Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
File:                     4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft (raw, json)
Hash identifier:          u99WqP7wCrAxY2xCBT5d1Ej3LxZvK3v/bv2WZMzZwOo=
Subject key identifier:   98:75:99:AE:77:21:4B:9C:B7:86:75:16:DB:2E:70:AD:DE:12:E2:CE
Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75
Certificate issuer:       /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
Certificate serial:       0440
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
Manifest number:          0438
Signing time:             Mon 11 May 2026 00:22:47 +0000
Manifest this update:     Mon 11 May 2026 00:22:47 +0000
Manifest next update:     Mon 18 May 2026 00:22:47 +0000
Files and hashes:         1: 4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl (hash: HmrlFwoTTGtFjPkyAkOhtY3aN0evZj7n8P1xNKcY7Us=)
                          2: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (hash: OiBvrzdUg3NqY/AvkOcWY8IElMaVk3LH+da3dKWzBQY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3DC1, serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75
        Validity
            Not Before: May 11 00:22:47 2026 GMT
            Not After : May 18 00:22:47 2026 GMT
        Subject: CN=6a012157-c1d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d6:6b:84:94:9e:f5:2e:46:1d:7a:7b:8d:96:
                    11:db:8b:b0:65:26:b3:7d:ad:94:1f:46:31:8a:d5:
                    17:9f:bb:59:91:ee:c1:72:8d:49:73:27:e2:31:23:
                    f6:e2:96:5f:b8:bf:e0:e3:4e:49:2a:20:e6:1e:95:
                    98:c1:b2:ac:58:9c:95:d3:5d:2f:42:db:a3:18:29:
                    c4:e2:88:35:0d:fc:8a:da:97:01:57:46:d7:7b:58:
                    11:63:dd:15:4c:e1:49:c5:3f:ba:51:4b:2d:49:1e:
                    83:35:7d:ee:08:48:a6:6b:37:26:c9:56:5e:c2:2a:
                    49:81:cf:d4:24:31:52:32:bd:bb:f9:ec:d8:27:45:
                    5f:87:bc:0e:cc:a3:2b:dd:8a:80:87:7c:01:ad:7f:
                    3b:b9:92:c7:cc:b2:74:39:8b:7d:43:7c:32:71:1a:
                    f3:b3:16:aa:0d:d6:a1:1e:ec:cf:6d:63:21:45:d8:
                    8c:43:d9:e3:5a:eb:86:8f:f6:ba:06:b1:52:5a:1a:
                    63:39:17:c4:bc:1f:f1:67:9f:3b:85:8c:79:9d:4f:
                    9e:b6:eb:0c:a4:67:7c:eb:fe:ad:7f:d8:73:e5:7b:
                    ae:46:0b:99:06:98:8e:b8:f7:be:4b:60:0b:7b:6e:
                    63:57:2b:a2:97:9f:ab:7f:7d:80:9d:08:0e:2c:7d:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:75:99:AE:77:21:4B:9C:B7:86:75:16:DB:2E:70:AD:DE:12:E2:CE
            X509v3 Authority Key Identifier:
                keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:4f:b4:c0:f3:0d:0f:d9:14:31:01:05:fc:9d:98:fc:2c:9c:
         fc:0b:69:17:e2:d9:aa:d9:8d:d3:ba:aa:70:1c:b6:46:ef:bb:
         f7:25:4e:ee:fb:7d:3d:b1:ea:f4:63:cb:5b:89:b4:1a:ca:70:
         ce:a8:3b:37:1b:b8:b4:36:a8:ee:82:3b:87:d1:5c:55:89:86:
         c7:5f:ab:d0:ed:31:f7:46:c3:eb:4e:7b:c6:62:a9:4c:13:3f:
         6e:14:73:ad:67:88:78:af:6b:f5:bf:4b:2e:e1:c8:72:55:d9:
         e7:a1:ca:00:db:c1:60:73:74:6d:d6:1c:da:67:36:d4:f7:f0:
         21:bc:e0:a7:36:08:60:18:09:6d:78:13:33:c9:f3:22:aa:e9:
         63:83:3d:71:8d:7f:09:00:65:69:7d:bd:56:1d:7a:c5:20:b5:
         d8:35:f7:6a:9c:8c:f8:c2:b4:41:11:2c:ba:d4:6f:11:3a:b1:
         55:3a:d5:21:d8:e3:4d:1d:39:64:b5:b5:b6:cd:a1:ef:e7:dc:
         c9:75:9f:60:13:0d:19:c1:c9:55:a4:6b:fe:1b:b1:33:50:c0:
         02:ab:5e:57:94:90:92:52:4b:8e:9d:2c:90:ca:67:18:5a:2a:
         e1:01:8e:7a:34:b6:a2:5c:07:fd:54:a4:b8:a4:62:fd:8a:85:
         84:18:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:37 2026 by rpki-client