Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
File:                     4kPzvoJVabsWrLN0vJjavmkLF8E.mft (raw, json)
Hash identifier:          yfM2+1hle06yfiPGWgkk8EeDqQcsrwGXGtXQpHbyuYc=
Subject key identifier:   61:46:43:FD:A4:F1:E9:E4:C2:1A:81:CD:79:D4:AF:81:DD:27:D4:83
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Certificate issuer:       /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial:       075C
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
Manifest number:          0736
Signing time:             Tue 12 May 2026 16:50:11 +0000
Manifest this update:     Tue 12 May 2026 16:50:11 +0000
Manifest next update:     Tue 19 May 2026 16:50:11 +0000
Files and hashes:         1: 4kPzvoJVabsWrLN0vJjavmkLF8E.crl (hash: MAs+p+iKgRygbVJId4WvLlwUtzrQlYQZB2Fj+Q0W+/o=)
                          2: 91E868D4902B11EF87435A54C4F9AE02.roa (hash: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
                          rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
        Validity
            Not Before: May 12 16:50:11 2026 GMT
            Not After : May 19 16:50:11 2026 GMT
        Subject: CN=6a035a43-6628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:f0:f3:d0:8d:12:de:46:0d:72:78:8b:25:
                    c5:e3:07:31:78:26:36:54:0b:c0:ca:28:e5:32:af:
                    38:fb:8a:4a:08:55:e6:45:90:c7:fc:73:41:fd:2b:
                    01:e2:5c:44:b7:6f:4e:ad:bf:1c:3c:ad:6b:83:eb:
                    54:6b:36:50:00:ba:7a:38:41:92:29:24:bc:ea:65:
                    f6:7a:d2:c3:85:0a:7a:88:43:db:77:db:87:1a:b2:
                    22:cb:21:40:77:32:cb:c6:42:18:15:c2:e6:d3:fa:
                    54:8b:df:7c:c8:6c:9c:b6:9e:31:ab:3a:8d:35:10:
                    94:39:55:c1:ce:69:7e:3f:c3:26:a7:d7:17:55:dc:
                    78:1f:b3:25:71:83:b0:c5:a6:30:87:97:3e:80:f5:
                    cd:56:ef:c1:f6:1f:11:54:04:dd:c1:2a:38:f1:04:
                    68:0c:f7:e5:ab:bd:41:a2:81:03:3f:c8:b8:c8:f9:
                    ad:dc:4b:eb:d0:c0:28:8e:1a:a0:26:05:54:83:e0:
                    96:ed:fd:ae:b2:95:1d:c1:72:72:e4:94:e7:e7:f0:
                    c5:46:45:27:9e:3e:25:a0:9f:31:dd:8e:f6:5e:a0:
                    6e:2d:25:e2:74:c8:73:5d:58:2d:dc:e5:7a:7b:4b:
                    05:98:e8:e4:21:6b:8b:ce:d3:4a:4e:4b:65:55:4f:
                    d9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:46:43:FD:A4:F1:E9:E4:C2:1A:81:CD:79:D4:AF:81:DD:27:D4:83
            X509v3 Authority Key Identifier:
                keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1a:32:c8:af:db:87:0a:34:fb:99:3a:68:0d:b9:ea:90:ca:
         e4:37:a3:de:8a:ad:81:84:db:e0:e7:e2:f0:bf:8e:63:a2:9c:
         19:70:8a:fc:c6:14:9b:c2:de:86:8f:b1:71:f7:e5:c0:c9:0f:
         fe:68:5d:a9:8b:d9:e3:6a:2d:7c:6e:91:de:32:6d:d1:2a:63:
         49:d4:d1:67:7a:a7:18:39:c2:cf:54:63:d3:68:d6:01:2f:95:
         28:4b:40:37:18:81:47:27:72:cd:28:22:02:e5:d5:5a:76:d6:
         31:21:53:ac:61:1f:1b:47:78:a1:6f:3f:6e:5a:e8:86:ab:e8:
         12:68:36:5b:26:36:19:16:62:a9:84:93:e9:b4:9e:70:89:87:
         8a:b2:09:f9:6d:60:af:1c:d6:d6:a9:54:c7:49:63:c0:d7:69:
         0a:fe:1a:4f:79:47:31:9a:a7:e1:e2:34:1f:64:af:7d:81:7e:
         f1:ef:19:d6:c2:b3:15:79:7b:44:ed:a6:af:0d:df:39:ad:6d:
         02:4e:62:4e:d8:bf:c0:3f:3c:9e:c5:83:91:e3:c6:67:db:e9:
         f1:7a:94:13:a6:83:8a:f5:c4:2d:cc:6c:17:88:0c:1d:37:51:
         da:73:97:c5:8d:05:69:7c:3a:ad:a5:7d:6e:31:27:25:44:8b:
         4c:0c:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:55 2026 by rpki-client