Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
File:                     4I4qRQvuuwFGtgj_EDiIosPu_q4.mft (raw, json)
Hash identifier:          6S9h+QM3QkhtY0EflkDh2kOZJcQqa+5kWCD4pDY+TUU=
Subject key identifier:   B2:D4:47:3F:0A:08:73:1A:EA:1D:2C:C0:16:74:29:06:63:07:84:C8
Authority key identifier: E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE
Certificate issuer:       /CN=A91694A4/serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
Manifest number:          17
Signing time:             Thu 23 Jul 2026 11:05:24 +0000
Manifest this update:     Thu 23 Jul 2026 11:05:23 +0000
Manifest next update:     Thu 30 Jul 2026 11:05:23 +0000
Files and hashes:         1: 4I4qRQvuuwFGtgj_EDiIosPu_q4.crl (hash: PYpm9V8B1O9vaRrg/i7ia3JmJcYJe1MhkwFgUDUBZS4=)
                          2: 8DCB2AB465C411F1A2C791C58147A888.roa (hash: 3ZozKpiD+RF1w4aYWghbR/4Q22EJNvCn5UDnfrs9prE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl
                          rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91694A4, serialNumber=E08E2A450BEEBB0146B608FF103888A2C3EEFEAE
        Validity
            Not Before: Jul 23 11:05:23 2026 GMT
            Not After : Jul 30 11:05:23 2026 GMT
        Subject: CN=6a61f574-b426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:1b:a8:73:87:1e:08:4e:a6:92:07:dd:50:
                    27:4f:19:a7:a4:7f:c2:36:d1:45:8a:b7:d5:3a:84:
                    e2:c6:cc:de:31:3f:3c:71:85:71:ad:0f:ac:0f:9c:
                    f2:5e:c3:fd:33:60:4d:e8:17:f8:1c:d3:58:f0:42:
                    71:00:63:03:7f:a6:5b:6c:e6:1f:46:a2:f1:13:de:
                    04:00:30:d2:3a:05:2f:5e:76:4b:e4:a0:bf:fd:7d:
                    89:ca:21:9d:c2:c8:d5:46:09:e7:81:89:c7:4a:d1:
                    d5:b7:f6:67:17:71:7a:83:60:e0:12:3b:27:f8:ff:
                    10:0d:ff:b7:88:2d:61:33:df:67:aa:96:69:c0:59:
                    45:e2:6b:03:4b:d8:b5:64:42:22:90:c8:2e:6d:76:
                    c5:c4:01:5d:b0:a8:1a:10:4d:51:b6:37:b1:e2:b6:
                    2f:42:d1:dc:0e:3c:6a:03:96:43:ea:10:d7:ca:fb:
                    51:3c:2e:dd:80:64:66:3a:19:c0:e9:82:b6:33:7e:
                    a3:54:39:b4:8f:1f:ed:9b:76:4d:56:94:02:1c:bd:
                    b9:ef:72:bc:c7:c1:84:34:c6:40:49:f8:26:57:42:
                    2f:91:18:40:b7:f4:d2:71:f5:6c:7c:8d:42:c4:48:
                    cd:fa:9e:fd:b4:dd:b6:81:f1:0c:5b:96:c3:fa:ca:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D4:47:3F:0A:08:73:1A:EA:1D:2C:C0:16:74:29:06:63:07:84:C8
            X509v3 Authority Key Identifier:
                keyid:E0:8E:2A:45:0B:EE:BB:01:46:B6:08:FF:10:38:88:A2:C3:EE:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/4I4qRQvuuwFGtgj_EDiIosPu_q4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91694A4/3B858E1E65BC11F19A81043C7E47A888/4I4qRQvuuwFGtgj_EDiIosPu_q4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:24:99:bb:42:5b:a4:6c:73:9d:b9:0b:f3:f0:44:f7:7d:
         c4:c7:c0:df:b9:e5:42:28:38:56:a7:6b:c3:ce:40:05:4f:5a:
         e8:3e:35:a8:5d:4b:3f:45:71:1b:bb:48:e4:36:54:41:28:b3:
         c5:bd:0e:3c:5f:dd:02:97:d0:e7:31:b7:2a:9d:cb:64:84:f0:
         52:94:e7:15:b5:34:af:62:09:8a:31:5a:42:be:b8:27:6c:23:
         70:94:80:73:5a:09:e2:37:6a:c8:41:5f:cf:1f:48:cd:63:36:
         6d:93:e3:1c:f4:8d:80:d1:c8:d3:2c:4e:56:3a:ad:b1:ef:18:
         11:0a:35:4d:72:74:fe:ef:3d:e0:ec:4a:14:75:e9:f5:1f:91:
         13:fa:71:e7:09:d0:7a:be:b3:4c:8f:e8:01:b2:fb:25:2c:bc:
         84:ad:cb:08:fa:58:01:12:b0:3d:a9:fa:e1:c5:49:58:ba:df:
         c9:0c:71:d7:e4:99:28:a7:2a:5d:47:f4:0e:4a:ec:0c:d9:e0:
         b8:df:c5:2d:8a:0d:cd:24:6e:2a:80:77:5c:31:ef:71:2a:aa:
         6c:7f:ad:58:70:20:6c:27:da:41:58:75:72:bc:f1:cf:37:20:
         5a:a5:db:db:ff:18:b2:d8:4c:ae:c1:1a:df:f9:c7:7d:ab:ad:
         0f:92:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:41:18 2026 by rpki-client