Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
File:                     4-j_B54D_aQzRoidk3ZblZ9uHVk.mft (raw, json)
Hash identifier:          5IyFfhg4NSM6LvsvsdYaGG75SQqeKv6t6Zw1QF8vtAI=
Subject key identifier:   99:3E:34:B6:3B:F1:AE:26:E9:D4:75:DF:11:0A:0E:21:4A:F3:1C:6D
Authority key identifier: E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59
Certificate issuer:       /CN=A91D09B8/serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
Certificate serial:       016F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
Manifest number:          0166
Signing time:             Mon 11 May 2026 04:53:43 +0000
Manifest this update:     Mon 11 May 2026 04:53:43 +0000
Manifest next update:     Mon 18 May 2026 04:53:43 +0000
Files and hashes:         1: 4-j_B54D_aQzRoidk3ZblZ9uHVk.crl (hash: NFiwFdUJDC/GnpMF2lV0xyCU70asczSS2cpMz+Kg6tM=)
                          2: 7594FBFA2C7311EFA27A6526C4F9AE02.roa (hash: vxjovfY5SPA64YdQcHwIKV0R4UjpzTcrTS3QLvsp0Cc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09B8, serialNumber=E3E8FF079E03FDA43346889D93765B959F6E1D59
        Validity
            Not Before: May 11 04:53:43 2026 GMT
            Not After : May 18 04:53:43 2026 GMT
        Subject: CN=6a0160d7-b03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ba:e5:85:78:a4:4a:1c:3a:0d:7d:7a:f2:71:
                    51:6f:f6:ee:07:89:2e:cc:65:ae:fc:1b:e5:3b:db:
                    0e:e5:24:00:c5:d9:15:9e:91:fb:10:3d:70:d2:95:
                    0b:4a:c0:30:55:a0:48:63:72:9f:71:5b:29:c6:c8:
                    50:78:cb:e8:a1:be:dc:80:78:68:6c:08:fc:01:f4:
                    45:88:5a:dd:94:99:69:ed:b2:f0:fb:6d:ac:e9:e9:
                    54:40:06:2f:b9:b7:01:25:55:4b:e6:de:c9:a7:28:
                    14:3e:51:bb:1f:e2:4a:a4:d4:56:e8:30:aa:5d:c7:
                    6a:4c:26:21:87:ae:e4:2e:1b:f6:e2:cb:6c:1c:1a:
                    79:3a:d5:b7:aa:44:5d:7e:11:c0:3d:ce:b2:bf:85:
                    0e:4b:6f:84:49:f4:c9:a5:3b:1b:89:85:e3:f3:4b:
                    a3:82:f4:f1:68:1f:a7:40:62:8c:17:6d:be:bd:3b:
                    96:ce:e3:34:f0:ba:91:a4:20:df:39:9f:68:a9:f0:
                    2b:b2:65:07:df:14:e2:20:e7:98:60:45:a3:92:fa:
                    d9:3e:75:2d:a7:d7:5d:37:ee:be:9f:27:c8:4e:29:
                    06:39:61:4a:e9:d6:96:92:89:4e:0e:ca:69:cb:dd:
                    76:00:1b:26:9a:9b:3b:79:9e:44:95:8d:8b:f1:29:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3E:34:B6:3B:F1:AE:26:E9:D4:75:DF:11:0A:0E:21:4A:F3:1C:6D
            X509v3 Authority Key Identifier:
                keyid:E3:E8:FF:07:9E:03:FD:A4:33:46:88:9D:93:76:5B:95:9F:6E:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-j_B54D_aQzRoidk3ZblZ9uHVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09B8/6AB99E262C7211EFB89B0F84C4F9AE02/4-j_B54D_aQzRoidk3ZblZ9uHVk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:2e:1b:0b:8b:ff:6a:50:0d:ae:a1:ae:94:d0:11:c9:33:5c:
         16:a5:94:d2:05:16:07:57:b0:c3:c4:e4:7d:94:98:d2:73:4f:
         63:3c:33:16:5a:9c:64:4d:e0:ff:6b:b9:71:cb:ad:95:95:65:
         68:99:29:e1:16:21:7d:6a:94:3b:d4:7b:11:c7:94:93:45:8b:
         8b:fd:4e:70:47:b6:a4:7e:9d:27:63:96:55:f5:eb:de:a6:7b:
         18:c1:1a:0f:aa:1f:fa:16:15:ab:17:d7:7c:94:67:8c:75:73:
         a9:eb:06:ec:6b:40:3a:5e:f1:4d:fb:30:56:90:6a:e5:7b:b2:
         69:a7:1d:11:7a:14:09:76:3f:e4:8c:cd:58:46:6e:f7:5c:40:
         de:55:25:29:cd:3f:5a:97:37:39:2d:d2:0b:a9:71:22:2e:50:
         81:64:c6:51:63:56:f2:51:66:a4:27:2f:17:82:84:3e:45:57:
         0a:fb:62:41:f9:75:91:40:63:9d:ec:ce:d8:9c:9c:22:7b:2f:
         d1:e4:64:7f:7a:9a:f7:62:7b:06:34:d5:15:d0:01:4e:11:30:
         d6:d3:86:2e:3c:4f:0a:e7:1d:63:63:3f:48:e1:f6:e9:7c:87:
         d4:ad:1c:42:2f:b7:57:5b:5d:55:50:29:e5:8d:77:f3:6d:c1:
         21:e0:8f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:50 2026 by rpki-client