Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
File:                     C4E-K7qEBp60NNZWZn_s4fYbSUs.mft (raw, json)
Hash identifier:          v1FSYWkYfBaBMU+6LIWPe51ZFdck4YlCfXaRghDKDWI=
Subject key identifier:   A1:35:1A:66:18:65:B3:FB:38:4E:1A:FC:A3:7F:8C:F6:8E:4B:F3:8D
Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B
Certificate issuer:       /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
Manifest number:          01D3
Signing time:             Mon 11 May 2026 03:38:15 +0000
Manifest this update:     Mon 11 May 2026 03:38:15 +0000
Manifest next update:     Mon 18 May 2026 03:38:15 +0000
Files and hashes:         1: C4E-K7qEBp60NNZWZn_s4fYbSUs.crl (hash: 4PL9MhHVRuXEBszWBRE5hgfNZYH3nxFIb1DE4dEVggg=)
                          2: 0120C296835D11EEA3484166C4F9AE02.roa (hash: 0ULeWis5k5ScEy2JfIawyIstIOTvRt9YF0f+ToPSQIE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl
                          rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B
        Validity
            Not Before: May 11 03:38:15 2026 GMT
            Not After : May 18 03:38:15 2026 GMT
        Subject: CN=6a014f27-1439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:fb:74:a5:61:02:b5:bc:63:f3:b9:d3:79:
                    56:e9:e0:e8:75:a4:b9:72:84:b4:64:7c:f5:ec:bd:
                    44:a1:ed:c4:46:19:37:be:48:60:e4:5d:0e:5e:c5:
                    c2:e1:a0:f6:4f:5c:c1:2e:1b:67:65:b6:7b:98:09:
                    ec:90:cf:b8:81:46:9e:db:c1:3e:13:cf:f1:21:1a:
                    7c:d0:8a:53:5c:4e:88:05:3f:49:a4:a1:08:da:ab:
                    3d:26:f3:7e:f9:8c:87:57:c1:71:81:4d:60:28:57:
                    c3:23:58:bc:d7:4e:31:ef:57:ea:a5:89:a6:d9:84:
                    0a:bb:8b:d2:bc:1c:8a:a7:bd:58:02:dc:fa:8f:d5:
                    87:6f:e0:65:01:e2:a5:9e:bf:ed:0c:31:71:bc:32:
                    4f:56:1b:09:34:0a:58:49:70:f9:6b:c1:a1:df:64:
                    b3:70:44:f3:81:53:c3:ed:7b:93:52:61:71:53:13:
                    b2:e3:fa:80:13:3c:57:84:d7:cb:4b:a3:51:e2:c5:
                    d5:fd:50:d7:97:55:3c:40:4f:83:c7:f3:34:b9:d8:
                    1f:14:57:a0:40:29:63:1f:e0:25:fa:94:9c:e0:0c:
                    40:38:3f:e1:03:70:a5:cb:43:82:b6:2f:65:dc:f1:
                    c3:25:64:d8:e4:b7:b7:12:2a:7e:11:4f:10:39:04:
                    70:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:35:1A:66:18:65:B3:FB:38:4E:1A:FC:A3:7F:8C:F6:8E:4B:F3:8D
            X509v3 Authority Key Identifier:
                keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:20:fb:a3:13:44:c5:66:48:7a:e6:ec:c9:89:42:e7:07:2d:
         7c:98:46:75:d8:e1:4e:5b:cf:51:70:7b:96:f7:e4:c9:69:15:
         a9:91:85:fa:8d:b8:f3:31:4a:60:6e:86:45:30:a4:31:67:39:
         13:c3:c1:f2:ab:a2:0e:89:e7:d4:1f:7e:3f:8e:d2:b4:1e:1c:
         87:fd:9f:b8:2e:e2:a0:49:df:a0:62:72:39:0c:99:83:37:7f:
         5e:ac:96:16:c1:b0:d4:9a:a9:5b:21:f3:b7:bf:ee:95:ec:83:
         8a:6b:88:2c:de:d0:96:c9:c9:dc:f9:68:d8:c9:23:22:fd:8c:
         4e:fe:ed:16:da:66:77:35:bf:a3:40:4b:f3:e4:33:a9:2c:30:
         75:3a:37:2a:ad:3e:48:88:89:82:59:b7:50:e6:a7:63:e2:d1:
         58:30:f2:37:dd:21:b3:57:44:f1:0d:c4:12:74:fa:9b:88:fa:
         fd:e7:1c:a6:70:af:5a:c9:2c:2f:9b:87:04:44:6b:1a:bc:05:
         00:e1:7a:d8:54:f7:fb:3b:0b:fe:27:10:d7:f6:7f:e4:72:d9:
         e4:f8:ac:3d:f8:66:12:34:17:33:d8:e0:41:37:ed:29:ed:78:
         d0:c4:4f:f9:6c:cf:3a:6d:1d:eb:59:c6:20:d1:75:a6:d1:29:
         da:88:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:40 2026 by rpki-client