Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
File:                     _rv4NRuAvuL_tu8l-lfwhy9QkfI.mft (raw, json)
Hash identifier:          EfNMUSGQ2lKJg6wSgOYBUGZNGjL5piU1e3ZXrRg/PYE=
Subject key identifier:   5B:46:F8:65:86:37:4F:5A:C8:01:B7:C9:6D:21:0F:DE:AE:27:40:51
Authority key identifier: FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2
Certificate issuer:       /CN=A91133BE/serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
Certificate serial:       3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
Manifest number:          38
Signing time:             Fri 15 May 2026 08:42:54 +0000
Manifest this update:     Fri 15 May 2026 08:42:53 +0000
Manifest next update:     Fri 22 May 2026 08:42:53 +0000
Files and hashes:         1: _rv4NRuAvuL_tu8l-lfwhy9QkfI.crl (hash: FPRkScnQkC0Rf75UzD+mDmmAze0NTMDIulUyADBV6bc=)
                          2: D030482C001011F18942B574406F56BC.roa (hash: sbfrnLF6dkRPUD2i2wrrg7/6Vn8Z0is3ukK/xyl/U6c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl
                          rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 08:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133BE, serialNumber=FEBBF8351B80BEE2FFB6EF25FA57F0872F5091F2
        Validity
            Not Before: May 15 08:42:53 2026 GMT
            Not After : May 22 08:42:53 2026 GMT
        Subject: CN=6a06dc8d-e4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:18:94:61:5e:3d:e3:bd:c0:a4:a6:4b:10:
                    c9:7e:93:fc:2a:42:0d:f8:1b:25:b4:82:fb:c1:53:
                    c0:58:f7:84:82:5d:6f:71:b7:a7:78:a5:96:00:18:
                    ba:94:5a:ea:48:b2:22:88:1f:97:a9:e8:83:c0:92:
                    93:cc:57:c8:b6:14:f5:64:6e:73:aa:58:d6:40:ef:
                    e6:11:dd:4b:1f:93:7d:c5:ba:20:26:1a:95:74:c2:
                    4d:36:dd:20:5d:85:3c:c2:aa:03:d6:ee:fd:7e:1d:
                    ad:c8:78:8a:0b:62:a0:5d:0f:21:c9:1d:5a:e5:39:
                    76:0b:62:00:3b:3b:61:86:18:d2:0c:0c:13:20:49:
                    d1:54:3c:b6:79:03:fa:f4:0e:3c:e0:af:38:cd:85:
                    5a:41:97:bd:c9:a1:05:40:21:e7:83:0f:13:0a:45:
                    32:d7:8f:80:d4:fd:9c:33:42:67:fa:13:84:9b:cc:
                    27:36:4f:d5:dd:89:f7:c6:7c:a8:aa:93:31:e1:89:
                    fc:11:4e:4d:54:90:7b:a6:09:f0:9a:3b:33:40:20:
                    35:3b:29:87:a5:25:f6:2e:4a:2d:bd:94:d0:af:49:
                    f0:ad:45:fb:9a:7b:07:db:7a:ea:07:a3:ae:61:8f:
                    57:97:13:e0:6f:d5:7e:ab:f4:13:77:2d:7c:81:07:
                    00:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:46:F8:65:86:37:4F:5A:C8:01:B7:C9:6D:21:0F:DE:AE:27:40:51
            X509v3 Authority Key Identifier:
                keyid:FE:BB:F8:35:1B:80:BE:E2:FF:B6:EF:25:FA:57:F0:87:2F:50:91:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rv4NRuAvuL_tu8l-lfwhy9QkfI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133BE/8D82D576001011F188CCBB0E406F56BC/_rv4NRuAvuL_tu8l-lfwhy9QkfI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:50:5d:b6:e3:07:ed:2c:88:b5:a9:e1:2d:f2:f6:0b:e1:
         64:6b:c5:ca:6f:40:b4:39:b7:a4:bd:c6:45:8b:32:24:29:25:
         eb:a8:29:f5:cc:37:36:e3:8a:57:4c:f9:9f:4f:bc:6e:8f:cf:
         be:40:43:b2:4e:0e:69:16:c0:7f:5c:40:b7:5e:2b:76:f2:25:
         5f:20:d8:31:8d:21:cd:26:9e:c1:4d:39:42:ad:93:93:57:ea:
         fe:19:53:f5:21:a1:30:96:98:76:82:1b:ef:ed:f0:63:31:fa:
         21:42:39:97:50:d2:09:75:bd:26:0c:87:c5:81:7f:2d:23:4b:
         a8:67:bd:13:b4:4e:83:66:16:ea:3c:80:4c:89:26:e4:6e:31:
         03:f6:fc:4b:dc:53:6d:23:e7:b2:6c:ee:5d:cb:c3:1e:79:6b:
         5a:7d:a5:ec:6f:17:d8:74:7b:0e:de:9d:1c:0c:f0:2a:e1:c9:
         85:d8:a5:1d:57:aa:67:9f:4e:36:6d:38:4f:d8:4d:5f:c4:e1:
         ca:fd:0c:29:b2:a5:ba:7f:37:3f:25:19:b7:16:81:98:b9:c9:
         06:96:a4:f9:76:24:24:fb:fb:88:d5:8b:74:2c:8a:53:0a:d5:
         32:81:d0:0e:bb:b1:77:4b:07:21:93:eb:b1:3a:fc:9e:e2:6c:
         7a:e7:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:17 2026 by rpki-client