Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          VZh/wD+SzGky0qHLg9u2XBDyEool6ByZP9uiqmj4ibI=
Subject key identifier:   AA:6E:E8:22:35:DA:EE:BE:00:8B:6A:6B:5A:DD:94:81:E4:CA:B6:83
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       087C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          0862
Signing time:             Tue 12 May 2026 20:52:41 +0000
Manifest this update:     Tue 12 May 2026 20:52:40 +0000
Manifest next update:     Tue 19 May 2026 20:52:40 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: yt3dDAjrM8u5cSqtmMNzQKjwVRSeNh4J5q+yk+sneno=)
                          2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: VVuT0oGthuu1h4dpEkw5dwzZuqKsuK62xGDpmmEICJE=)
                          3: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: May 12 20:52:40 2026 GMT
            Not After : May 19 20:52:40 2026 GMT
        Subject: CN=6a039319-7771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:76:5f:f6:23:52:a6:82:3c:27:25:ea:6c:
                    6d:e2:90:68:f5:e0:06:24:93:e0:be:e0:ab:9d:07:
                    3a:c2:6a:4a:53:03:cf:02:48:10:e6:bf:35:1c:8b:
                    b4:e6:bc:c8:75:b4:e8:c2:b0:6c:c5:c9:19:3f:30:
                    71:9e:14:08:f4:a3:86:fa:d1:7f:f5:36:25:d1:71:
                    c2:63:25:d6:0d:7a:ff:cc:3a:0a:fb:e8:76:fa:31:
                    28:41:32:3f:a8:52:38:46:be:83:b4:29:da:67:b4:
                    39:42:91:b1:5c:35:33:74:06:fe:7b:56:d8:fe:1f:
                    5f:74:d9:ec:66:bf:49:e5:ef:b7:bc:9a:c7:17:ff:
                    a1:d5:f0:7d:e1:28:8b:7e:03:65:30:32:95:42:48:
                    3d:2e:84:62:8e:31:21:81:cf:65:76:6b:5c:73:27:
                    b5:0a:42:5d:96:0b:3b:22:7d:b0:43:38:fc:6e:02:
                    62:52:76:53:a6:92:58:32:1a:c7:7c:74:ff:4b:42:
                    77:f2:69:b0:e1:9d:80:a7:7c:7c:a6:a4:bc:53:32:
                    7b:b4:b4:6f:ce:f7:da:ff:7c:39:b4:76:7b:0d:0b:
                    f5:55:24:0c:8f:92:3d:37:85:76:5e:34:a0:64:ec:
                    81:87:e4:e7:3f:51:5c:32:45:5f:dc:b4:ca:65:4d:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:E8:22:35:DA:EE:BE:00:8B:6A:6B:5A:DD:94:81:E4:CA:B6:83
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:65:2e:59:90:5f:c0:76:c2:70:ef:f3:67:99:b2:e2:65:
         c1:66:99:e5:f5:59:fc:19:37:7b:f7:a2:f9:05:7b:77:6d:33:
         26:ef:19:9e:09:6e:99:84:87:eb:be:ca:13:d7:0a:20:7b:6a:
         96:a2:07:ed:30:c9:56:f5:71:7a:61:9f:1c:94:81:92:a0:fe:
         66:70:9b:ec:df:65:b9:61:16:92:19:c0:c5:20:3d:18:87:73:
         e6:ad:04:df:ad:c8:10:0f:0a:4a:30:6f:cf:f8:83:6a:88:84:
         1b:4d:12:ce:35:d4:5e:07:0e:fa:35:b3:94:e7:5f:52:fe:1a:
         e0:55:5c:67:50:af:fd:26:0b:5b:07:da:f8:a6:e4:c9:3d:54:
         67:cc:54:e9:3f:29:f1:3f:06:7e:5a:2d:51:f2:32:77:6c:d9:
         d2:08:33:69:93:ff:2c:19:c2:62:c7:a8:68:03:9f:38:b1:b9:
         f5:22:4c:07:cc:3d:85:1a:a6:11:fb:0e:99:24:8a:41:06:42:
         09:81:90:1b:ac:99:cb:32:b0:1e:11:51:38:4f:e1:c8:5b:7d:
         55:4c:57:99:a3:e3:ce:c2:93:16:b6:94:9d:d7:1b:21:71:c9:
         9f:cc:eb:47:fe:bd:02:4f:03:1a:c3:f4:93:3a:67:15:90:b5:
         4d:37:5a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:36 2026 by rpki-client