Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
File:                     Cv4rIK3mucMLixgR0V8dDVdN494.mft (raw, json)
Hash identifier:          vb2sRFvHlq66JPKtj907lEbwmGrf/Pa5KL9ywwvVtCc=
Subject key identifier:   F1:20:B6:B6:94:F0:B6:69:87:55:5C:74:44:B0:06:31:83:08:4B:96
Authority key identifier: 0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE
Certificate issuer:       /CN=A91EC98B/serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
Manifest number:          34
Signing time:             Mon 11 May 2026 08:51:10 +0000
Manifest this update:     Mon 11 May 2026 08:51:10 +0000
Manifest next update:     Mon 18 May 2026 08:51:10 +0000
Files and hashes:         1: Cv4rIK3mucMLixgR0V8dDVdN494.crl (hash: cGkZ2B+58sRlrc4YRrQXYq0Y0AJr5IkTq9Oc1oYoFcg=)
                          2: 32A5FD8C036611F1A426A4772D3D8C67.roa (hash: rAKQfqzwQK5IzLFhXtLBp7YYHEkrei2qYSNZ5UbT8L0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl
                          rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC98B, serialNumber=0AFE2B20ADE6B9C30B8B1811D15F1D0D574DE3DE
        Validity
            Not Before: May 11 08:51:10 2026 GMT
            Not After : May 18 08:51:10 2026 GMT
        Subject: CN=6a01987e-70ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e7:c2:4e:6b:00:78:73:b2:56:90:b7:34:b2:
                    6d:a9:b0:10:53:89:ba:ca:f4:f0:d6:66:90:ce:22:
                    46:03:ed:ea:9a:20:cd:cf:a8:da:45:de:8c:14:42:
                    97:07:92:0e:43:df:3c:68:f3:63:01:86:48:e1:2a:
                    bb:c6:40:f9:f6:6a:ec:df:7d:f6:00:0f:67:af:3b:
                    b4:9a:c3:ad:f7:d9:f6:54:3d:e1:8d:0e:7e:83:bc:
                    65:83:dc:77:03:51:aa:77:5f:c4:06:93:88:bb:c6:
                    73:e3:45:04:32:20:15:1c:60:c5:3e:ab:b6:2d:ba:
                    f5:31:b7:bb:a7:dc:b9:25:aa:d2:21:df:e7:32:3b:
                    79:ce:b6:24:9b:49:c7:27:8e:a0:9a:5f:c6:0f:1e:
                    21:87:a2:ba:5f:27:f2:18:9f:58:34:bc:69:ae:ac:
                    0b:cb:e9:b6:97:79:04:63:4a:51:9d:4e:14:12:6a:
                    df:70:02:ce:94:47:b1:00:97:0d:27:09:24:ce:bc:
                    29:fb:0b:46:c2:49:36:87:37:b3:47:6c:09:96:ad:
                    2f:be:91:43:10:9e:61:6a:b8:43:ba:cc:27:d9:5d:
                    4b:9b:f9:43:5a:0d:d1:09:49:c0:e9:0e:b1:a4:b9:
                    be:82:b2:e1:59:13:c8:84:ec:e9:6f:6c:ea:6e:da:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:B6:B6:94:F0:B6:69:87:55:5C:74:44:B0:06:31:83:08:4B:96
            X509v3 Authority Key Identifier:
                keyid:0A:FE:2B:20:AD:E6:B9:C3:0B:8B:18:11:D1:5F:1D:0D:57:4D:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cv4rIK3mucMLixgR0V8dDVdN494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC98B/74107CEE036511F1B98578D42C3D8C67/Cv4rIK3mucMLixgR0V8dDVdN494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:68:95:7f:1f:bf:3e:da:e0:b0:65:49:78:40:63:c1:67:d7:
         b6:75:5e:01:ca:65:9b:71:90:47:2b:03:6f:06:69:78:7a:6c:
         69:a1:27:40:33:6e:f4:ab:31:26:b9:82:c0:f7:a1:6d:d8:50:
         f2:4e:9a:cd:4b:6b:73:0b:1b:e3:79:f5:07:69:83:9b:1c:18:
         0d:3e:8a:7a:b2:8f:49:27:cd:ab:a7:c8:dd:39:36:7f:16:cc:
         d0:88:5a:b4:6f:c2:0e:1d:91:1b:4d:4e:7e:28:23:41:f8:f0:
         44:53:a1:2b:0c:f7:e5:3c:85:f0:d6:36:d8:9b:b0:14:0b:b4:
         ee:13:a2:ad:85:e8:a3:04:0b:62:da:92:5e:f4:52:22:45:51:
         8a:cf:15:6d:3a:22:6a:02:6a:c7:3f:3c:47:96:77:eb:1c:3b:
         1f:31:b1:8a:49:20:83:ab:73:47:3c:66:1a:79:f6:e0:d8:14:
         4f:39:00:a1:32:a6:1f:f7:d0:1c:5a:1f:5d:1a:75:b3:57:be:
         10:f1:8b:fa:91:1a:75:13:30:c2:f0:20:71:ce:08:6c:ad:dd:
         e9:16:82:0e:fd:ea:51:84:33:de:a8:e3:2f:ee:77:4f:9a:a8:
         af:a8:e8:e0:ac:ab:1b:0e:8b:5f:4e:57:02:21:00:91:07:fd:
         f7:2d:2a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:34 2026 by rpki-client