Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
File:                     4V0TCwuymA4b8RwBvMt1O0loSoA.mft (raw, json)
Hash identifier:          3Hur7RHu456XW1rDoBFq9y/vzy14a2hkA9W4F/aS1lc=
Subject key identifier:   70:F7:34:F7:7F:6D:54:05:E4:8C:35:05:61:DD:4E:60:BC:E6:1E:1C
Authority key identifier: E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80
Certificate issuer:       /CN=A91CE7BD/serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
Certificate serial:       06D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
Manifest number:          06C8
Signing time:             Tue 12 May 2026 22:25:32 +0000
Manifest this update:     Tue 12 May 2026 22:25:32 +0000
Manifest next update:     Tue 19 May 2026 22:25:32 +0000
Files and hashes:         1: 4V0TCwuymA4b8RwBvMt1O0loSoA.crl (hash: kfWvsTK3synCZvhGlv7rXlKyVY4wHlaiU/wlQIDvpQM=)
                          2: 13CC4306433711F18A02B862AB833773.roa (hash: 4UatX4Tw5T6Cxt0fPDGgJ9hIPv2v0sxsXyzKNr9mnPs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7BD, serialNumber=E15D130B0BB2980E1BF11C01BCCB753B49684A80
        Validity
            Not Before: May 12 22:25:32 2026 GMT
            Not After : May 19 22:25:32 2026 GMT
        Subject: CN=6a03a8dc-064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:df:c7:bc:3b:24:20:6b:62:1d:7d:6a:5f:
                    90:5d:e0:67:7a:cf:77:d4:5b:ae:f0:be:39:8c:d1:
                    7f:ea:10:22:26:ad:43:f1:52:2f:45:de:e0:7e:f1:
                    84:65:d8:6b:9a:f5:68:6c:fe:a0:2f:5f:9b:86:76:
                    89:50:8c:1d:e3:f6:f5:3c:7b:5a:6e:48:67:7c:7a:
                    93:66:1e:0d:30:17:c3:45:75:ec:09:a2:b3:41:75:
                    ec:38:7a:d5:02:17:ce:a0:fc:55:82:4f:08:65:ac:
                    9c:91:f8:e2:29:c1:f2:73:51:09:3f:7c:23:7d:86:
                    25:ed:0f:56:ce:fb:23:35:1c:e8:fe:13:1b:83:90:
                    a0:1d:82:11:ff:17:19:69:6b:e2:ff:6a:37:37:66:
                    1d:cf:39:96:8d:a7:00:cd:4b:71:e9:9e:0d:8a:72:
                    75:7f:cc:32:b1:12:3a:07:26:a5:ba:70:45:3f:95:
                    a1:b9:6c:ea:f1:bb:dc:9a:b7:b8:e1:a3:6a:6c:a3:
                    a8:15:02:69:83:f8:67:bb:f3:3b:bb:3a:24:3f:e4:
                    9c:57:75:85:68:b4:ab:2c:19:8f:06:71:bb:66:57:
                    b3:c1:19:c7:69:bc:44:c1:19:40:c8:58:76:37:5e:
                    75:dd:e2:53:b4:83:5b:82:92:a2:d4:94:6a:e5:47:
                    ee:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:34:F7:7F:6D:54:05:E4:8C:35:05:61:DD:4E:60:BC:E6:1E:1C
            X509v3 Authority Key Identifier:
                keyid:E1:5D:13:0B:0B:B2:98:0E:1B:F1:1C:01:BC:CB:75:3B:49:68:4A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4V0TCwuymA4b8RwBvMt1O0loSoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7BD/D3026034A3F511EB92F9C561C4F9AE02/4V0TCwuymA4b8RwBvMt1O0loSoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:df:19:dc:9d:2b:d4:a3:ad:b2:10:7d:c2:3b:10:55:bb:
         f9:5f:ff:b1:7b:43:13:22:dd:8f:d7:a2:2f:c3:ce:a5:cf:74:
         0e:e2:a5:9e:5e:e1:ef:b6:87:43:1a:b1:15:89:dc:ec:46:40:
         f6:4a:0c:f3:88:fe:de:48:df:09:78:e6:e6:22:5e:01:71:8e:
         f5:6f:cc:7d:64:2a:98:03:ce:2e:04:17:23:c1:8d:d8:1f:ef:
         b5:12:e2:d6:44:96:63:92:11:ce:ab:db:3d:c5:72:25:fb:e0:
         f1:43:ab:7f:c4:77:2a:24:b8:45:13:a2:4d:3f:c8:dd:6e:eb:
         62:b9:b8:11:5c:21:9a:53:9d:5f:69:31:a7:5b:d0:13:83:3a:
         1a:ad:6b:0c:bf:18:78:48:2a:08:4c:38:e3:df:73:c1:81:82:
         7c:d2:b4:90:68:53:2a:c6:5f:63:cb:97:74:5d:30:57:84:24:
         20:02:1e:a5:8f:a4:03:4b:98:d9:55:e3:90:e0:a0:34:1b:1b:
         3a:e7:7c:f4:c4:73:4b:45:42:c8:a1:1f:9a:2f:5c:a6:ca:8d:
         e1:e3:1e:70:c7:44:2d:ad:30:28:c5:d8:d9:bd:95:df:25:14:
         73:c9:2c:44:87:c1:83:e3:db:74:52:05:c6:35:1e:29:5f:8e:
         7e:7a:0f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:38:08 2026 by rpki-client