Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          dMzypqteReQisAu9c2sbpqSBLIIcywWzQXfAI4vlDv0=
Subject key identifier:   70:17:EC:7F:D1:BA:73:62:12:CA:74:FA:5A:CB:06:F2:A1:C6:B5:A6
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       36C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          3584
Signing time:             Tue 12 May 2026 14:22:41 +0000
Manifest this update:     Tue 12 May 2026 14:22:40 +0000
Manifest next update:     Tue 19 May 2026 14:22:40 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: kW1xrjpm/PkfbvMUvcxsT27mzbcC6k3gNRp1ZdUoy9c=)
                          2: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: YuxiT+o6NacPiPMOQ8zhMa/ehrSyMJnmfoAK7JucAN0=)
                          3: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: tim1sMDu0bOwl1syg0MHcvHXmnELHIcAaqZu6XOIY64=)
                          4: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: B27wh3fEi/hAOB71J/u7lh6WCTRhDeDyoP1VWvu0ryI=)
                          5: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: ajWPfgyIE3umSCJ2gTUfFCsZjiBnhTSdlnITGNY926s=)
                          6: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: hRhJmPw6HJ/CFTNiB4jTfaz2NVHh3MBNmnrOJmVcsDg=)
                          7: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: WVPtgUERZHpgB/DQwz60lkH6Uc54oBG0ERaAVC6IExA=)
                          8: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: u97TYLT/BQTtijKwV5M2wT1c0/v/G8Iw+MIW/+UaOhM=)
                          9: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: lHidmOj5/4kQC0HWnQsBBkm8/7iR9N9wMoSuEzHus1A=)
                          10: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: xXXKUBvKApT8YVzNPAtueFWn7BnVKJjI5nKq0lyvM4o=)
                          11: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 9TSvBz+OjIAdBGbstVi1TzZ4VL3DuXLguW4IimNLnXA=)
                          12: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: 9CH9K0zReFPkNUN2+CaNA2ol+J26nnIjRlVx1c5X4ZE=)
                          13: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: hz5gUzbaN7J/VQDJx9BzlgHZ7QvQPcRlAB3rDG9NM3I=)
                          14: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: Pi9bRPgU/hz3+L0wJzzWeCFlpEZjC2aR2BJhIidT0sA=)
                          15: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: p//zkhXiOBuBirrvlxHSciakC9fZnELNCSm8Uvn27ZE=)
                          16: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: T1/3yr80tQn2wXUoaI6SgP3gcD+G/JWjJxOxFcBZOzQ=)
                          17: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: wq81aF5SSoAZI/JyoA1vNO3zjZsKt2TkcT5Pso38nSU=)
                          18: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: folYHW0Gwg29Q/Y88gdrsYlLi/YxqwtkEzwH995b74w=)
                          19: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: BZKoDF/7kTMYC8p2F7sy+ku+IsTTX9iqMyQIA+SIbiY=)
                          20: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: qtf7Df2GnJiRrGvanH5s0hEvrPF8g7/kGohVnvp97F4=)
                          21: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: 0+07+O2nWAirNYVLyV1pe7GfKo/vf0ORWGc4yAP010g=)
                          22: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: lpyjRDEla69ljuEGYEqFeb3N2SUniW4iezq7HN/byZI=)
                          23: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: pTltMgVWE0zVNXrntrbtBqvZnO3y4UNU+dhd1NyglWY=)
                          24: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: /+QRen7Io05J4Xucot84AqX64nbfLZG1ouY7NxOjV3s=)
