Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
File:                     4mcctGrTmxwXJOxjzVOymz5IHpk.mft (raw, json)
Hash identifier:          0XujDHS7Npe8XS8DRRcw1d1IJRroi2Ef9qqJ1CAoIYY=
Subject key identifier:   62:F1:AD:4C:52:93:A7:9E:FB:00:28:41:31:12:1C:76:9B:E3:C9:E0
Authority key identifier: E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99
Certificate issuer:       /CN=A914145F/serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
Manifest number:          26
Signing time:             Wed 13 May 2026 08:55:10 +0000
Manifest this update:     Wed 13 May 2026 08:55:10 +0000
Manifest next update:     Wed 20 May 2026 08:55:10 +0000
Files and hashes:         1: 4mcctGrTmxwXJOxjzVOymz5IHpk.crl (hash: rSokhB0EiMZUyhy+Pwz8ojL0pOFSCspGVmIh51U7ec4=)
                          2: 2D0F8E9E16BA11F18FA4AADE273D8C67.roa (hash: yWwtKIoGzkza5ajepsaaRnUFxlesI9AwU+G4CnGMim4=)
                          3: 2C8A1D2C16BA11F18FA4AADE273D8C67.roa (hash: twoRF5oqlZ7HCh1Oa3drRkDKu566LB667OHWRh/w7Jg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=E2671CB46AD39B1C1724EC63CD53B29B3E481E99
        Validity
            Not Before: May 13 08:55:10 2026 GMT
            Not After : May 20 08:55:10 2026 GMT
        Subject: CN=6a043c6e-96bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:60:58:0f:75:8e:a2:63:a8:90:9c:c3:51:
                    8e:bd:87:1e:6d:70:aa:9f:f4:e2:16:47:ee:0e:c2:
                    6c:86:20:45:64:c8:01:cb:67:fc:58:42:e6:6d:5f:
                    b7:eb:40:ec:7c:8c:c4:2d:fb:6f:8b:42:8b:f2:c2:
                    b7:23:21:3b:a7:86:11:ba:5a:ad:4c:32:63:72:20:
                    1c:3e:ca:d0:1d:12:95:91:4d:3b:2b:2b:43:a1:58:
                    9c:30:b1:c8:0f:57:f7:bb:33:10:33:72:55:03:d3:
                    c7:e4:10:c4:21:82:9c:d9:50:05:ee:3b:77:77:da:
                    ea:df:73:91:7f:36:f4:1e:fc:bf:16:42:1f:96:83:
                    d9:67:d4:63:70:35:4d:20:db:f7:df:eb:e0:69:d7:
                    23:bc:55:9f:53:68:e2:d6:d5:71:60:2e:61:6b:91:
                    f7:92:77:56:4f:30:fd:0e:f2:97:86:eb:ba:33:d4:
                    cd:d1:f8:6c:31:16:f5:8c:dc:37:ad:42:b4:70:48:
                    20:6c:f7:91:42:90:8c:29:73:75:13:69:b0:b1:cb:
                    f4:e7:04:01:1a:ef:9a:81:5d:42:21:27:8a:44:e8:
                    c1:5d:69:9a:77:5b:79:96:11:a5:13:60:d3:a1:4e:
                    c4:f7:ae:a4:c7:d8:6c:81:89:e1:02:54:85:89:bb:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F1:AD:4C:52:93:A7:9E:FB:00:28:41:31:12:1C:76:9B:E3:C9:E0
            X509v3 Authority Key Identifier:
                keyid:E2:67:1C:B4:6A:D3:9B:1C:17:24:EC:63:CD:53:B2:9B:3E:48:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4mcctGrTmxwXJOxjzVOymz5IHpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/B472F05C16B911F18B290B48273D8C67/4mcctGrTmxwXJOxjzVOymz5IHpk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:71:70:40:64:28:35:68:e6:e4:25:51:32:03:7c:19:73:5c:
         14:2e:d9:68:ed:97:bb:c3:43:f0:44:0a:6a:85:88:a4:87:ec:
         4c:67:d8:c1:9d:41:f5:64:e4:e4:db:13:a6:55:13:fb:4a:b8:
         b9:26:c9:49:25:87:3c:00:07:d3:b0:7e:32:7f:81:eb:19:79:
         46:ab:11:09:66:59:7d:4e:c6:59:ff:61:8e:32:1d:8a:25:09:
         d2:2f:66:6a:a1:8c:1b:cf:6c:cd:e2:2c:5f:64:ab:3e:da:91:
         63:42:9d:9e:ac:01:f9:94:c8:f1:94:55:04:f2:62:af:e9:f5:
         95:f4:a8:80:bd:dc:1e:d8:7f:a4:2e:91:10:18:d4:91:1d:e4:
         75:86:6a:10:d5:fc:c6:4c:0c:c6:28:e6:59:1c:4a:29:34:31:
         ce:19:13:b3:74:94:08:4d:f0:60:93:02:b3:2f:a2:bd:06:f7:
         3b:80:77:c4:20:d1:99:26:ba:56:67:b1:8a:22:a8:9f:cc:cd:
         19:49:69:4b:e8:7e:fa:c6:2e:b0:a7:4f:29:17:0c:43:1c:62:
         4b:60:2b:82:28:b8:bb:37:2b:de:06:f6:c7:89:34:0f:57:61:
         cc:52:1e:27:7d:07:41:0e:78:33:81:1b:a8:e5:5e:cf:78:48:
         b5:85:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:18 2026 by rpki-client