Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
File:                     4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft (raw, json)
Hash identifier:          v0vQXzQy2k0ke0j4SHunaHRvumIaQg78viggysXM2GA=
Subject key identifier:   8F:F9:B5:87:D6:B9:1F:72:4E:AD:3D:6B:87:25:02:A2:28:28:A4:88
Authority key identifier: E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C
Certificate issuer:       /CN=A91E1604/serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
Certificate serial:       0163
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
Manifest number:          015B
Signing time:             Mon 11 May 2026 05:03:02 +0000
Manifest this update:     Mon 11 May 2026 05:03:02 +0000
Manifest next update:     Mon 18 May 2026 05:03:02 +0000
Files and hashes:         1: 4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl (hash: uPxdMRX7kRSwPDNyrFIKpwBF6sXIX1VHjAZsUw+rQyc=)
                          2: 0B725F44496D11EF9F7F2116C4F9AE02.roa (hash: GLn2NuIf/rdBlKE3RuKG6Jbz+UwBmcRgc2vk3s4p7rY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=E2F17737B84C1F67869C03A47F8C419FD420016C
        Validity
            Not Before: May 11 05:03:02 2026 GMT
            Not After : May 18 05:03:02 2026 GMT
        Subject: CN=6a016306-1178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:25:e0:67:11:eb:0f:fd:cf:04:84:6a:5a:
                    26:15:52:e6:d6:48:c1:07:8d:87:94:2d:ec:95:8d:
                    b1:5d:c7:32:91:b5:5c:6b:32:53:26:d1:23:08:4c:
                    b5:13:80:99:af:d6:e6:1a:76:4d:0c:35:4e:92:6d:
                    75:40:36:dd:e3:85:e5:4a:25:42:b0:a1:ea:e2:01:
                    47:56:c1:58:76:a8:37:e7:3f:d4:e4:36:99:f6:d5:
                    40:17:2a:8e:ac:e3:39:05:5f:1a:3f:dc:a0:dd:4a:
                    d5:f5:60:0b:03:3a:82:86:d2:06:c0:fe:b9:d3:01:
                    bc:27:f3:4f:b5:d7:78:6c:f3:0b:8e:97:c9:5a:20:
                    f5:89:25:e3:50:41:f1:77:0b:0e:5d:1e:61:17:e7:
                    a4:bd:17:0a:af:45:72:96:9e:2b:06:26:a3:19:bc:
                    43:fc:8f:ba:e3:87:38:4d:88:3f:36:ed:3b:49:a8:
                    cc:58:ea:00:bd:fb:7b:fb:66:0c:5a:ef:7c:be:2b:
                    7f:ca:55:d3:9b:54:5a:92:30:93:f6:3e:e8:ff:1c:
                    2f:e5:a0:da:ac:1a:6d:ca:0a:f8:80:76:7d:0c:e0:
                    c8:ca:d2:0d:74:43:72:a2:21:24:c0:7f:f8:60:25:
                    e9:88:c1:28:4a:d1:67:a1:d5:6d:75:43:a1:65:c0:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F9:B5:87:D6:B9:1F:72:4E:AD:3D:6B:87:25:02:A2:28:28:A4:88
            X509v3 Authority Key Identifier:
                keyid:E2:F1:77:37:B8:4C:1F:67:86:9C:03:A4:7F:8C:41:9F:D4:20:01:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4vF3N7hMH2eGnAOkf4xBn9QgAWw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/120C2C743CEB11EF94E24F59C4F9AE02/4vF3N7hMH2eGnAOkf4xBn9QgAWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:00:d4:69:66:84:a1:65:40:8d:e2:4f:54:0e:7b:2c:88:20:
         e2:49:31:83:ff:29:77:9d:ee:3e:19:f7:a9:d2:b7:fa:08:5c:
         67:93:06:ea:4a:24:ad:93:2f:c8:24:ca:3d:10:fe:0e:5d:24:
         ca:44:e7:0c:a4:0d:4f:c2:2a:fc:a5:2d:eb:df:9f:59:12:42:
         72:23:7a:64:49:89:95:5e:d5:ea:86:1c:44:36:7e:a0:93:53:
         2d:50:87:a4:38:04:d1:c0:9f:e6:f2:e2:80:94:a9:e9:ec:76:
         f9:9e:a4:e2:2b:47:28:aa:c9:a2:21:8f:68:23:cc:1c:83:12:
         77:a1:46:27:87:d0:1b:77:b2:fa:0a:18:8e:32:45:da:36:30:
         28:12:eb:b2:79:50:d7:63:63:af:7c:6a:0b:a8:03:1d:31:36:
         cf:2f:00:32:6e:70:73:3b:40:11:35:1c:92:aa:84:ae:57:3b:
         5b:3d:e8:23:d7:43:87:71:1c:02:08:28:99:04:a6:40:18:7a:
         e7:88:7f:63:37:6b:af:5e:4f:cd:17:f8:cf:c7:c4:e0:5a:11:
         f4:df:60:8e:53:fc:06:4c:1a:79:6c:05:b3:e8:28:39:4e:d9:
         2f:0f:f5:8a:03:58:15:3d:d5:78:0b:79:1c:89:da:9f:93:4b:
         f0:9c:a0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:10 2026 by rpki-client