Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
File:                     7DwKarkc4TMW0oQzDDgovv4qNBM.mft (raw, json)
Hash identifier:          LlzXxrexfYFcGPywlEHIk6MsrXxsfgkxWumcf4yKhiw=
Subject key identifier:   25:D9:42:02:A7:B5:53:2D:B9:E7:72:49:44:D9:44:A7:A6:F2:9B:CA
Authority key identifier: EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13
Certificate issuer:       /CN=A91988EB/serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
Manifest number:          4E
Signing time:             Mon 11 May 2026 08:32:21 +0000
Manifest this update:     Mon 11 May 2026 08:32:20 +0000
Manifest next update:     Mon 18 May 2026 08:32:20 +0000
Files and hashes:         1: 7DwKarkc4TMW0oQzDDgovv4qNBM.crl (hash: gXqcvgXsw4MkSa5ZHMkt7+VD8xtjJsAd3rUV/a5vcNY=)
                          2: 8FB3AD6AE58611F0A2F174BA446F56BC.roa (hash: sTktGN5NFdYq+gsUaHWLCXYe1rpci+mF34P/YuXEE0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl
                          rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:32:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91988EB, serialNumber=EC3C0A6AB91CE13316D284330C3828BEFE2A3413
        Validity
            Not Before: May 11 08:32:20 2026 GMT
            Not After : May 18 08:32:20 2026 GMT
        Subject: CN=6a019415-b13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:b9:c3:68:5d:44:ce:6b:42:e5:1b:5b:fd:
                    cc:a7:2c:65:4d:2c:4b:07:8b:8d:bc:ce:97:c0:07:
                    a8:fc:53:33:64:ee:83:46:6b:ac:36:33:cc:82:90:
                    3c:ca:0a:df:ba:94:1e:47:fc:86:0a:b3:28:33:31:
                    ad:a5:59:a6:40:09:d8:55:6a:53:bb:e7:00:86:d5:
                    d9:84:84:06:23:17:20:34:77:94:72:e4:e1:76:89:
                    b5:34:4b:b9:b3:83:d6:0d:b8:63:0a:1f:a1:91:57:
                    7f:00:fe:76:6c:33:d3:21:55:98:5f:c0:f5:e3:5d:
                    cc:fd:8a:0b:0c:5a:22:a8:18:a1:29:98:2a:0e:e2:
                    6d:15:ac:cf:4a:52:ba:d0:70:fd:f7:2e:2e:ed:80:
                    35:5a:12:ce:fc:e0:84:fd:d1:b0:19:1f:2d:3e:c5:
                    5e:14:43:51:33:e2:2f:24:92:8f:26:7d:49:09:ce:
                    92:04:07:b5:46:ba:f8:f1:15:ec:56:dd:09:d8:2c:
                    0e:e0:d2:53:ef:6b:2c:41:79:93:f6:77:8a:ea:a4:
                    ff:02:30:38:85:03:96:f7:f9:04:4f:2f:68:53:c2:
                    66:cb:9e:05:3c:91:2e:ab:75:cd:f8:1d:ce:80:ec:
                    b6:d3:e7:92:80:d5:39:ae:32:87:0c:39:99:dc:3d:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D9:42:02:A7:B5:53:2D:B9:E7:72:49:44:D9:44:A7:A6:F2:9B:CA
            X509v3 Authority Key Identifier:
                keyid:EC:3C:0A:6A:B9:1C:E1:33:16:D2:84:33:0C:38:28:BE:FE:2A:34:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7DwKarkc4TMW0oQzDDgovv4qNBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91988EB/F84EB9FCE48A11F083D11E6B446F56BC/7DwKarkc4TMW0oQzDDgovv4qNBM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:a8:ea:cc:78:4d:5c:99:54:30:9f:17:19:65:80:09:6e:
         48:c8:c7:f2:ae:34:7d:e6:49:18:91:5d:cd:73:23:0a:cc:65:
         fb:67:f5:53:5c:94:26:45:94:15:ae:5f:f6:5a:1f:89:c1:bd:
         45:8a:5d:b7:d8:53:f0:05:48:2d:f8:26:7f:eb:ab:61:59:8e:
         21:6e:5b:16:bc:df:7c:4c:62:0d:d7:d4:f5:71:1d:c8:e0:20:
         55:40:bc:1c:4e:b7:b3:b9:00:61:0e:53:63:fb:49:08:ad:0f:
         38:45:7d:78:41:d7:e8:2c:87:04:2f:7a:54:f8:ed:04:d3:87:
         36:30:82:9a:b2:30:35:8a:b9:51:87:5e:e5:c2:b9:65:df:01:
         e8:34:78:fa:7e:ef:4f:9d:d1:b7:ed:b5:f8:a9:0c:23:9d:b1:
         43:e8:87:cb:b0:3a:1c:8f:7b:f0:56:41:26:4d:df:cf:41:ad:
         53:bf:90:87:41:43:73:67:5e:65:b7:66:2a:39:1e:76:7d:98:
         d2:f1:37:23:d7:32:f0:ac:28:e3:a6:b0:43:8f:e1:4a:07:9a:
         66:f9:02:cd:1f:fb:42:5d:22:fd:35:f0:fd:5b:ed:02:96:4d:
         9b:0c:ca:0f:74:5d:a8:4d:58:4e:a7:92:fb:1f:80:ea:61:b3:
         dc:b4:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:13 2026 by rpki-client