Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
File:                     4ggepNPNtZniYIYCcE_bNYbUj1c.mft (raw, json)
Hash identifier:          0VQZG1D8keLrifLDBb2BzCWsTFwUi1kKBn59kOom0uY=
Subject key identifier:   88:41:86:87:D1:43:15:DC:19:6A:47:F7:98:D5:12:0A:06:F1:0C:70
Authority key identifier: E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57
Certificate issuer:       /CN=A91CDF1C/serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
Certificate serial:       0C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
Manifest number:          0C4F
Signing time:             Tue 12 May 2026 18:46:41 +0000
Manifest this update:     Tue 12 May 2026 18:46:41 +0000
Manifest next update:     Tue 19 May 2026 18:46:41 +0000
Files and hashes:         1: 4ggepNPNtZniYIYCcE_bNYbUj1c.crl (hash: U9LNMqHmPcxpfW1HWV+SCKPxN33ImNQ+XIpmKGht+Ps=)
                          2: 277BE15035CD11EAA2366620C4F9AE02.roa (hash: 05Ptx/86GPO/lhad6zk3MbGdkqRjiz5wYtBGze/jKII=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3160 (0xc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF1C, serialNumber=E2081EA4D3CDB599E2608602704FDB3586D48F57
        Validity
            Not Before: May 12 18:46:41 2026 GMT
            Not After : May 19 18:46:41 2026 GMT
        Subject: CN=6a037591-b774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:24:e1:74:8b:1c:76:9a:84:f8:d8:e6:03:
                    c5:1b:6e:f3:6d:f9:a0:ed:fa:ee:dc:64:a1:a8:13:
                    2a:2f:40:5e:f9:59:2a:d7:aa:95:e8:dc:9b:37:12:
                    3c:7b:f1:8a:f6:8b:98:a4:39:fa:de:97:ae:36:d7:
                    72:eb:96:60:7c:6f:cc:8c:23:cd:93:ae:be:9f:c7:
                    cd:b6:ff:be:19:06:8d:5e:7b:7b:67:9f:c8:d8:18:
                    17:a9:e8:99:4a:75:67:48:b0:5b:41:d6:53:e5:34:
                    0c:c7:17:e8:8b:35:03:0b:40:0e:5b:8b:6d:93:a1:
                    06:18:88:87:d1:dd:60:dd:b3:62:b1:45:e9:3f:59:
                    9c:55:68:38:f2:5d:55:89:2d:77:5f:2c:55:0d:6c:
                    99:47:0d:d9:79:97:98:8c:5e:58:27:ac:50:f4:79:
                    09:c9:14:a5:2c:19:c1:e1:34:66:dc:b6:89:ab:64:
                    ee:1a:45:23:da:7b:01:2c:f9:66:bc:77:dc:53:5a:
                    71:7a:9b:47:46:3b:55:cc:66:fc:77:ee:31:91:22:
                    fd:ca:5b:90:59:3f:59:08:55:44:ae:e3:b0:26:11:
                    0f:4a:da:c2:68:b7:ca:41:82:ea:4b:ee:a9:6e:d6:
                    05:da:9c:03:5a:da:57:dc:01:4d:ad:ce:78:dd:b3:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:41:86:87:D1:43:15:DC:19:6A:47:F7:98:D5:12:0A:06:F1:0C:70
            X509v3 Authority Key Identifier:
                keyid:E2:08:1E:A4:D3:CD:B5:99:E2:60:86:02:70:4F:DB:35:86:D4:8F:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ggepNPNtZniYIYCcE_bNYbUj1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF1C/36C96220263E11EA84F1BC86C4F9AE02/4ggepNPNtZniYIYCcE_bNYbUj1c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:3f:0b:d9:5d:7f:a8:e1:5e:33:b0:13:f5:cb:1f:81:ec:
         48:e9:f2:42:82:0c:b3:f2:ad:6a:a7:42:29:cc:c9:cf:f0:ea:
         0c:12:ce:d6:26:3e:ce:b4:af:6f:18:65:f3:53:22:dc:ac:44:
         0e:9e:f5:1a:00:07:2e:83:12:1d:fe:d0:5b:36:69:65:ce:7e:
         3a:d0:c9:27:02:2f:99:1f:b1:8a:d6:13:72:55:aa:68:13:fc:
         80:dd:4e:c2:50:be:cf:87:b4:ee:85:82:28:a6:8b:b6:6d:7f:
         60:bb:66:cf:99:83:a0:48:e8:cd:9b:8b:2a:a0:15:c9:4b:b8:
         58:d8:51:b0:88:a0:cd:1d:8f:a7:19:a3:1e:f3:16:79:37:ca:
         19:4d:76:de:07:d3:91:70:2b:fc:6a:21:de:e7:33:87:89:7b:
         d6:45:7f:4b:ba:e2:b5:6e:f5:1b:75:83:62:ee:0f:81:1a:2f:
         cb:a6:61:90:55:4b:91:cf:bf:c6:7b:64:4d:e2:86:2a:53:61:
         ac:69:15:b4:d3:85:80:c2:9b:45:95:64:35:8d:73:45:d4:f8:
         5d:a9:4b:c8:25:a7:ec:fe:d3:b1:cb:a8:4f:16:dd:a1:4d:42:
         bc:20:f0:37:ea:ab:2a:ea:75:2e:41:86:ac:5e:b9:b7:e5:7d:
         bb:35:ab:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:33:19 2026 by rpki-client