Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
File:                     4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json)
Hash identifier:          gcw/8NhOSKoxiHxP2hcEIBSAvPsPWq+2K8h6XlCqMxQ=
Subject key identifier:   3D:B3:E3:1C:9C:0E:2D:2D:38:62:01:E6:5F:26:E8:95:17:83:1F:A0
Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC
Certificate issuer:       /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
Certificate serial:       0204
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
Manifest number:          01F2
Signing time:             Wed 13 May 2026 03:27:33 +0000
Manifest this update:     Wed 13 May 2026 03:27:33 +0000
Manifest next update:     Wed 20 May 2026 03:27:33 +0000
Files and hashes:         1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: dG78sfAYNRbqSPm3Hq7k1/cwAx4kFQSPb0SOQH0eAYo=)
                          2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=)
                          3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=)
                          4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl
                          rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 516 (0x204)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC
        Validity
            Not Before: May 13 03:27:33 2026 GMT
            Not After : May 20 03:27:33 2026 GMT
        Subject: CN=6a03efa5-57d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:36:9e:0f:e1:58:ee:f4:05:33:4b:91:9a:
                    02:98:d1:00:16:f5:df:f9:07:ac:12:74:7d:df:9d:
                    21:d9:d3:72:da:48:6e:a4:57:de:52:93:4e:1b:9c:
                    54:15:a5:37:f0:aa:ec:b1:5f:f4:4e:72:f6:ea:f8:
                    e8:fb:7f:e5:40:50:9c:86:33:93:e3:1d:12:04:29:
                    94:e1:87:63:a0:b8:98:d7:4e:b7:7c:d1:ee:2d:b8:
                    0a:8f:88:7c:4b:f9:3c:c2:ff:30:7d:39:d9:b5:86:
                    85:41:3b:16:fd:97:6b:ac:6d:25:eb:0b:1f:01:70:
                    d1:37:67:07:4c:34:31:10:22:0e:c9:f8:5a:f3:08:
                    06:70:ca:3d:40:68:aa:46:9a:07:bd:b3:3c:6a:96:
                    58:f3:2a:d8:74:c5:9e:10:1c:77:26:e9:b9:ff:f6:
                    6c:75:4d:01:d9:ed:e1:ce:b0:b9:af:15:a5:66:fb:
                    82:9b:92:0b:9c:40:7e:20:b3:f4:70:dc:3b:75:7e:
                    f0:f3:4a:98:e0:34:25:59:4a:8f:3a:5c:be:9e:6b:
                    f6:77:70:a9:e3:7e:cd:e1:b2:ae:74:54:1f:6e:09:
                    c1:59:18:5d:ab:96:96:8c:70:b9:13:7d:ca:b3:4b:
                    b5:00:a2:9d:2a:62:0b:66:b2:c9:a6:21:13:84:1a:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B3:E3:1C:9C:0E:2D:2D:38:62:01:E6:5F:26:E8:95:17:83:1F:A0
            X509v3 Authority Key Identifier:
                keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2d:45:00:15:10:04:ee:38:8f:20:1c:b7:6f:5b:ad:26:1c:
         e1:50:42:10:a7:87:b7:fb:0f:5c:b5:3b:c9:8f:53:f2:74:43:
         19:90:6f:f8:f8:6c:eb:fc:c7:df:ea:b1:5c:dd:3a:b4:c5:d5:
         8a:05:a9:b5:b0:c2:66:e8:0f:aa:3b:6f:3a:d9:49:2d:da:20:
         06:8b:62:a4:be:60:48:09:9e:a1:db:92:a8:ac:f3:44:42:f4:
         a5:a2:14:bd:cc:fe:67:f1:66:46:38:3b:eb:db:8a:a8:02:93:
         fe:2b:f8:6b:d6:e0:63:64:a6:67:92:e0:02:0e:72:f0:a9:b3:
         c9:fb:47:e2:4e:1d:17:a5:82:ec:7f:6b:db:2a:09:d5:0f:62:
         ac:2a:98:d6:41:f2:f7:9a:f4:ff:3a:b4:95:a9:85:f0:1a:25:
         8f:ca:f6:5d:e9:b0:50:46:37:cf:a9:5c:34:89:56:ab:cc:ad:
         e1:1d:cd:b2:ee:f7:98:a2:40:11:c6:ba:f4:3d:e7:c4:41:07:
         2f:6e:c3:d9:9c:49:1e:53:43:a3:fa:ed:15:50:67:64:a7:28:
         7b:74:6d:9d:8a:29:15:d6:62:af:f8:38:36:b3:8e:b3:2d:58:
         ad:5b:11:7e:4b:c2:42:6c:5a:f5:14:62:6d:59:e5:2e:38:27:
         bc:30:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:45 2026 by rpki-client