Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
File:                     4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft (raw, json)
Hash identifier:          h+DK0S+vSuLS8JOLvtmFhWyKLgDs/5qEzDpQlscKo48=
Subject key identifier:   81:EB:1F:38:C2:6E:5A:9D:35:95:BF:55:1B:FE:B8:D3:6C:06:12:4E
Authority key identifier: E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F
Certificate issuer:       /CN=A91471DA/serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
Certificate serial:       05AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
Manifest number:          05AB
Signing time:             Sun 10 May 2026 23:11:42 +0000
Manifest this update:     Sun 10 May 2026 23:11:41 +0000
Manifest next update:     Sun 17 May 2026 23:11:41 +0000
Files and hashes:         1: 4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl (hash: 13DEhCsIWxG/iN848HwHsZAH1t593s49XvyeIyym3N4=)
                          2: 914E7A440FE611EC8DD2020EC4F9AE02.roa (hash: WdImnCcnZcMtzi9Kuo/0VUvS1a6vE4XzsB1x3n+OVA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl
                          rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1455 (0x5af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91471DA, serialNumber=E24D09541062C608BE363FF619CCB8444DDC3C2F
        Validity
            Not Before: May 10 23:11:41 2026 GMT
            Not After : May 17 23:11:41 2026 GMT
        Subject: CN=6a0110ae-58ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:54:d2:40:9a:f8:9d:ac:85:f9:f7:2f:b7:b7:
                    a1:91:1b:44:b4:cb:1d:83:3a:37:ce:3e:bb:2e:81:
                    d7:ad:72:68:a5:0f:71:f6:12:bb:51:77:b7:19:71:
                    ba:d6:2f:d6:ce:5d:64:2b:f0:e8:46:dd:7e:60:55:
                    0f:78:34:0a:d7:05:97:9b:5f:81:5f:5d:96:46:46:
                    a3:17:d0:e2:8f:dd:5f:52:71:a9:59:b7:0d:d8:a3:
                    ad:2a:24:57:c9:47:08:c4:5b:45:3c:73:81:46:23:
                    fd:62:19:57:e4:c9:54:e8:c5:57:44:f3:0f:1e:7f:
                    29:ca:6d:5a:e8:88:c6:61:ba:d7:19:e6:97:74:ce:
                    f9:4b:ff:4f:fc:77:e0:07:53:ca:fe:f6:63:be:1f:
                    73:e4:49:95:c9:15:5d:96:32:0b:18:c0:fb:1d:9f:
                    f7:46:b1:fd:b9:dd:15:a1:bc:ba:57:07:cd:b8:6e:
                    04:04:ad:de:6f:60:3e:fe:27:df:8b:50:2d:6e:1b:
                    6e:a1:2f:f0:ab:32:f6:69:e0:a8:1b:05:3c:75:91:
                    98:24:8d:b3:1d:45:72:60:08:b2:92:cd:ee:51:40:
                    f5:9c:ad:d9:1e:74:b7:a9:a4:4c:76:9d:24:27:d1:
                    d3:a6:12:b0:a8:5c:40:70:78:ec:95:a0:ea:7b:e5:
                    71:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:1F:38:C2:6E:5A:9D:35:95:BF:55:1B:FE:B8:D3:6C:06:12:4E
            X509v3 Authority Key Identifier:
                keyid:E2:4D:09:54:10:62:C6:08:BE:36:3F:F6:19:CC:B8:44:4D:DC:3C:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91471DA/51D579480FE211ECA4DDC909C4F9AE02/4k0JVBBixgi-Nj_2Gcy4RE3cPC8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:0b:3e:4c:47:00:50:f6:b3:08:bd:a2:92:a0:ad:db:e5:2e:
         e1:55:b4:6a:d9:c1:f4:24:fc:8f:76:0a:9e:c1:94:25:86:41:
         69:12:0e:14:b3:70:19:e7:a5:f6:0a:48:24:db:8b:75:54:38:
         83:f7:33:16:42:7e:6c:56:23:41:9d:08:b7:db:0f:91:24:75:
         70:fa:1c:67:d7:ae:27:78:2e:65:ea:1c:83:c1:c2:06:82:25:
         9b:68:d0:b6:91:28:7b:e1:dc:aa:64:04:5e:65:87:38:77:42:
         8c:ae:d6:d9:7e:0a:d3:0e:db:47:6e:4e:8e:37:18:85:19:75:
         49:46:c7:cb:84:6c:b3:51:0a:a5:08:64:82:13:1e:9f:6c:6e:
         3d:eb:86:a9:b1:2b:c5:36:1f:10:4e:9e:af:90:c0:b4:bb:66:
         b7:08:84:e7:10:6c:bd:0b:1f:2d:8c:f9:74:b2:f1:e3:7d:b3:
         02:98:c9:14:20:7f:df:0d:a8:3f:51:c7:39:a7:b6:5f:14:6c:
         02:61:3c:99:5d:af:0c:64:c6:86:2a:74:a3:30:c5:0a:38:34:
         d7:28:63:2f:bc:47:20:78:8d:0d:91:ef:d6:3d:56:f6:3a:d0:
         5c:da:9b:35:ce:8b:dc:16:65:52:22:c2:c8:ed:01:62:9e:3c:
         da:a4:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:40:27 2026 by rpki-client