                          25: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: tnQvcL+XlKj1mrWVClsnZNGw7PANVizY98r9YXkQdO4=)
                          26: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: 2IvnCeqQ65Zlp2C2lqFnO2zCq+IPSyQ8nLjI5fuUZPA=)
                          27: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: uu4m5WVb6SU6WZl3ObRQUMqZyoKCwCWL6M6mRfFvoL4=)
                          28: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: Dx8o50rE1OKe1inVw3oUo0yNA4V99kP9sCKq9GKRraw=)
                          29: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: Bwyx7v9ErsR+mUyY+3+Ype9qNhlTd5XIZgvvVkhOvjQ=)
                          30: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: n/rtVmTMB1Py5Ik0TDu++khNfNTrCl3b/ICvjZej0xc=)
                          31: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: bMXbbXDj5RaZ0Ee7YCwgs/7Vdo6yL1uCa/jY5e4Qep0=)
                          32: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: tuxt7AAVdlIorySbquWSOc2cd9Lyaw78OSqZYuKb270=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14016 (0x36c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA, serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
        Validity
            Not Before: May 12 14:22:40 2026 GMT
            Not After : May 19 14:22:40 2026 GMT
        Subject: CN=6a0337b0-3878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:20:3a:2e:70:31:28:00:e0:87:f5:b6:8d:
                    39:13:eb:42:e5:11:7f:41:fe:ce:70:20:12:6a:4d:
                    c0:49:c3:f0:ec:bc:9f:b7:53:da:0e:da:03:0b:62:
                    63:ed:f9:25:54:80:20:84:2a:12:a4:aa:53:bd:a9:
                    3e:d2:00:7e:a6:66:4d:c9:aa:2c:11:e4:31:28:41:
                    40:b7:d1:23:7a:ad:dd:23:fd:9e:7f:91:80:4b:5d:
                    c2:c6:71:0c:4e:bf:ba:dd:b1:ca:83:80:5c:d4:26:
                    77:67:fb:ff:1b:f8:93:b8:20:12:b3:e9:ea:6c:29:
                    03:51:32:36:b3:e8:6a:d5:b3:92:bb:6a:57:08:c7:
                    08:0e:20:17:e0:a7:0a:60:85:5b:b9:53:fc:13:85:
                    bb:0f:44:94:a1:3c:35:64:ba:20:ea:35:1b:53:b9:
                    9b:67:b4:af:c4:c2:98:d0:4a:5d:9b:f5:0d:45:8f:
                    c4:50:b8:5d:a0:28:d4:cb:57:fc:0f:74:de:66:a6:
                    18:8b:68:5e:6b:02:f1:43:c1:19:a0:31:78:1b:d4:
                    7a:36:1e:df:d7:a8:03:97:69:5d:b9:4d:8a:97:c6:
                    87:63:92:9e:77:3d:1c:c9:d5:d3:4e:17:f9:89:a2:
                    8e:55:2f:21:b2:d6:ba:28:2f:c9:91:e8:59:77:91:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:EC:7F:D1:BA:73:62:12:CA:74:FA:5A:CB:06:F2:A1:C6:B5:A6
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:58:36:23:e6:e3:0d:5c:de:b4:a8:3a:0e:96:a2:8e:37:
         50:39:dc:5f:65:c0:f1:35:29:62:a8:58:2c:3e:32:57:d5:4a:
         fd:6e:66:47:59:6b:1c:63:95:c4:ff:9c:de:b8:e7:69:15:e7:
         8a:44:56:43:c7:0b:94:7e:95:fd:fe:00:d6:97:a0:68:f7:f4:
         f0:d8:bc:44:24:94:f5:c4:12:34:ca:8c:fc:b7:12:62:fa:f0:
         49:7c:0f:3e:ad:26:dc:6f:18:48:ea:c7:e7:75:c2:66:70:28:
         cd:8e:d7:55:ae:59:18:f2:09:cd:8c:b2:2a:36:dc:16:32:1e:
         a7:9e:62:6c:5a:e2:18:27:7c:a7:6b:88:ba:3e:3f:bb:75:68:
         17:0b:51:d1:b6:a1:0b:ae:09:5f:1a:02:0a:b6:e0:9f:81:05:
         c7:1d:9d:df:bf:af:cc:40:81:76:d6:31:7e:c2:c2:30:cc:7d:
         05:b1:ed:40:e6:96:35:65:b6:57:07:72:7d:d7:49:8a:11:09:
         ac:cb:3b:2c:bd:3a:34:49:83:21:dd:68:53:1f:0d:15:66:31:
         80:1e:67:75:a4:ee:35:a8:86:9f:f2:0a:a8:2b:1a:64:e2:ce:
         e3:60:86:7a:fe:9c:6d:f3:58:0c:a8:db:ea:b3:e5:17:60:5f:
         c0:a0:5d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:52 2026 by rpki-client