Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
File:                     4G_oQca7SYofv2fuOqjIqcU4fQ8.mft (raw, json)
Hash identifier:          roq6+XOqh3BBX28vtBvKy063/jZ1X7ZJO21WcaeynZY=
Subject key identifier:   15:33:77:B4:C4:48:8F:D5:EC:11:83:48:C0:C7:25:1B:A0:96:B1:94
Authority key identifier: E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F
Certificate issuer:       /CN=A91D34D0/serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
Manifest number:          013F
Signing time:             Wed 25 Mar 2026 04:36:47 +0000
Manifest this update:     Wed 25 Mar 2026 04:36:47 +0000
Manifest next update:     Wed 01 Apr 2026 04:36:47 +0000
Files and hashes:         1: 4G_oQca7SYofv2fuOqjIqcU4fQ8.crl (hash: Wm3qVt2+nn1REKBUlNxzk7ch62jd4YG+WgsxOUbgASQ=)
                          2: 47C532D045B911EF93633071C4F9AE02.roa (hash: Hl209KOZgglZ4+SCqzKmdcJ+m6OFPPd68T8PhDnGZH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0, serialNumber=E06FE841C6BB498A1FBF67EE3AA8C8A9C5387D0F
        Validity
            Not Before: Mar 25 04:36:47 2026 GMT
            Not After : Apr  1 04:36:47 2026 GMT
        Subject: CN=69c3665f-34bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:20:6b:05:62:5e:d2:09:d5:0d:1e:cd:bb:
                    da:22:d8:49:70:3b:89:f0:7a:d0:c5:3b:90:0f:8a:
                    35:36:19:ca:e3:73:89:21:40:47:cd:17:7d:49:06:
                    73:5a:16:01:06:38:e9:13:ca:ae:08:8b:2c:d3:4a:
                    de:75:0e:dd:f7:66:fb:91:e5:9d:48:04:a4:e7:87:
                    73:bb:4f:98:85:65:73:50:c1:28:2e:89:6f:c0:d0:
                    f9:cf:a9:4f:0c:c3:81:15:35:f1:9b:5a:aa:87:97:
                    da:c5:fb:7b:46:2f:bd:94:37:0c:b5:d3:d8:36:1c:
                    8a:14:4b:38:38:70:af:9f:04:d8:a6:86:fc:79:9e:
                    f3:4d:de:12:ff:8f:b9:b6:ba:10:f2:bf:63:8b:d8:
                    14:3f:ec:00:80:96:81:98:62:ba:f9:76:b2:c4:34:
                    95:b9:a9:c8:10:42:e9:53:b0:01:d8:1c:cf:00:20:
                    46:4c:86:90:30:c8:84:b4:61:66:12:3c:fe:b9:27:
                    e9:5e:58:31:82:a6:eb:65:3d:07:37:ab:2d:fa:e5:
                    60:29:3c:61:26:24:2c:3a:0c:da:9c:41:c4:25:0c:
                    91:88:2f:ce:e9:3b:eb:c6:59:7d:a1:07:e2:27:ff:
                    bc:40:17:f6:01:26:4d:6e:75:59:6e:42:e9:68:04:
                    54:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:33:77:B4:C4:48:8F:D5:EC:11:83:48:C0:C7:25:1B:A0:96:B1:94
            X509v3 Authority Key Identifier:
                keyid:E0:6F:E8:41:C6:BB:49:8A:1F:BF:67:EE:3A:A8:C8:A9:C5:38:7D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4G_oQca7SYofv2fuOqjIqcU4fQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/ECF80F8645B711EFA3D9A049C4F9AE02/4G_oQca7SYofv2fuOqjIqcU4fQ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:9c:94:37:61:fa:74:ed:00:2c:01:f0:55:00:6e:b1:66:
         01:fd:d7:16:32:03:08:31:f2:ad:f1:65:2a:0e:60:0e:9a:c5:
         c9:c1:97:68:ad:12:8a:c6:0d:b6:dd:41:33:1b:60:5c:bb:2f:
         f2:5f:f9:c6:d2:2a:cd:a1:3b:23:25:6f:e1:c6:59:a1:19:07:
         fb:f8:40:15:03:14:46:d0:5c:c0:d0:61:ff:1f:16:f2:c9:e5:
         51:09:fe:0f:29:3e:6f:d3:08:d0:34:02:58:8b:36:a1:49:aa:
         31:25:37:0f:33:04:37:5f:2a:ea:66:ab:e4:15:7f:6e:e0:28:
         d4:e4:55:fe:1d:81:f8:bf:69:dc:e2:93:0d:6e:82:5c:4b:86:
         0d:41:0f:d5:d5:1c:d1:ee:62:75:bd:f1:28:93:55:0d:02:19:
         01:76:de:a0:df:dc:bd:9c:d9:8c:b2:1b:95:68:a3:c1:e1:7e:
         5e:2b:2a:32:49:dc:ad:8b:38:2a:ae:33:d1:6e:c0:62:90:13:
         87:2f:3e:7d:b7:4e:41:8e:0e:1b:e9:b1:bf:93:d6:e2:df:f9:
         b4:fc:b8:38:99:45:fa:8f:4c:71:8b:e4:c4:b7:1d:15:ee:55:
         cf:21:1e:05:bb:a9:70:bb:25:8a:f8:73:7c:46:1d:9e:35:51:
         7f:b5:0f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:40:21 2026 by rpki-client