Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          0iOIPj8wBblzTnptlqbfOdS9ddVlwpJr6fXRDt1xMPA=
Subject key identifier:   E5:C7:1F:5E:DC:8E:03:EA:EA:99:97:F7:57:87:C1:C5:A7:59:4F:0B
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          43
Signing time:             Fri 17 Jul 2026 09:46:05 +0000
Manifest this update:     Fri 17 Jul 2026 09:46:05 +0000
Manifest next update:     Fri 24 Jul 2026 09:46:05 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: jkfvgFoypZ3S1/oQiwNPV8wI05GR2q3kkJdx8570wKs=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Jul 17 09:46:05 2026 GMT
            Not After : Jul 24 09:46:05 2026 GMT
        Subject: CN=6a59f9dd-605c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b5:3d:22:25:fd:d5:9f:2a:e3:9a:7f:9d:c4:
                    33:31:e6:82:26:f9:3a:33:df:eb:a7:e5:4b:e7:34:
                    83:4f:98:81:9e:4b:f7:00:03:1e:16:44:64:01:31:
                    73:35:ff:ca:b9:48:ff:93:46:9b:8e:9f:d2:da:d0:
                    86:95:63:fa:1f:27:a1:68:7d:7d:b8:c4:88:8c:2f:
                    bb:54:f7:89:50:a9:8a:6c:ca:7a:3d:27:a2:9a:63:
                    f7:72:c8:f6:11:de:11:c3:a8:8d:04:0b:31:63:6f:
                    3a:18:35:5d:34:b9:53:a2:7c:1f:09:2a:34:7c:98:
                    2e:cb:1e:49:db:3d:6d:1f:c4:05:9c:61:15:0c:70:
                    c1:5f:50:ab:6b:47:4a:3c:f5:30:1b:fb:e3:d7:0a:
                    01:b5:2a:19:2b:62:00:da:29:2a:4c:01:16:c7:ac:
                    1c:5a:a5:e4:c6:5e:00:2f:58:be:09:73:3e:ac:52:
                    8a:e2:a5:6e:99:bc:1f:4a:05:17:ce:75:ea:f4:31:
                    f8:96:83:94:b8:2d:45:d1:19:bf:d2:f9:28:89:e5:
                    44:bb:d1:91:f6:42:c9:f1:a2:cc:31:3c:78:66:8d:
                    d6:8b:d0:4e:3b:31:4d:83:39:e4:a9:71:f8:5a:b8:
                    92:b4:a7:e5:30:94:0c:e0:f3:22:8f:ee:49:e0:6e:
                    4b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C7:1F:5E:DC:8E:03:EA:EA:99:97:F7:57:87:C1:C5:A7:59:4F:0B
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:31:7a:d9:02:28:86:d3:c1:61:1f:4d:e7:a0:b5:dd:ea:bb:
         20:5d:87:61:c0:a5:c5:53:a0:25:26:3f:b2:19:2e:21:f9:ed:
         7c:40:46:ea:c6:5a:8e:54:63:40:1b:7f:96:e9:65:ac:5b:59:
         5a:f3:be:df:83:fd:c3:75:91:e7:63:fa:83:2f:8c:93:70:06:
         a4:3e:18:4b:14:fb:d9:10:f7:87:bb:9e:44:b3:c1:67:35:69:
         15:3b:36:58:3d:82:a3:2a:d0:d0:8a:56:af:40:3d:93:8d:f9:
         4b:6a:65:6f:06:8e:09:91:e1:66:01:a7:ab:ac:b3:0b:85:da:
         e4:c6:8e:f5:72:d7:ae:73:c1:9e:97:21:84:98:67:6a:26:a4:
         b4:ed:30:98:18:6b:a4:c5:6a:19:71:9b:88:4e:44:cc:2a:b8:
         d6:24:07:89:c1:56:cb:e8:8d:4e:6e:fa:d5:71:5c:04:36:7f:
         b3:44:45:8d:a5:5f:c4:20:20:73:bb:a2:80:ac:6c:6c:d7:49:
         97:35:9f:2f:ff:c7:e7:29:8b:5c:50:21:ce:90:94:4e:02:25:
         91:aa:37:a5:bb:bb:96:54:7b:c5:5e:81:bf:1e:d3:a0:66:a2:
         da:fe:ad:d7:f0:9f:d7:74:bd:6f:d5:9d:68:4a:b8:00:96:64:
         5f:f5:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:35:04 2026 by rpki-client