Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
File:                     4UieBUVuksrXFYRyAOSnXWw-Q84.mft (raw, json)
Hash identifier:          VHKvyz/hwZ9fqIP2o1Yhek6TxtyT9wfhblycZTxCvJc=
Subject key identifier:   2B:09:A3:BC:DA:CF:94:B8:F9:E7:B3:1F:99:13:B1:02:36:6B:A0:2F
Authority key identifier: E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE
Certificate issuer:       /CN=A91F6AE0/serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
Certificate serial:       037D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
Manifest number:          0375
Signing time:             Wed 13 May 2026 00:58:33 +0000
Manifest this update:     Wed 13 May 2026 00:58:33 +0000
Manifest next update:     Wed 20 May 2026 00:58:33 +0000
Files and hashes:         1: 4UieBUVuksrXFYRyAOSnXWw-Q84.crl (hash: gG19YOSsgWdXnCIMU38b+vOKuDhQpxVFa5SR5Noj7ZI=)
                          2: E2DF828CF20211ECBCC9B986C4F9AE02.roa (hash: jiBvZp8q2/HrEtfhJqrPwYsS1vT/hkyHd2m0OXQ6h8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl
                          rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6AE0, serialNumber=E1489E05456E92CAD715847200E4A75D6C3E43CE
        Validity
            Not Before: May 13 00:58:33 2026 GMT
            Not After : May 20 00:58:33 2026 GMT
        Subject: CN=6a03ccb9-abdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f7:4f:d7:43:4a:32:76:53:f0:e9:00:63:19:
                    d2:b6:e7:b6:4b:18:45:e8:35:16:e3:56:f3:9c:00:
                    17:ee:f3:39:64:68:bf:f6:2b:bc:b7:a7:df:02:fc:
                    7b:73:34:8a:c8:01:aa:e5:4f:94:8c:f7:fd:49:40:
                    b9:61:cb:3d:56:77:a5:56:1b:8c:c4:2f:64:35:6b:
                    9f:7b:75:79:a5:7b:85:3e:bf:e5:53:e9:ab:c6:a3:
                    37:e9:b3:af:da:ed:7a:08:ec:96:a7:07:16:32:d0:
                    31:d1:93:e2:f1:75:f1:f5:ca:ef:63:4e:69:6d:5b:
                    7d:f9:f2:50:9d:ff:2c:e4:2f:1d:12:cb:06:21:82:
                    54:dd:ce:ee:d3:aa:a8:e7:95:8b:39:44:e9:3f:f6:
                    91:c5:12:a7:5e:7f:ae:1c:68:5a:05:9b:f1:af:8e:
                    63:3f:46:88:84:d4:ba:a9:00:c0:6d:cc:fd:40:66:
                    b8:be:4b:83:a2:df:b1:b0:c5:4c:1e:3a:ea:a0:df:
                    bc:61:97:33:61:16:bf:31:fd:46:ac:64:dc:11:f1:
                    4e:a9:19:61:cf:38:17:c2:81:d4:cc:63:13:fd:3e:
                    19:f4:ee:f2:bf:5c:96:14:6e:d1:dc:c4:3b:4e:23:
                    b3:4d:a6:0c:a1:c3:36:95:f2:84:4a:09:bd:4c:8b:
                    8e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:A3:BC:DA:CF:94:B8:F9:E7:B3:1F:99:13:B1:02:36:6B:A0:2F
            X509v3 Authority Key Identifier:
                keyid:E1:48:9E:05:45:6E:92:CA:D7:15:84:72:00:E4:A7:5D:6C:3E:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UieBUVuksrXFYRyAOSnXWw-Q84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6AE0/FA047F54F1FC11EC99B2CB6BC4F9AE02/4UieBUVuksrXFYRyAOSnXWw-Q84.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:6c:bf:49:ff:c9:71:f9:df:6b:ce:18:6d:07:3f:d9:90:
         e5:41:d7:79:97:3d:26:b1:c5:16:ed:ce:32:4a:e5:9c:fb:98:
         19:ec:09:f3:1f:e9:6e:d8:5d:10:85:1b:8e:44:db:af:43:55:
         70:d7:70:4f:80:11:2f:8e:f6:fe:3e:68:b7:5b:0c:e5:ec:e3:
         71:6d:c5:3c:23:23:67:d5:78:61:ab:7d:4f:f5:e0:6c:d2:a9:
         e7:12:02:17:53:fc:49:f5:03:e7:1c:bd:c0:14:00:86:5c:64:
         bc:48:c7:d9:d2:fb:c2:5b:e9:9a:1d:4b:08:23:1e:09:c3:f8:
         bf:ec:42:b4:9c:3c:c9:01:d8:87:cb:01:99:45:b8:0f:60:19:
         08:e1:e9:20:59:f4:7e:2e:38:5a:ac:8b:f2:34:22:c6:26:5b:
         4a:2d:74:6f:bd:c1:8d:11:48:ec:36:77:9a:78:95:76:8c:b6:
         39:34:f2:6f:c4:2d:a0:e6:5a:02:4a:5e:ac:a0:77:fa:0a:0b:
         38:6d:f9:12:b3:6f:4d:77:5b:4c:b6:da:1b:d3:1a:c1:c1:44:
         e0:cc:b4:d2:69:2a:de:04:6a:62:e3:7f:c2:99:0e:3f:ba:a3:
         34:dd:1d:7b:16:f7:8c:9a:32:29:7e:38:34:b7:a9:43:4e:60:
         53:21:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:13:35 2026 by rpki-client