Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
File:                     4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json)
Hash identifier:          4Cqd9GhYysXSpad/CZEwYqRoYgKO4sqgmXqJoKQT5oA=
Subject key identifier:   7F:CD:58:09:00:A5:1F:C4:3B:3E:5B:B0:83:D7:83:A5:B1:CD:83:02
Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
Certificate issuer:       /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Certificate serial:       01E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
Manifest number:          01DC
Signing time:             Fri 27 Mar 2026 03:00:49 +0000
Manifest this update:     Fri 27 Mar 2026 03:00:49 +0000
Manifest next update:     Fri 03 Apr 2026 03:00:49 +0000
Files and hashes:         1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: 8KrTfzlC1X1yHQvpX7vYCJJ5eS51VpgBMVH6JYmjCgM=)
                          2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: NLcgQXGouEuSH00Ou0GSPeCfC1A5HjVLOwxAJ8Auh/s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
                          rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 03:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
        Validity
            Not Before: Mar 27 03:00:49 2026 GMT
            Not After : Apr  3 03:00:49 2026 GMT
        Subject: CN=69c5f2e1-19bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:cc:1d:14:55:b4:bf:52:7d:18:f6:bc:ac:
                    30:5f:f5:34:e9:6b:b8:c4:f1:49:ed:63:a9:e1:da:
                    ce:c3:2a:31:a0:9f:d8:d6:46:b0:51:99:2a:e1:42:
                    4c:fb:f9:c9:f1:c0:a7:a3:79:ed:00:5f:02:ba:0f:
                    49:bf:d1:92:9a:84:75:be:ae:25:8e:e0:08:48:bf:
                    0e:06:94:d5:90:03:47:98:70:58:26:fb:98:2c:98:
                    ed:1e:2a:62:6b:c9:71:43:56:e2:ee:37:d1:26:28:
                    55:00:c0:ae:97:6c:85:bc:be:f0:6b:a5:8f:c8:b8:
                    ea:52:68:51:4a:c2:31:6e:47:68:1b:f0:51:36:5c:
                    a8:81:f1:e8:3e:a8:40:d5:d3:19:c5:f0:aa:ce:7c:
                    1a:1e:8f:92:47:a4:84:53:d4:b0:2f:7c:23:6c:e3:
                    ba:b3:f4:d2:90:60:30:18:ab:51:ba:27:fd:12:2f:
                    cd:19:62:cb:c7:c3:ed:21:ce:9f:66:7c:a9:5f:88:
                    e0:4a:58:0b:3e:7e:f7:d9:2e:a3:a1:e9:59:77:00:
                    ad:06:ee:b5:3d:e2:ab:b6:86:a9:5e:b1:ee:05:57:
                    fe:24:0a:68:a1:a9:62:a8:dd:3e:3f:b2:24:d8:75:
                    a5:63:d0:49:83:df:49:82:77:59:af:d7:7b:26:d1:
                    93:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:58:09:00:A5:1F:C4:3B:3E:5B:B0:83:D7:83:A5:B1:CD:83:02
            X509v3 Authority Key Identifier:
                keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:b8:d0:ec:ef:a9:2e:83:52:d7:ee:f8:f9:a2:a4:b4:48:ea:
         9b:bb:09:07:83:f3:e1:b2:52:52:71:0b:79:e8:04:10:e8:1b:
         2a:72:29:9a:07:c4:0c:05:2f:11:48:ec:87:69:3c:77:53:05:
         c7:0f:10:da:69:bd:ee:2a:22:55:8b:d3:a8:11:f9:58:ca:6e:
         be:c5:51:7f:87:9a:26:98:1d:55:a0:46:2e:62:88:1d:47:58:
         ff:20:b9:7b:81:ec:21:a1:19:bf:14:4b:d5:71:4c:bc:1f:5a:
         85:a8:85:e6:3f:8e:a4:7f:7d:76:22:35:38:f5:c5:cf:59:46:
         4b:7e:e4:43:56:4e:fd:c5:d1:52:dd:69:4f:d4:4c:9e:18:70:
         05:d2:0c:21:97:88:f0:f5:9e:ae:be:cc:98:0c:2f:7e:b8:76:
         27:93:b5:bc:de:ab:85:95:0f:17:d8:9f:6c:72:1c:83:8c:5d:
         a8:c7:51:21:e8:78:32:cc:a4:5f:2a:08:5b:e3:22:bb:d6:b0:
         be:94:81:70:c4:45:34:9f:7b:05:f5:fb:13:7e:a4:91:38:8e:
         69:95:ff:1b:cc:a2:f8:d0:33:45:b9:34:d4:70:0f:ac:1a:9b:
         0e:2a:c0:20:9a:b6:cc:26:74:97:6d:58:d9:77:11:9e:45:fd:
         b3:d2:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:01 2026 by rpki-client