9:dc:35:a7:54:aa:62:e3:6a:8d:7e:b3:d7:e7:
         b6:19:46:34:07:93:0c:06:15:54:81:eb:d8:2a:1b:0b:f5:92:
         05:7f:39:28:8d:9a:b7:56:bc:61:d2:1d:be:ff:91:f5:fc:f8:
         27:3a:13:f2:c4:db:cf:6e:a5:9c:f0:9b:e1:25:b3:82:20:cb:
         63:6f:1b:43:1d:77:ab:f0:28:17:a4:ff:d7:c9:30:9a:d3:74:
         27:54:35:85:e7:20:af:fe:01:b7:ff:47:2b:5c:79:c5:87:e5:
         a4:66:c2:c2:13:98:63:d7:5d:e9:75:f0:a8:80:56:e3:df:32:
         ff:35:a9:62:b9:22:fa:cf:65:20:ae:45:37:ba:45:9b:c1:4b:
         01:66:ca:80:33:2b:f8:34:12:85:97:97:fc:8c:e5:9c:db:74:
         2c:3a:a9:59:7f:00:7c:30:2a:f3:23:32:ec:df:dc:7c:a5:cd:
         ab:a2:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:12 2025 by rpki-client