Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File:                     4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier:          /v3wBqmLtZtV5+IMZUswS0rgWShinMb0QH+FPN6RjNs=
Subject key identifier:   46:FE:AD:80:47:8C:51:2A:42:D9:0E:8C:FB:2E:55:92:02:92:87:BC
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       42
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number:          41
Signing time:             Tue 13 Oct 2026 09:16:12 +0000
Manifest this update:     Tue 13 Oct 2026 09:16:11 +0000
Manifest next update:     Tue 20 Oct 2026 09:16:11 +0000
Files and hashes:         1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: AxDloua7E9UQbcNC6DBVuh3oxr/KieT7qs2ViyD60+U=)
                          2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 Oct 2026 09:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Oct 13 09:16:11 2026 GMT
            Not After : Oct 20 09:16:11 2026 GMT
        Subject: CN=6acdf6db-d578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ae:ed:37:cd:ba:3c:f1:28:33:a6:5f:a4:dd:
                    9a:c8:ff:05:83:0e:b9:16:94:e6:ad:df:29:ad:79:
                    30:fd:83:37:f2:87:f7:bd:7c:6f:62:fa:bd:5c:0f:
                    e1:d5:9f:d4:43:8a:c8:11:0a:c7:d6:9b:21:bc:5e:
                    23:25:91:a8:cb:2c:91:af:be:cb:bb:61:af:85:28:
                    3d:e0:9d:5f:a2:d8:2d:0c:ad:a0:5b:cf:99:3f:71:
                    5b:56:68:66:34:ce:26:36:71:47:1e:6d:95:8e:7d:
                    3f:9e:47:02:08:0d:4f:42:6a:d0:d5:c8:7f:d2:48:
                    53:2b:67:6b:ae:00:d9:bf:53:5f:46:87:f5:60:df:
                    33:08:5b:a0:1d:29:02:49:f7:69:ac:5e:6b:e8:26:
                    eb:33:87:46:cc:0a:4d:8f:b7:0e:1e:86:1a:68:96:
                    af:21:b9:52:e8:ce:27:bb:a9:c4:d4:c6:9a:fb:c2:
                    a9:de:89:cf:fb:4b:18:dc:26:fb:f9:e9:a7:29:ef:
                    b1:60:57:50:89:f0:81:44:dc:dd:e2:d7:25:33:18:
                    20:80:54:64:5e:ea:cb:1b:e2:62:88:67:12:d0:d8:
                    a7:42:f3:e2:64:bd:8f:da:2f:3c:ab:b8:f0:b1:da:
                    d8:f5:2c:7e:50:8f:17:c4:5f:2d:1f:9f:3f:34:59:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:FE:AD:80:47:8C:51:2A:42:D9:0E:8C:FB:2E:55:92:02:92:87:BC
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cc:ce:e3:63:f3:a0:8f:15:70:9b:42:73:31:f9:0e:79:ce:
         91:48:07:b6:34:f4:dd:61:44:eb:5e:ae:a0:cf:1b:e6:96:55:
         01:28:98:e2:a8:55:7f:0e:e9:66:5e:0e:2d:64:1e:0f:83:04:
         92:78:18:18:b5:b2:e9:12:9b:98:cb:ee:4d:91:e5:71:c1:6c:
         c4:d0:28:18:f0:dd:61:98:9d:10:36:2e:d9:06:f2:df:e5:1c:
         b9:1d:61:ad:0b:b5:ee:05:a8:b5:e2:c9:2f:e3:8b:30:f5:26:
         fa:f4:89:53:a1:56:fa:f1:53:cc:2c:eb:63:58:57:9a:82:22:
         da:cf:70:b1:d9:51:ca:82:36:47:37:99:01:6c:9e:31:ca:56:
         6e:12:dc:a6:32:a5:31:11:26:90:fb:9d:5f:37:82:5d:8a:e6:
         0c:90:07:0f:91:24:a8:fe:db:66:84:b4:e3:d6:06:01:2e:e4:
         b0:e2:c3:7d:5e:1c:fe:9e:c3:9d:91:f5:c5:5a:83:06:60:cf:
         9f:64:06:05:04:d8:2d:ea:eb:c8:6a:46:f0:85:29:2e:1e:1c:
         40:69:bc:dd:8a:8c:f4:7f:92:5a:ed:66:7c:3d:d9:48:2e:4a:
         df:38:08:c8:92:48:31:e1:d9:a0:bd:c7:1c:6e:71:83:70:68:
         a1:ea:9d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:38:30 2026 by rpki-client