Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
File:                     4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json)
Hash identifier:          ZUuQKJMp1sNyEsX1W0qTgzlf8PbqC8qVA97BIHD7Q0Q=
Subject key identifier:   BA:E8:84:E6:12:D2:76:02:B3:E3:82:01:C5:70:F7:DD:22:ED:88:48
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Certificate issuer:       /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
Manifest number:          014E
Signing time:             Wed 25 Mar 2026 04:22:27 +0000
Manifest this update:     Wed 25 Mar 2026 04:22:27 +0000
Manifest next update:     Wed 01 Apr 2026 04:22:27 +0000
Files and hashes:         1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: c9p6Oqk/MVZKLWCDmImksvtVPRw34EP5mCghI+SQiyM=)
                          2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: vxjovfY5SPA64YdQcHwIKV0R4UjpzTcrTS3QLvsp0Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
        Validity
            Not Before: Mar 25 04:22:27 2026 GMT
            Not After : Apr  1 04:22:27 2026 GMT
        Subject: CN=69c36303-05de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:56:11:f6:c0:72:be:b9:f4:f3:c5:b1:c2:
                    43:16:70:39:55:d1:b9:fe:f4:8e:28:1c:07:4c:75:
                    b5:cc:51:f6:c9:cc:bd:d3:52:36:e6:37:fc:b9:cb:
                    03:90:20:06:7a:94:9a:42:91:99:c0:88:15:f8:3b:
                    61:72:b9:89:f4:59:bc:80:a2:46:27:bf:50:d0:f9:
                    ab:7b:af:7d:e2:f3:da:6f:02:49:af:14:de:a1:3f:
                    a0:f4:ea:f6:7c:ff:7b:b2:67:3f:94:db:bb:36:ff:
                    bd:82:79:d9:46:61:84:20:97:0e:d7:f9:f5:00:01:
                    55:ba:73:5f:c2:da:d2:0b:46:78:f9:3c:7b:68:36:
                    59:8f:ce:e2:3b:d3:77:18:e1:fe:5c:1c:ce:e2:e2:
                    d2:88:28:8f:44:4e:20:7f:92:82:4a:8c:8c:11:59:
                    e5:ed:1f:28:e0:ce:ee:30:b1:c4:9a:7c:7f:b3:9e:
                    3d:ea:bb:6d:c0:25:4f:3b:4a:e6:b8:ac:5c:00:11:
                    32:0d:81:0a:4f:1c:c0:b2:8b:87:c4:39:05:10:b5:
                    0b:4e:95:43:47:b6:95:02:5f:4d:a4:14:ff:f1:e9:
                    fc:89:c5:89:9f:f5:75:e4:99:f0:9d:91:2d:58:6b:
                    90:dc:56:63:b1:13:a5:c8:5d:3a:41:01:39:15:8f:
                    3a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E8:84:E6:12:D2:76:02:B3:E3:82:01:C5:70:F7:DD:22:ED:88:48
            X509v3 Authority Key Identifier:
                keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:6a:ae:f6:ee:ed:64:8e:32:80:5b:04:d5:a6:8c:00:6b:c1:
         a5:70:26:99:73:2e:7a:71:14:19:9a:63:01:1e:1e:9f:62:f3:
         34:67:64:91:cc:82:3f:fb:5e:4e:48:68:db:63:5d:6d:f0:cf:
         7c:5f:39:ad:cb:1b:e9:0b:15:2b:a5:64:67:e0:67:3e:96:de:
         9e:d6:4c:36:55:95:59:3e:fd:99:77:8e:04:5d:b9:30:f6:77:
         24:5e:94:84:c6:35:83:1d:56:a0:12:ea:d2:f2:4f:51:c6:ab:
         7a:80:24:58:a5:54:fe:e8:d0:2d:6c:70:98:a7:d1:bb:18:62:
         6a:2e:27:4e:8b:d2:b8:0f:bf:60:da:b7:6d:12:59:9d:fe:23:
         f7:c3:be:19:24:33:8d:d3:a4:3f:80:2a:e1:a5:dc:0c:79:d9:
         c2:96:cc:a3:e2:34:b5:d9:76:06:1a:b5:f6:29:b5:3b:49:b6:
         a8:b8:6d:4d:7e:c6:28:32:47:ae:46:de:e6:c9:17:93:35:28:
         1c:18:c1:42:f8:ab:ab:4a:ba:68:bf:72:51:01:f2:d1:92:e2:
         c0:25:77:3c:b7:3b:64:f2:e0:da:7b:b3:ee:a4:c8:bf:78:c2:
         e0:77:64:96:bc:d0:09:05:a1:ef:0d:bb:3b:79:a5:39:5d:ab:
         a9:b5:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:10:49 2026 by rpki-client