Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
File:                     4bkQuccxDJ9lWU_G6JifyVOzblE.mft (raw, json)
Hash identifier:          bWlD/Aqlm8HW9kC8o4Ex9N1oKELhr+/h/CWZjyRUt9M=
Subject key identifier:   43:E0:61:EF:00:8E:F7:45:F0:10:45:60:E6:08:B3:48:71:3F:7F:A7
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Certificate issuer:       /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial:       0524
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
Manifest number:          0514
Signing time:             Tue 12 May 2026 20:28:50 +0000
Manifest this update:     Tue 12 May 2026 20:28:50 +0000
Manifest next update:     Tue 19 May 2026 20:28:50 +0000
Files and hashes:         1: 4bkQuccxDJ9lWU_G6JifyVOzblE.crl (hash: gbRaHGCgzY44WS5jdz44o9uQs3relOVZvzIF6c7bdsU=)
                          2: B38D932050EF11EC8583962BC4F9AE02.roa (hash: pjU8yoKCWn12BkoGzYOOIFYk2quDrJg/9dgAwTEFemk=)
                          3: 4B1D585250EA11EC8FF55B24C4F9AE02.roa (hash: 4xgHsmFBzpOEDFWrTsnY/UVdPSnGuyQ3aHzpdWQKEDE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
                          rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
        Validity
            Not Before: May 12 20:28:50 2026 GMT
            Not After : May 19 20:28:50 2026 GMT
        Subject: CN=6a038d82-3226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:3e:42:a8:5b:4b:19:43:9b:f1:a5:43:d1:
                    1b:34:85:a9:2a:16:6e:a2:b7:f2:48:3d:b9:ed:44:
                    8f:b2:d7:c7:80:e7:d7:35:a3:4f:c9:bc:3e:9e:f6:
                    b8:1d:89:14:dc:b8:67:5d:99:4f:3a:0c:8c:82:58:
                    27:00:2d:62:9d:55:f4:6a:8f:70:b7:c0:21:01:a2:
                    58:9e:6d:70:7c:7e:a4:18:61:4c:71:ab:f6:f1:2c:
                    ac:09:93:86:26:63:1e:17:08:d0:3c:86:44:b9:e4:
                    b8:f1:85:0c:b1:f3:66:f3:25:ac:33:55:be:1e:75:
                    61:d9:0c:e2:13:16:48:5a:e5:cf:2f:5b:1b:4f:66:
                    02:94:c1:32:be:aa:0c:68:b3:5f:2d:c1:4f:22:f5:
                    ef:fe:c7:64:6f:9c:6b:29:25:d1:6c:6e:70:fc:22:
                    2a:d1:06:02:63:5b:5f:80:7a:9d:c3:85:ca:7b:7e:
                    ea:05:34:85:ae:d5:30:40:4d:9a:51:eb:e3:df:d3:
                    66:6c:a5:5f:24:8d:16:71:df:b4:14:1b:43:76:40:
                    07:3b:09:f6:ac:48:76:0d:86:e3:44:dc:ee:51:fc:
                    e5:7e:59:03:7b:a9:41:15:45:14:f4:8a:d9:d5:f3:
                    35:e4:0f:e5:a2:7f:4c:60:f0:94:92:59:e7:38:e0:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E0:61:EF:00:8E:F7:45:F0:10:45:60:E6:08:B3:48:71:3F:7F:A7
            X509v3 Authority Key Identifier:
                keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:b8:55:66:c5:52:b5:72:b5:2d:6e:39:0f:ee:eb:e6:a9:
         3c:24:cf:78:89:5e:5c:f7:74:4d:3a:f9:d3:33:5c:69:b2:9b:
         18:f6:25:28:5f:09:4b:ec:81:11:6a:5f:e7:10:06:3c:9f:b4:
         e0:01:3d:01:36:1d:03:44:97:3e:c7:a1:fc:d3:c0:3a:eb:a2:
         64:47:c4:b7:77:a5:98:51:b3:ed:ab:05:07:a6:cc:64:c1:1f:
         e4:78:0f:c5:4f:d5:b0:44:d5:be:94:08:13:d7:7b:c1:93:df:
         35:09:60:ff:a4:ad:32:cd:6a:4f:c2:e8:8b:c6:d0:d9:6a:13:
         cc:f3:30:a9:e5:6e:b8:b4:b1:16:7d:48:db:c6:36:a0:f2:11:
         8f:6d:8c:50:85:e2:82:fa:20:1f:72:55:ec:e1:93:22:46:d4:
         ab:b5:87:ae:dd:7a:27:82:86:74:11:c6:f2:a0:cb:3d:b9:22:
         1a:f2:b3:25:b5:54:bc:31:01:77:dd:fb:fe:f1:a2:61:85:59:
         04:7c:3e:9a:86:8b:b1:17:51:5d:c1:dc:35:0b:25:8b:44:93:
         89:81:c1:cd:dd:45:c1:73:7e:f8:de:99:23:53:8c:c7:f9:e8:
         93:ec:49:8b:5b:9c:e8:46:66:44:d6:de:9a:13:f2:48:5a:79:
         9d:72:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:32 2026 by rpki-client