Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
File:                     4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft (raw, json)
Hash identifier:          MyM4mSx+ANeUwJPX90U2OpK3C8TMXRWVjqnQyAWd7hU=
Subject key identifier:   68:73:D5:95:59:AC:CB:76:85:FE:5A:FB:B0:77:DE:F6:FC:0E:EA:E8
Authority key identifier: E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07
Certificate issuer:       /CN=A914CBF3/serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
Certificate serial:       0D0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
Manifest number:          0CCB
Signing time:             Tue 12 May 2026 18:32:04 +0000
Manifest this update:     Tue 12 May 2026 18:32:04 +0000
Manifest next update:     Tue 19 May 2026 18:32:04 +0000
Files and hashes:         1: 4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl (hash: eTYRe7Xv8QOL8kgiuliHL+WI5lObjPcQ5GQVUoh6pjk=)
                          2: B32668C4D98C11EB905D7281C4F9AE02.roa (hash: ApbUgdUH10Pdfa6lJVrc4XPCGZcLshELo3PIV/SWLXw=)
                          3: 183DE570057A11EC822F230EC4F9AE02.roa (hash: KDCY6i/WJ6l1BoCfZqKbKmaeWQcqDHXYwIFR4N1iXXE=)
                          4: 89EA369C2A7411F09A757F45C4F9AE02.roa (hash: 2VeVxpw4IPzgEibTNEjoXK/Qy1fd2SwF+0DbU+sMNRg=)
                          5: B688C61E2A7411F09C50DF45C4F9AE02.roa (hash: HqADfJ6PQAnaMYUSVaYaC1tzBINlqpUjolFi7987BYY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl
                          rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:32:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3338 (0xd0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CBF3, serialNumber=E2449E312220131E2E76C42C7CCC6DD193510707
        Validity
            Not Before: May 12 18:32:04 2026 GMT
            Not After : May 19 18:32:04 2026 GMT
        Subject: CN=6a037224-a66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0e:2d:3c:dd:2f:da:8e:2f:ad:73:1c:84:3b:
                    dc:e3:df:95:39:fc:6f:97:1b:bd:30:5d:d9:26:1d:
                    ff:09:a6:04:7c:6f:d6:05:ac:c3:d9:6b:af:51:8a:
                    9c:d9:65:b5:67:a8:f9:6f:75:d7:d0:de:b9:26:65:
                    e8:fc:85:a2:15:a6:e0:bc:9c:df:e6:a7:c8:ca:0f:
                    b7:4c:4f:3f:78:e8:4f:88:ac:7d:c9:9d:3b:01:c5:
                    4c:8f:80:0d:1a:fc:dd:75:4c:01:6b:3c:ab:f2:e5:
                    cc:aa:2f:4b:06:e1:43:16:67:b2:b6:f8:e4:0a:de:
                    e1:4f:87:c9:4d:53:37:af:b0:54:98:16:83:10:db:
                    a6:6f:21:7e:2a:85:41:98:de:6a:be:3a:58:5d:1c:
                    78:c1:62:af:84:13:c9:23:e2:62:a2:44:c1:dd:41:
                    08:60:a4:c2:9b:8f:f1:d2:4a:18:87:7b:d0:18:67:
                    90:86:72:ef:3c:0b:ff:05:29:25:27:31:d3:92:b9:
                    80:0e:a0:67:b2:d8:b4:4f:b9:2b:c5:9d:62:5b:aa:
                    cb:b9:15:f0:4a:8f:77:2c:9e:36:9a:c2:95:48:07:
                    9f:3b:d8:b5:e7:fd:87:f5:d3:a8:6c:d2:24:bf:3f:
                    00:f1:ae:2c:d2:a8:ef:8b:70:e2:b0:48:fa:a5:7c:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:73:D5:95:59:AC:CB:76:85:FE:5A:FB:B0:77:DE:F6:FC:0E:EA:E8
            X509v3 Authority Key Identifier:
                keyid:E2:44:9E:31:22:20:13:1E:2E:76:C4:2C:7C:CC:6D:D1:93:51:07:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4kSeMSIgEx4udsQsfMxt0ZNRBwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CBF3/1BC6EB2011E711EAB903AA79C4F9AE02/4kSeMSIgEx4udsQsfMxt0ZNRBwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d6:e9:54:49:57:31:7c:1c:74:d4:0a:19:e1:e4:b8:96:9e:
         e5:69:2b:81:69:ff:b1:39:85:d8:0c:be:1a:35:76:46:4f:13:
         ca:05:ca:fa:e9:e3:b4:2f:5b:9e:67:97:c3:58:af:f8:ef:e0:
         74:69:ea:06:c1:47:5e:3a:d8:45:ab:31:1b:a5:e1:ad:2a:3e:
         7c:6c:54:d5:be:26:07:35:00:44:45:0d:4b:50:80:f7:e5:cf:
         23:e7:d6:57:a8:cf:17:d7:dd:4e:70:77:27:46:42:8b:9d:1e:
         5d:d1:a9:54:27:6f:99:fe:7b:36:12:79:3c:86:c0:00:80:31:
         1f:e2:9b:8d:f0:63:d1:36:85:4f:4d:9f:9c:2e:cb:55:b6:7a:
         17:2b:0e:14:7e:93:d9:71:3f:23:da:eb:7a:a4:e8:14:5e:f1:
         15:46:af:b4:3f:56:9f:b9:66:ed:e5:67:e2:1d:c7:82:e1:e1:
         80:c8:f0:a4:9a:e7:ab:e5:6a:17:fd:55:ad:ae:70:20:e5:76:
         a3:c3:48:d0:0b:44:af:e4:fd:28:0f:c3:f7:7a:18:12:75:db:
         04:43:c4:07:2e:4d:d5:7a:9d:e8:98:cd:20:6a:c8:6d:1f:53:
         ea:40:90:54:69:a2:cd:4a:fa:b1:63:59:87:07:81:d5:a5:ac:
         a2:63:55:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:43 2026 by rpki-client