Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
File:                     IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft (raw, json)
Hash identifier:          sf9UCVyAt75YQArigCRjdvI4VEx6Pk4DtvCGTfEcKfM=
Subject key identifier:   6D:BF:C1:D3:5E:DB:36:79:05:A7:BD:E5:08:72:2F:7A:B8:B6:CD:D6
Authority key identifier: 20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0
Certificate issuer:       /CN=A91B40B2/serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
Manifest number:          4D
Signing time:             Mon 11 May 2026 08:27:35 +0000
Manifest this update:     Mon 11 May 2026 08:27:35 +0000
Manifest next update:     Mon 18 May 2026 08:27:35 +0000
Files and hashes:         1: IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl (hash: j/jkth27wBJcoYJzp6JCeigE3XgAjaoRSo93SWP+LyY=)
                          2: 78211876DA3811F080F82F148DD3641D.roa (hash: iQuCstGoIK1MPnU6/cDDIt+974fe7iZAlTkSxssvjXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl
                          rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B40B2, serialNumber=20F3BBD498F43C97913EE1B99429DB890B4762B0
        Validity
            Not Before: May 11 08:27:35 2026 GMT
            Not After : May 18 08:27:35 2026 GMT
        Subject: CN=6a0192f7-096e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:5a:ec:e8:90:a4:16:c2:a3:da:6d:91:33:
                    fd:1f:40:a4:a9:79:e1:bc:74:48:83:e4:c9:32:09:
                    55:48:02:52:9c:0f:00:b9:bd:a1:21:17:b4:6f:fd:
                    db:cf:3b:1a:57:55:47:bb:fe:5c:f4:87:4c:58:b3:
                    d0:95:aa:bd:02:64:f7:8b:a4:47:fc:2c:6d:85:ff:
                    28:de:1c:3f:c6:ab:2d:c8:db:25:ee:6b:11:1c:2c:
                    3e:a1:9d:af:b6:29:fc:3e:2e:9e:c4:e2:6b:02:6a:
                    bc:d6:ef:c6:77:15:7d:ab:cf:0f:9e:f6:9d:5e:a5:
                    23:1f:43:33:a1:81:9c:a6:11:d0:67:6a:4e:59:5a:
                    9c:2d:51:d1:51:08:08:16:6d:1e:42:da:22:96:ac:
                    d2:b3:d8:57:a8:d4:ce:ec:98:1a:4d:54:50:46:a3:
                    f2:fe:c5:df:93:e0:ac:3d:f9:53:b4:39:94:c2:5e:
                    9e:3e:74:03:6d:18:af:78:36:19:d1:92:22:94:29:
                    d8:53:74:0d:e6:c6:d6:40:df:32:d7:74:7e:54:b9:
                    56:ab:b8:4c:ab:02:c1:d2:c8:93:28:52:3d:32:41:
                    52:01:3e:ea:61:8f:99:3c:6f:2d:50:44:82:e7:72:
                    b7:63:9c:78:4a:78:97:74:92:b3:4d:c1:a7:32:40:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BF:C1:D3:5E:DB:36:79:05:A7:BD:E5:08:72:2F:7A:B8:B6:CD:D6
            X509v3 Authority Key Identifier:
                keyid:20:F3:BB:D4:98:F4:3C:97:91:3E:E1:B9:94:29:DB:89:0B:47:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IPO71Jj0PJeRPuG5lCnbiQtHYrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B40B2/D146E4F0DA3611F0A933D24C8CD3641D/IPO71Jj0PJeRPuG5lCnbiQtHYrA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c5:04:44:22:74:71:fe:4d:b2:06:30:f5:58:1e:ca:99:b9:
         e0:8a:ef:75:d3:83:49:c6:e9:db:33:c3:45:55:71:23:27:2d:
         c2:50:7c:45:0e:5e:e4:75:af:a7:cd:b7:de:05:f3:72:b9:87:
         05:e1:2a:8e:87:0b:ce:7c:53:e0:e7:38:1b:3d:70:ce:6a:38:
         c7:81:63:32:dd:24:a6:27:0b:70:0c:24:a4:cb:44:a5:56:a6:
         03:92:de:2d:c6:e4:f8:e2:6f:bc:de:68:ab:78:f2:f1:3a:d5:
         70:8c:4d:48:e3:bb:a4:b0:ed:65:7b:ee:5a:ef:e0:24:6f:51:
         3b:4b:cd:e2:4a:c8:7d:07:04:d4:97:14:69:6d:23:d1:ab:1e:
         d1:e8:96:cf:cc:5c:04:73:62:62:f9:a9:b8:63:7c:9f:3c:e2:
         b7:d4:38:8f:d1:59:16:2e:6f:89:b1:ae:64:9c:1a:bd:b9:ac:
         fd:de:f4:2e:11:2f:02:80:8a:35:07:da:53:09:26:98:6e:4f:
         fc:7a:23:e2:e3:fa:2d:87:2f:c7:0d:30:f4:e9:6b:3a:8b:10:
         62:9d:f1:cc:9d:31:69:53:8c:30:70:13:cd:f8:e4:e8:6a:4b:
         ec:c4:8f:68:39:44:0e:eb:69:7d:a5:30:2e:3f:68:e4:92:a8:
         a3:8b:d0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:02 2026 by rpki-client