Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
File:                     4USmzKVqqTEokShNJidwYk784uw.mft (raw, json)
Hash identifier:          NBTANim9HViqh3zN0nSDe2QCh5iWuQBiS/Qft61lWXQ=
Subject key identifier:   77:83:CF:95:9C:74:3A:AD:99:4D:F2:F0:0D:11:F1:BC:24:5D:BC:B3
Authority key identifier: E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC
Certificate issuer:       /CN=A91E3493/serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
Certificate serial:       054C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
Manifest number:          053F
Signing time:             Tue 24 Mar 2026 23:11:17 +0000
Manifest this update:     Tue 24 Mar 2026 23:11:17 +0000
Manifest next update:     Tue 31 Mar 2026 23:11:17 +0000
Files and hashes:         1: 4USmzKVqqTEokShNJidwYk784uw.crl (hash: 2eCJ4MM/vd+zxzC7lIBgpaTIJ9h9WYOz0NMx0XGb6F8=)
                          2: 4A20B66AA5FF11F08004B67CC4F9AE02.roa (hash: 3Ia7nEIkOom0lh0ro+iJfhXTB4oo8GC8HRLZDxobk/M=)
                          3: 6B106380A53111F0A0F3DA52C4F9AE02.roa (hash: g76ZamyRjODzgQS6yEVFN20AKLXKwu0wqqIXxgPUFe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=E144A6CCA56AA9312891284D262770624EFCE2EC
        Validity
            Not Before: Mar 24 23:11:17 2026 GMT
            Not After : Mar 31 23:11:17 2026 GMT
        Subject: CN=69c31a15-2b18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:42:21:3f:00:cb:ad:fb:23:8e:2e:e2:ba:24:
                    66:54:64:7a:04:21:da:87:a2:67:b6:fe:54:6e:24:
                    50:91:81:11:aa:43:fb:b1:58:c3:3f:dd:a5:05:3d:
                    be:7e:6c:8f:25:c6:22:0f:8c:a4:48:01:16:de:d9:
                    37:f4:f6:7d:16:a1:08:7b:c3:d4:92:ef:b8:10:2a:
                    d1:c4:55:70:6d:0e:7e:9e:2a:42:f6:11:be:ad:79:
                    da:8e:99:fa:46:eb:87:1c:ca:38:89:e0:a8:cf:7b:
                    35:e9:36:dc:5b:d6:53:f2:dc:6b:6b:2d:d5:30:4a:
                    14:25:84:f4:ca:34:4a:c6:18:ed:ba:27:d0:40:55:
                    fa:7a:bf:7e:43:2a:8f:91:ee:5a:fa:53:f8:c2:0e:
                    f1:f3:b3:12:5b:31:a5:f1:ef:f1:8c:01:77:0f:e1:
                    55:44:72:18:50:86:63:0f:01:8e:79:50:99:7f:76:
                    c4:1c:73:5d:8c:a5:d2:1e:9d:15:b5:1e:e0:0c:ce:
                    d9:32:0f:6f:e0:69:09:44:fb:1b:a6:95:f5:54:1a:
                    fc:1b:21:6e:bd:16:f6:db:99:f7:22:11:13:26:bc:
                    21:1a:d3:bf:7c:5b:31:f2:43:4b:af:02:01:b8:80:
                    72:c3:53:05:55:33:4d:b5:c6:5b:b3:ff:a5:99:d3:
                    56:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:83:CF:95:9C:74:3A:AD:99:4D:F2:F0:0D:11:F1:BC:24:5D:BC:B3
            X509v3 Authority Key Identifier:
                keyid:E1:44:A6:CC:A5:6A:A9:31:28:91:28:4D:26:27:70:62:4E:FC:E2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4USmzKVqqTEokShNJidwYk784uw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/49A2EE6C368511EC80F52035C4F9AE02/4USmzKVqqTEokShNJidwYk784uw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:df:96:46:6f:31:51:55:d6:bc:3c:9f:b1:fc:95:e5:d4:19:
         e9:95:64:5c:00:3d:3b:44:32:1b:c5:08:a3:17:49:be:29:09:
         e6:ea:d1:71:6b:23:f4:a2:f2:ef:e2:5f:a7:a1:ae:1c:78:fe:
         14:03:56:27:bd:e4:33:84:e5:3a:16:f3:ac:5a:c5:8c:65:8f:
         22:31:cc:c4:f9:24:b8:c5:49:77:b7:6f:80:5a:bc:6e:20:5a:
         1f:a0:4a:b4:d8:d4:a6:c2:0c:48:e1:ef:b9:44:83:47:1a:73:
         6b:14:99:ee:64:7c:b5:ba:ca:81:dd:5f:3f:71:30:cb:a0:ab:
         a1:40:d3:77:1c:7b:00:d0:4a:e4:61:b5:b7:dc:ff:3e:30:87:
         4c:37:34:5b:5c:1b:2b:66:34:dd:76:f9:9b:b0:57:af:f3:c0:
         16:f2:80:f4:1a:5f:a5:d8:ad:bb:ec:58:26:07:9b:60:a3:6d:
         14:a7:a4:b1:da:a1:da:c1:d1:62:57:99:f6:15:ff:20:da:65:
         ed:1d:3b:86:a4:b3:f4:4c:b2:29:0c:41:b7:69:bc:30:a2:08:
         a8:8a:f5:a5:66:af:0a:81:56:93:33:2e:c4:45:67:1f:5b:b2:
         f0:72:9f:23:df:bb:4f:25:f2:33:71:55:f3:92:d3:ba:77:01:
         c3:2c:95:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:52 2026 by rpki-client